INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.55' (ECDSA) to the list of known hosts. 2018/09/22 13:38:45 fuzzer started 2018/09/22 13:38:47 dialing manager at 10.128.0.26:46055 2018/09/22 13:38:47 syscalls: 1 2018/09/22 13:38:47 code coverage: enabled 2018/09/22 13:38:47 comparison tracing: enabled 2018/09/22 13:38:47 setuid sandbox: enabled 2018/09/22 13:38:47 namespace sandbox: enabled 2018/09/22 13:38:47 Android sandbox: /sys/fs/selinux/policy does not exist 2018/09/22 13:38:47 fault injection: enabled 2018/09/22 13:38:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/09/22 13:38:47 net packed injection: enabled 2018/09/22 13:38:47 net device setup: enabled 13:41:43 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="bf16000000000000b707000001000000407000000000e0ff40000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x99, &(0x7f0000000280)="c20000000aedfc735f06e6bf675f", &(0x7f0000000380)=""/153, 0xffffffffa0008000}, 0x28) 13:41:43 executing program 1: setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) 13:41:43 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') exit(0x0) fsetxattr(r0, &(0x7f0000000000)=@random={'btrfs.', 'comm\x00'}, &(0x7f0000000040)='comm\x00', 0x5, 0x0) 13:41:43 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x61, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="000b00000000000006"]) 13:41:43 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000540)='veth1_to_bridge\x00', 0x38f) shutdown(r1, 0x2) 13:41:43 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000000003, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) syzkaller login: [ 214.928019] IPVS: ftp: loaded support on port[0] = 21 [ 215.027496] IPVS: ftp: loaded support on port[0] = 21 [ 215.042933] IPVS: ftp: loaded support on port[0] = 21 [ 215.052977] IPVS: ftp: loaded support on port[0] = 21 [ 215.059063] IPVS: ftp: loaded support on port[0] = 21 [ 215.063718] IPVS: ftp: loaded support on port[0] = 21 [ 217.252722] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.271235] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.291084] device bridge_slave_0 entered promiscuous mode [ 217.318150] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.334026] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.350806] device bridge_slave_0 entered promiscuous mode [ 217.398223] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.413738] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.422020] device bridge_slave_0 entered promiscuous mode [ 217.431913] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.446981] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.454992] device bridge_slave_1 entered promiscuous mode [ 217.461946] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.470959] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.479778] device bridge_slave_0 entered promiscuous mode [ 217.489552] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.498447] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.506431] device bridge_slave_1 entered promiscuous mode [ 217.520021] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.533762] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.541531] device bridge_slave_0 entered promiscuous mode [ 217.551628] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.562242] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.570348] device bridge_slave_0 entered promiscuous mode [ 217.581005] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 217.590001] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.599532] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.611262] device bridge_slave_1 entered promiscuous mode [ 217.621533] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.638600] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.654407] device bridge_slave_1 entered promiscuous mode [ 217.667109] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 217.685111] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.691548] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.721220] device bridge_slave_1 entered promiscuous mode [ 217.730900] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.738072] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.746188] device bridge_slave_1 entered promiscuous mode [ 217.754711] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 217.775227] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 217.784987] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 217.792618] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 217.817519] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 217.874890] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 217.921669] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 217.932544] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 217.986490] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 218.046929] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 218.204160] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.220779] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.303792] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.341616] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 218.373962] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 218.386707] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.418533] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.431738] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.455779] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 218.489418] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 218.563188] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 218.604813] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 218.885007] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 218.891989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.970096] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 218.995681] team0: Port device team_slave_0 added [ 219.104646] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 219.115251] team0: Port device team_slave_0 added [ 219.129015] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 219.144818] team0: Port device team_slave_0 added [ 219.154125] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 219.161591] team0: Port device team_slave_1 added [ 219.182685] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 219.192433] team0: Port device team_slave_0 added [ 219.214232] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 219.221698] team0: Port device team_slave_0 added [ 219.255788] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 219.271779] team0: Port device team_slave_1 added [ 219.284300] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 219.294059] team0: Port device team_slave_1 added [ 219.303828] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 219.314233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.322470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.348829] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 219.357713] team0: Port device team_slave_1 added [ 219.364949] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 219.378810] team0: Port device team_slave_1 added [ 219.399521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.424658] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 219.432078] team0: Port device team_slave_0 added [ 219.474308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.485134] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.499119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.540257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.557493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.599190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.618058] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 219.633506] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 219.640913] team0: Port device team_slave_1 added [ 219.664086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.672169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.685154] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 219.699936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.715312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.734044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.744775] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 219.758759] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 219.774863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.793595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.817524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.834329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.848875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.860613] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 219.871088] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 219.881446] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 219.896494] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 219.904629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.912602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.935897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.954878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.972717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.981280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.989593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.997629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.009348] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 220.019605] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 220.037412] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 220.046872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.074107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.081993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.110326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.118321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.126262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.138111] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 220.152486] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 220.165597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.174376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.182293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.223228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.308708] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 220.329478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.344137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.361069] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.367610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.374614] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.381011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.403886] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 221.417106] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.423527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.430215] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.436660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.456982] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 221.583009] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.589459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.596207] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.602577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.612210] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 221.626450] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.632839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.639563] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.645996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.658316] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 221.669961] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.676429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.683125] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.689580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.720878] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 221.893588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.916997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.944599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.951811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.967942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.025587] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.032017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.038752] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.045171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.074714] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 222.977223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.443716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.534642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.743715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.768096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.914054] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 226.963558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.024617] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 227.186924] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 227.236315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.296386] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 227.346489] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 227.352661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.363900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.392982] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 227.508280] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 227.528093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.553007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.663783] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 227.669985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.694639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.814737] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 227.820936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.829613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.851695] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 227.862526] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 227.885604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.893068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.935370] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.010136] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.195992] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.275221] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.323429] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.416360] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 228.422746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.441508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.843814] 8021q: adding VLAN 0 to HW filter on device team0 13:41:59 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000040)="120345", 0x3}], 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x5) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000004c0)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174) 13:41:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000380)={0x8, 0x20}, 0x2000) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0xffffffff80000000, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000100)=""/212) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)) 13:41:59 executing program 1: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x7, 0x10, 0x8, {0x0, 0x7530}, {0x77359400}, {0x4, 0x6, 0x8, 0x5}, 0x1, @can={{0x4, 0xfe1, 0xb84, 0x1}, 0x1, 0x3, 0x0, 0x0, "8134b1cf1b6e4d66"}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18}, 0x20) fcntl$getownex(r0, 0x10, 0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x5608) mmap$binder(&(0x7f00004be000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r0, 0x0) close(r0) [ 231.156442] hrtimer: interrupt took 35069 ns 13:42:00 executing program 0: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)) sendto$inet(r0, &(0x7f0000000000), 0x298, 0x20000802, &(0x7f0000000080)={0x2, 0x404e23, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) write(r0, &(0x7f0000000900)="89f9d765312b4044aedbefb0967bdae72ee5094371136a6477ba0a51a2969dbc2d4028ac7b5af67f178f9314ea2bb3ac1c442eaf749c21ae2af8e39a40c3dc032e6f8eb738786a79df71302ff3b5d42731597d995bed6103ff63b9a908bcc05e02e4f4f692bdf4d3282f62d6928117f82c2dae48742dac857de846096e82c1a02e1edcadda721a3f8dc9a54da05d467ed35b6f931d8686986960e756048c61c2a2c374c318d21d7a7ef550779190066e82ea3f6724a9f61ff028ec7e8d7a04352e7a78f777a68b823abb646bdc55dbde285ce15bf45820f0ae20e4023f57c71f8b41e08eff14c3441485c6f54a30750c780852dad879d6d4be7243bd07f841f8903fcb65f7c23d6b4f70fe48b54577449cfcbc4d5dbefb8b465d45bc2d11afbe7bfbe6ca76ac259e634eebf8db694ff02fe2b4c80783b443ef68287e9cf7cbcc2ee196f10c4ffb3f59e4921e0f9f08cba9a2c56c49fa7465b4836da5b2d9b142763889caa718d8a4fcb2f3ef6dc6185708fb1e0f9081d29fb3defae8c525f47437c7835b4eac8f86e2a22a81eff4120340e4a379446aac45dbff791d147805cd2748d74b8996c9b51ec03b410ef8fe126117fbf106795bc1b25d8dd786b6496bd743b7c75c638b516214ff56ec99a9c0f2919fa781cd8b4f2f2e425a6780c630a05c8e60011bc8e10055a6b6b652e5a13c73fd96f79038a65d6991ac38899ab98486d92bbcffdcf39a08a248ae1045ff8c6123de2f15d9ac360a3497c07001a3a1936ff1c03194ace131d380f515629ff016bd890ff822704c0db8bc68efad2eace5466628e7d6c2f2b3043698c46fdd62588fc54b72a786af0d026353879892c58007f7988a3f2240a43303218cc1df27807bfbde117c505f060396850a82459830a89a6a8601ea2e47f2e41379d110b96576f8f7705bba7ec63d6b44ccf84073cf9bdcf1aee48cb60c2f6dd3e89f3626a5e23339ea99c918d76a43fecf5601f7550e8eaefa4d84f1143320599daf7699858b2bf408e9093aa91d6dd9ae39d8decf3f7a199b0c1918d47be3b7aeff9a8c10efabe787b43141e7abaa4317158864b0361568140ab79cade1223c3ef81da4c4eefdd5b21fcc1b87872fc3b346737905589b84ba9814679b7510ed9b4f290083ee634ae12243ccc63413d7bc35eee0d1a4bc9dd33c37f5130303edddfc2636ffbf1ee0febb953436710c2ed9bd001d2ebe878788ddf7f7ad55b7a8cbcb348e82cd65b59315858086606115d04a3cda0e4af2a703afe09e4afedf00d5fbb2284df9af1d1ec9f15356c58fdcde45fff250568347f3b0b49e11e44c0a4d98a1e3393ce5d76614990f23b2e146842b166fb070894c128f957b0cc7d80a16275efd15659e0f81990062ebfdf9454d12e63d1ce1dad7848fcbab642a0d62ebb17abc824883e4c6e1e81992f28f5bbd7b26e2645c7941b03dd2f27c29baa2412976a05fa13d8fc4d6bd152a8568d986a9cf605b8b4a61600481e01bdd74c96d73390518add968100ac742aaf5dd91b4ccf0868ee3ef7f12c32298737dea65bd5d7161dd679b4dd6799aa086bf3b8c889780ac102b7b1ebcf2569dd77f201d74d94a61400ced9c613414012b451628a96e6cc8fe738e964940f7b753065677776f3b5398975aeac974fced560667cead03a8976eb42296f4e1bca5588d5d544cbca8588215a2f5ef7a5fc1a07438d3a3e05d21eb30d46f1688543d4327d36e07635396eaab4e9bc862ee9c7fa24de38c5cbf8fa5afd024116bc84854d01072165ecc4bb415d94a333e0d91e9cf6fda5a2c244a585e3a32c95398f44800c578faf4a2ccc5979664db7a55aa5cc02789f84321ccaeed4f37dd48c8d1484ade0588fc4255ec8780534a693e2bfe88b622034552084492c6757429239bbe8dad8b904e58007639ca773344040a441dc0027a46c22198f3d0b0588e164881a9fc7a85a63c459b0d002e3d890edd250742d363e85250badb91a734759baf773c32b177d36eefb662be70", 0x595) sendto$inet(r0, &(0x7f00000003c0), 0xfffffdef, 0x1f4, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 13:42:00 executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/user\x00') seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6, 0x0, 0x0, 0x407ffffffd}]}) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x20c400) setsockopt$inet_dccp_int(r1, 0x21, 0x0, &(0x7f0000000040)=0x8, 0x4) setns(r1, 0xec4db530b7774cb8) 13:42:00 executing program 4: pkey_free(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000009c0)=0xe8) bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10) r1 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="000000000900889908ef2bb1fe90010000000000000000eeffffffffffffff0000"]}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140)=0x9, 0x4) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f00000004c0)={@remote, 0x0}, &(0x7f0000000200)=0x14) dup2(r0, r0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000400)={r2, @loopback, @rand_addr=0x1cb}, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fcntl$notify(r3, 0x402, 0x13) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) exit(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x1ff, @local, 0x1}}, 0x9, 0x7, 0x8, 0x5, 0x4}, &(0x7f0000000340)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x9, 0x20}, &(0x7f00000000c0)=0xc) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback}, 0x10) 13:42:00 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffff7, 0x10000) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x20) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0c006d1200006344812954a0b826c820a3"], 0x11) clone(0x2004, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r3 = getpid() r4 = socket$inet_dccp(0x2, 0x6, 0x0) sched_setscheduler(r3, 0x5, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3bdb5c25785f777ec8c22c86074926a8b34add1c8344bdec067ffae34b9f776cde2f8f559513356f5e2aef712e352565d38c3bb71f4e02de2b35709fe01f2498edcd90f62d66e7d12458ebcbfe20", @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRESDEC, @ANYBLOB], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="77753bfbfddc64f35631c2487e431729840d765eb1214beb711f7f87a30a81ae74c280d568f3980ce7cb189e7f0f1adddd21fccec5bc405c0218f8ec96553ad7f3819623011ac1a2c00539e1fd21aca31a7b3ccd8200e84a5b19ed3b2f34d38432eeb3917424f4beae8b6e4d3c84dd9b4f00218702cceea0763cb1184519295b838ca62bdd1dab9a04854a592d7799b32e666e4265344f", @ANYRESDEC=r3, @ANYRES16=r0, @ANYRESDEC, @ANYRES32=r2, @ANYRESOCT=r1, @ANYRES64=r4]]}) 13:42:00 executing program 5: r0 = accept4$llc(0xffffffffffffff9c, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000180)=0x10, 0x800) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f00000001c0)=0xa9, 0x4) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) bind$inet(r1, &(0x7f00000a9000)={0x2, 0x0, @local}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @dev, 0x1f}, 0x1c, &(0x7f00000002c0), 0x0, &(0x7f0000000300)}, 0x0) setsockopt$sock_int(r1, 0x1, 0x3d, &(0x7f0000000100)=0xffffffffffffffff, 0x4) 13:42:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000006c0)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005800)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000005840)="f98088703a27b9df5d9dcc181e7a2768", 0x10}], 0x1, &(0x7f00000000c0)}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/155, 0x9b}], 0x1}}, {{0x0, 0x0, &(0x7f0000004d40), 0x0, &(0x7f0000004d80)=""/158, 0x9e}}], 0x2, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) [ 232.056186] syz-executor0 (7139) used greatest stack depth: 12296 bytes left 13:42:01 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000140)={0x7, 0x6d, 0x1}, 0x7) timer_delete(0x0) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r2, 0x80003) sendfile(r0, r2, &(0x7f00000000c0), 0x8000fffffffe) [ 232.794449] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:42:01 executing program 3: syz_emit_ethernet(0xe, &(0x7f00000000c0)={@random="2453660618b9", @random="0d217d621603", [], {@generic={0x88a8}}}, &(0x7f0000002280)) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x5) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x10000, 0x0) futex(&(0x7f0000000100)=0x1, 0x9, 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x1) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000080)='syz0\x00') ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f00000001c0)={0x1, {0x77359400}, 0x7, 0x40}) 13:42:01 executing program 1: r0 = memfd_create(&(0x7f0000000040)="00ac3d9dd2dbe6bfb408ed634a8e84d44e129b1f09bd112b865416a3b3ae309f393fef6fa46b01323ea19c86781c9f841935de975f097ef3591222705ec10f", 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000002c0)={0x30}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) io_setup(0x3, &(0x7f00000000c0)=0x0) io_destroy(r2) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={r0, 0x0, 0x80000001, 0x80000001}) fchownat(r0, &(0x7f0000000140)='./file0\x00', r1, 0x0, 0x200000000001000) 13:42:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000340)}) socket$inet6(0xa, 0xf, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f00000001c0)}) pkey_alloc(0x0, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r1, r2) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x1, 0x0, &(0x7f0000000240)="ce"}) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r5, 0x10d, 0xc, &(0x7f000079bffc), &(0x7f0000350ffc)=0x4) listen(r0, 0x101) [ 233.084956] binder: 7214:7215 ioctl 8040ae9f 20000040 returned -22 13:42:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) socket$inet(0x2, 0xa, 0x1) sendto$inet(r0, &(0x7f0000000140)="dc", 0x1, 0x4008000, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0xffffffd1, 0x4000000, 0x0, 0x3b0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x804031, 0xffffffffffffffff, 0x0) 13:42:02 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000fc0)=""/40, 0x28}], 0x1}}], 0x1, 0x0, &(0x7f0000006200)={0x77359400}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000a00), 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000000c0), &(0x7f0000000280)="19", 0x1, r2) r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040), &(0x7f0000000580), 0x1b8, r0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r3}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000000180)={&(0x7f00000004c0)={'sha224-generic\x00'}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) bind$can_raw(r6, &(0x7f0000000200), 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000140)=0x4, 0x8) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 13:42:02 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast1}, &(0x7f0000000340)=0xc) r6 = geteuid() accept$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f00000005c0)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000600)=@acquire={0x284, 0x17, 0x308, 0x70bd26, 0x25dfdbfd, {{@in6=@local, 0x4d3, 0x2b}, @in=@dev={0xac, 0x14, 0x14, 0x1b}, {@in=@loopback, @in6=@mcast2, 0x4e21, 0x5, 0x4e20, 0x1000, 0x0, 0x80, 0x20, 0x6c, r3, r4}, {{@in6=@mcast2, @in=@broadcast, 0x4e22, 0x0, 0x4e23, 0x4, 0xa, 0x20, 0xa0, 0xff, r5, r6}, {0x0, 0x8, 0x7fff, 0x8, 0xfff, 0x81, 0x8001, 0x20}, {0x9cfd, 0xffff, 0x100000000, 0xffffffff}, 0x204, 0x0, 0x3, 0x0, 0x2, 0x3}, 0x0, 0x1, 0xd03, 0x70bd26}, [@algo_auth={0x8c, 0x1, {{'rmd128-generic\x00'}, 0x220, "118be0219a3a8389fcaafe21e14119bc8e78cc36f5ba57bc2e24cf31877bf7bd8d125d6f45a4a6359d27e477302ef7262cd23d876b8ea6dda5d2be3fdb14789dcf80cb17"}}, @lifetime_val={0x24, 0x9, {0x7, 0x7ff, 0x3f, 0x3}}, @policy={0xac, 0x7, {{@in6=@local, @in6=@local, 0x4e24, 0x10000, 0x4e20, 0x48f2f950, 0x2, 0x80, 0xa0, 0x29, r7, r8}, {0xfffffffffffffff9, 0x9e60, 0x400, 0x7671, 0x2c30000000000000, 0x7, 0x80000001, 0x100000000}, {0x3, 0x1b5f7fb, 0x6, 0x9}, 0x7, 0x6e6bb3, 0x0, 0x0, 0x1, 0x3}}]}, 0x284}, 0x1, 0x0, 0x0, 0x2400c000}, 0x40000) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)) 13:42:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = msgget(0x2, 0x300) msgctl$IPC_INFO(r1, 0x3, &(0x7f00000001c0)=""/142) io_setup(0x8, &(0x7f0000000100)=0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2, 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2000072e}]) 13:42:02 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x400001) 13:42:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x64) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0xd, &(0x7f00000001c0)={0x0, 0x2}, &(0x7f0000000040)=0x10) 13:42:02 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) socket$inet_udplite(0x2, 0x2, 0x88) clone(0x4002102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000140)) fsetxattr(r0, &(0x7f0000000080)=@known='security.SMACK64MMAP\x00', &(0x7f0000000180)='vboxnet1.\x00', 0xa, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x4000, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000001c0)=0x5, 0x4) 13:42:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r1, &(0x7f00000024c0)=[{{&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000012c0), 0x0, &(0x7f0000001340)=ANY=[]}}], 0x1, 0x0) read(r2, &(0x7f0000000180)=""/229, 0xe5) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x3, r2}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3000, 0x1}) [ 233.396572] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 233.431313] syz-executor2 uses obsolete (PF_INET,SOCK_PACKET) 13:42:02 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x100, 0x100000000150) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="66be", 0x2}], 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000040)=0x330) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000100)=""/16) 13:42:02 executing program 3: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x840) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer2\x00', 0x6000, 0x0) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x2, 0x6, 0xb94, 0x9, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x50) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x8) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x3fffffff, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) umount2(&(0x7f0000000500)='./file0\x00', 0x0) getrusage(0xffffffffffffffef, &(0x7f0000000940)) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000fc0)={0x8, &(0x7f0000001340)=""/4096, &(0x7f0000002440)=[{0xee3c, 0x7b, 0x52115c4b, &(0x7f0000000b40)=""/123}, {0x3ff, 0x9e, 0xcc2, &(0x7f0000000bc0)=""/158}, {0x0, 0x11, 0x10001, &(0x7f0000000c80)=""/17}, {0x20, 0xa6, 0x100000000, &(0x7f0000000d00)=""/166}, {0xcd, 0x48, 0x8000, &(0x7f0000000dc0)=""/72}, {0x0, 0xb6, 0x0, &(0x7f0000000e40)=""/182}, {0xb9, 0xaa, 0x0, &(0x7f0000000f00)=""/170}, {0x2d60, 0xf6, 0x0, &(0x7f0000002340)=""/246}]}) fallocate(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000f4) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000007c0)={'nr0\x00', 0x3301}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x480400, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x20) syz_emit_ethernet(0xbf, &(0x7f0000000700)={@dev={[], 0xa}, @remote, [], {@ipv4={0x800, {{0x7, 0x4, 0x3, 0x7, 0xb1, 0x67, 0x9, 0x8, 0xff, 0x0, @broadcast, @multicast1, {[@cipso={0x86, 0x6}]}}, @igmp={0x36, 0x0, 0x0, @dev, "69491495f2b6037519fa0c43c090eccbf08e3fbe0f2288ac752c43a6b5f34fed1666c1e2829e62b5b2e2f110bcb4cc0d162b896d9911560ee6c4110f407b974ea1e81ca168e8ec26f1d17483f9e631e0f30a131a6d7a8cf6edd2d08b64d685a6111d1df2b9eeddf7b4a421149607de924168a9b00569b6e9bfc9bcff135b74d8b7587c44e8cfc6e684ea260020"}}}}}, &(0x7f0000000640)={0x1, 0x2, [0xd9b, 0x6fa, 0x10b, 0x685]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000080)={0x7}, 0x7) setsockopt$inet_udp_int(r3, 0x11, 0x0, &(0x7f0000002500)=0x2, 0x4) socket$inet(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2, 0x1}, 0x10) syz_emit_ethernet(0x1, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000800), 0x4) getpeername(r2, &(0x7f0000000880)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000b00)=0x80) syz_emit_ethernet(0x1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="01802400000000ffff000000000000e0800001000000010401907800d7050200f53475000000000000000000000000000000"], 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000006c0)={0x1, 0x1, &(0x7f00000003c0)=""/13, &(0x7f00000005c0)=""/115, &(0x7f0000000a00)=""/193, 0x4}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ppp\x00', 0x0, 0x0) 13:42:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000012c0)={&(0x7f00000000c0), 0xc, &(0x7f0000001280)={&(0x7f0000001200)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) ioctl(r0, 0xfffffffffffffffd, &(0x7f0000000040)="a33a0f43cd1fa73045858ea0e0684fd3f3b775b0593832d63fcc8708e1a40d8c051cf32d5a883d8a7528be6f1793cf37ec1739549ed9d29de1d0defada50b78c5f7c62862aea4f65caa51640a1564b25860042479d80ef5fe7c92214930bb0e2deed1e72917d1b49f5df7249a4") 13:42:02 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000019c0)={'vcan0\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000001a00)={@multicast2, @local, r3}, 0xffffffffffffff38) open_by_handle_at(r0, &(0x7f00000000c0)={0xa1, 0x54, "8763655ba488afda46524e2fbdc1af1b92d707fbd2b5419a488d8561f04f848de3811b930e8f9f3fefbd10d4d907d404de93403a254ea05ba8208035a7d9a8e2fbf6043c33775428c2a652dad47920059f0e5b74e81a0eb64d5556e99815da4f91233e690fe9829ce04942c6826cb3c837cd50b2eb2f3cbc16b428dc0bb88f025f5464cb50bead8b04edcb900db29f138ec37ebf215481df79"}, 0x40) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000380)={0x8, 0x20}, 0x2000) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000180)="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") socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)) [ 233.685878] 9pnet: Insufficient options for proto=fd [ 233.704636] 9pnet: Insufficient options for proto=fd [ 233.741211] 9pnet: Insufficient options for proto=fd [ 233.748552] 9pnet: Insufficient options for proto=fd 13:42:02 executing program 2: syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x1, 0x200) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x1000000002806, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000001c0f6d1ea09eff0f0000f593f95592455d52b1b4ef33ed3cd5daf8af299371bace1ae8a91723837c3276d1606dd412f854bcc02264a6034f6628e43c50b298162a4bdd3ff01b314f5c12df58c1e0b286bde716327c2a28d8e95009de2ca6805800b754f0d17ff0eba8c6c2117d5209415a76278c0d96bbc072445287"], 0x119) write$UHID_DESTROY(r0, &(0x7f0000001280), 0x4) 13:42:02 executing program 5: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000200)={{0xa, 0x4e20, 0x2, @ipv4={[], [], @rand_addr=0x5}, 0x73}, {0xa, 0x4e22, 0x0, @loopback, 0x2}, 0x0, [0xffffffff, 0x0, 0x6, 0x10001, 0x4, 0x6, 0x0, 0xfff]}, 0x5c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x8000, 0x148103) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x12, &(0x7f0000000000)=0x8da, 0x0) sendto$inet6(r3, &(0x7f0000000040), 0x10, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) getpeername(r3, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, &(0x7f00000000c0)=0x80) 13:42:02 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000080)=0xaa) sendmsg$kcm(r1, &(0x7f00000007c0)={&(0x7f0000000140)=@ax25={0x3, {"b1920aab55b408"}, 0x2953}, 0x60, &(0x7f00000000c0)=[{&(0x7f00000001c0)="a60ece7af10c4081532fa77f64d4754604c96d2f7449e1230c01350f119e1025f1647dbf29e2e4a93fc2fda3ead7c161833ad0fb5d7d5471abad58ea7bd44baed15790b06af69ecabf7991b1e3ab7b62faffbf39bd2b84c9bedc950233a9986df9155ac916966ff61f3da31efae1edca5040721c17a15bf085e6db36a811bc845a3724", 0x83}], 0x167, &(0x7f0000000280)=[{0xf0, 0x113, 0x10000, "abb4ea94245b51ae695cb3b02afdbe70750aaa5614691777a21dade867f797a0b208b6060fe43217a7e63f22b74cff2f545183f12611ef9b778b6632f2dfc582f70605b5d6d58c404ddce0b1b9fc589d55b8c8f7700afb92b9d883a95ad4bea093a3ce8fbbdb73efe591d0490034c8053a9b8adca9e7bee2fda41d46f4162d5e8da33c71eb848a8d79a68e384f4f119c1df36c7b4c872ac8dd91b85769178c84dbb99663720b392e3d2f36f0ea69f565ca66f69fcdcdb5b319714b82eec52877f235a04023d5a4247bf532e7a37b7ed2bd913d38b61c9057e3"}, {0xb8, 0x13f, 0x6, "28505dd437564114da79ff721b30673915533f1e6a28cc61f834b49a5b31d74631da50f078c1b705a8ea8b8d465e08d030bfa12e077781935e85144bef2fbb737686786d4dc3a650180443ec17f9d32e8b635d2c75df031f9bd2220bc6334a5f44c6db44126f1497ec528813f9330f5e1317b5759b4fc94dcb908a6cf11d954add99748ab67d84ab8b4aff100555b9a62bd9b98aa811ea577fee8b3aded17a29d71d"}, {0xd8, 0x108, 0x100000000, "ae0368a0d3835919d8dd12370ea8d63405059570f169551646e20a0870d10bcbd451e1cfbba415990072f06fa6798f0d0fa73789385a4244ce29fc93a269ff752193527d24884f6b79eb6de9ad4606726145b751a06881d97ebd22843002f68ad573dc9fcc3b349698d97be4d6d67dc68ddc1492ffcf136918f924f1a89fab3826f150d8e3bdfb6bdbbcb6c5e2a7b612101de46533f24bc6747097ee289cabbae54ff91694815a5a1713e6c2341ce548077fba0ac20c6ee8f93a3a4419cae5f5c3"}, {0x88, 0x1ff, 0x90c4, "6826c54d87be419b34c30586acc17fb721721e751b4b3e52b5171439ecbdd2c0f9ad5f5de986d43f0f2c04e36ac54fa930f9b9119f82be164330978490a9edb0630ad3d435af8dc770cda40f002729c9ecff711aa0aa9c139f9b87b0c4d0b44d745e9a343bf5a942036cb6f7661a86dc788838e4"}, {0x18, 0x1ff, 0xffffffff, "a0b282bfe86f"}, {0xf0, 0x117, 0x7fffffff, "ac0addfb72258001cfe1af3ccd1c935b91c8ab711a9658dd219ce4dd3feb5cfb957553d8f0e20e563a888273e5eec82dae3b49fc4b16857be17001cec8dfd48877497368b8b09b2bee60c2a73716af41950d49e07697b55b326ff9b32616cc099176a5f6273a37e4c586fc264dd1afeebf1faeab7ce0a759ac0dd28c8a637f79fc323aed04e4186e8d208f2a6aafea43c4501bff35d9b07ff9bca9e0064376642830a193bba00e50fef10ad114bda48b97a85f624bb3d320a0c63afab98d62eeec999cb3806a841da6ebaaad19f4552ddb9d8a3ff58548f1b42981e420d5e7e0"}, {0xb0, 0x112, 0xa85, "075474ca46f1644fe4f064cd010bb1dcd4b787545860e9854867bc4d9eba786cb66daaddb068aff39572977071755b3f4addc4cbe4c923eeb5e8bf5571c405e353617eaf79bafea34469ce7c3fe7cf89e646337f7f4fa4cbd6cad4a8001272f7589d53b0284485a7ff508a1710c5363f6dc5f2c4d494dc5d498e91da4cda0ea4ec4d071de27433a06002f6edaaa82db2385eee9354f312f972f1503f"}, {0x48, 0x19f, 0x7, "c13c7472722fa44d875c89e72f13ebc412878ed5caa212b92cdf1a129bbdaac197f87c792e05a002141cc78911005bdfe2"}, {0x38, 0x116, 0x100000001, "9edfa068e43e60c42e2d42ebae5d83ed55e232788969901025b951a61d2c14475dbc02ba6a"}], 0x540, 0x4004}, 0x4881) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a00090000000600004d9b0000000000007e", 0x24}], 0x1}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000800)={@ipv4={[], [], @rand_addr=0x101}, 0x101, 0x3, 0xff, 0x2, 0x1f, 0x2ca, 0x82}, &(0x7f0000000840)=0x20) 13:42:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20848}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000224, 0x101d0) setrlimit(0x4, &(0x7f0000000240)={0x6d, 0x3ff}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x243fe, 0x0) gettid() ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={0x8ba, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22}, {0x2, 0x4e22, @broadcast}, 0x380, 0x12, 0x3ff, 0x3ff, 0x3, &(0x7f00000000c0)='lo\x00', 0x3, 0x7, 0x1}) write$FUSE_LK(r2, &(0x7f0000000280)={0x28, 0x0, 0x6, {{0x401, 0x7, 0x2}}}, 0x28) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x3a, 0x80, 0x14d, 0x1fe, 0xaf58, 0x400, 0x0, 0x3f}, &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000480)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)=""/162, 0xa2}, {&(0x7f0000000300)=""/47, 0x2f}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f00000006c0)=""/178, 0xb2}, {&(0x7f0000000780)=""/70, 0x46}, {&(0x7f0000000800)=""/129, 0x81}], 0x6, 0x0, 0x0, 0x1}, 0x101}], 0x1, 0x2102, &(0x7f0000000940)={0x0, 0x989680}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0x80000000, &(0x7f0000000200)={0x4}, 0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000700)=ANY=[]) mount$bpf(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)='bpf\x00', 0x0, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00)='bpf\x00', 0xedc0, &(0x7f0000000580)=ANY=[]) 13:42:02 executing program 3: gettid() r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x3, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)={r1, 0x0, 0x7}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000140)={r2}) [ 233.919716] mmap: syz-executor5 (7277) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 233.964619] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 13:42:02 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="727a2c956ad6b003cbfa87d45dd434b6054ed7290b6137f0e8dd522685cf3fef4fe78ddd62476ebbbe5e78a4a5c149f07309460a0bd5f73aee85d2d4479d74b9f7ab609e28c01d91422fe35fa05deec561b6caff234a60454134ef2bea8bfb613578604f37ea7d3fb5345011b19eb9a6f91b080b18f0b72809714a12238c08c3a21593a9d778970d851805f75e482713ab363710d71f807dffecc0ee3218bda73a109498c5eced17945b3b100d5dd76818c61708fcca77ad6bdf6090e929c6bc99d6ecddf9747079a43f3506deece7a5b1"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000001c0)) mknod$loop(&(0x7f00000000c0)='./file0/file0\x00', 0x2004, 0xffffffffffffffff) 13:42:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0001000000ff000000000000c9030000ec000000010008000000000000000000002000000020000000010000000000006e5fbe5c0000ffff53ef0100010000006e5fbe5a0000c9040000000000000000000000010000000000800000002c", 0x5e, 0x400}], 0x0, &(0x7f0000000080)) r1 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x4000) getgroups(0x7, &(0x7f0000000240)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xee00]) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0xa00008, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L='version=9p2000.L'}, {@cache_fscache='cache=fscache'}, {@nodevmap='nodevmap'}, {@cache_loose='cache=loose'}, {@version_9p2000='version=9p2000'}, {@cache_fscache='cache=fscache'}, {@cache_mmap='cache=mmap'}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@nodevmap='nodevmap'}, {@version_L='version=9p2000.L'}]}}) [ 234.006373] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 234.065986] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 13:42:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x560000000000, 0x40) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x9) 13:42:03 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x117, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r3}}, 0x18) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) r5 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, "", 0x30}]}, 0x2) [ 234.194568] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 234.250355] EXT4-fs (loop1): bad geometry: block count 65280 exceeds size of device (2 blocks) 13:42:03 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f0000000140)=[0xee00, 0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff, 0xee01, 0x0]) r2 = getegid() getgroups(0x3, &(0x7f0000000180)=[r0, r1, r2]) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={r3, 0x7fff, 0x1}, 0x8) socket$vsock_dgram(0x28, 0x2, 0x0) time(&(0x7f0000000000)) lsetxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=@known='security.yvm\x00', &(0x7f0000000480)='btrfs.', 0x331, 0x0) 13:42:03 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000002300), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e6f002bffd2386c1778b243660a8bd5842fdf5baa20eb9708940cb9e0e68bf918c55dc7f88a83e6c547225b20abd1a84970ba1eb5f59eaf70c770a9f3c4fb5a1de31ccd478dbf31978b968655f29ccdbddd5a26128507e7a6e9af01c1fbd526dbd326fa7629ed611b8572cf88717a96d2805eee7184449d9f685e81da02eaccc3c8910ef000c74d3ce0a8d4371ca6fa5b463069760f1f6fc2"]) [ 234.518553] hfsplus: unable to parse mount options [ 234.644273] hfsplus: unable to parse mount options 13:42:04 executing program 1: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x2) 13:42:04 executing program 5: syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) 13:42:04 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000680)}}], 0x1, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/packet\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000140)=""/196, 0xc4}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000002c0)=""/56, 0x38}], 0x6, 0x3f00000000000000) 13:42:04 executing program 3: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0}) process_vm_writev(r0, &(0x7f0000000780)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)=""/243, 0xf3}, {&(0x7f0000000300)=""/2, 0x2}, {&(0x7f0000000480)=""/146, 0x92}, {&(0x7f0000000600)=""/161, 0xa1}, {&(0x7f00000006c0)=""/183, 0xb7}], 0x6, &(0x7f0000000840)=[{&(0x7f0000000800)=""/50, 0x32}], 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000880)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000000c0), 0x4) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000540)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in6=@local}}}}, 0xc0}, 0x8}, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00') 13:42:04 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x6000, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000540)='/dev/input/mice\x00', 0x0, 0x200) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d4ac41366175f8d3e36ebea895e69c0fa8a26c49f045c0ecccf3869848644b2", @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e36666d6c6530"], 0x2a) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000580)={0x0, 0x6, 0x1000}) splice(r1, &(0x7f0000000740), r1, &(0x7f0000000780), 0x4, 0xb) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x3fffffff, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) umount2(&(0x7f0000000500)='./file0\x00', 0x0) fallocate(r2, 0xffffffffffffffff, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x480400, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r4, 0x80605414, &(0x7f00000005c0)=""/155) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000eed000)={0x2, 0x1}, 0x10) syz_emit_ethernet(0x422, &(0x7f0000000cc0)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x414, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "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"}}}}}, 0x0) 13:42:04 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f00000034c0)) writev(r2, &(0x7f0000000700), 0x1000000000000110) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0xff, 0x86, 0x2, 0xfffffffffffffff9, 0x0, 0x3, 0x68800, 0x0, 0x7fffffff, 0x8, 0x7, 0x8, 0x14, 0x2, 0x4, 0xa6, 0xffffffffffff6214, 0x100000000, 0x5, 0x0, 0x8, 0x81, 0x8001, 0x2, 0x1c, 0x1, 0x4736, 0x60, 0x401, 0x7, 0x9, 0x8, 0x2, 0x0, 0x3, 0x3c, 0x0, 0x8, 0x2, @perf_config_ext={0x80000000, 0x481}, 0x400, 0x0, 0x9, 0x2, 0x7fffffff, 0x4, 0x9}, r3, 0x10, r0, 0x8) 13:42:04 executing program 5: r0 = socket$inet6(0xa, 0xe, 0x104) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000140), &(0x7f0000000000)=0x4d) r1 = dup2(r0, r0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) [ 235.792073] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 13:42:04 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x4200) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000480)={0x0, 0x271}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000500)={r2, 0x4}, &(0x7f0000000540)=0x8) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7fffffff, 0xc0002) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f00000006c0)=""/115, &(0x7f0000000580)=""/156, &(0x7f0000000940)=""/185}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4004af61, &(0x7f0000000640)={0x1, 0x0, [{0x0, 0x83, &(0x7f0000000880)=""/131}]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380), &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x7, 0x7}) 13:42:04 executing program 1: syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x0, 0x200) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) nanosleep(&(0x7f00000000c0)={0x0, 0x1c9c380}, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setsig(r1, 0xa, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="000204010003000035000000000000000000000000000000"], 0x1) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) [ 235.839827] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 235.883667] 9pnet: Insufficient options for proto=fd 13:42:04 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') ioctl$VT_RELDISP(r0, 0xb701) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000040)=0xe8) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@mcast1, r2}, 0x14) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000200)=""/58, &(0x7f0000000240)=0x3a) [ 235.991487] 9pnet: Insufficient options for proto=fd 13:42:04 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000030c0), 0x1000) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@random={'osx.', '\x00'}) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0xffffffffffffffda, 0x2}, 0x10) 13:42:04 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'bridge_slave_0\x00'}, 0x18) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x80080000002, 0x549080) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='ip6_vti0\x00', 0x10) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x9, 0x0, 0x4dd9c879, 0x8, 0x8001, 0x0, 0x10001, 0xc04, 0x0, 0xff}, 0xb) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mprotect(&(0x7f0000723000/0x1000)=nil, 0x1000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}}, 0xe) 13:42:05 executing program 1: r0 = socket(0x800000002b, 0x1, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[]}}, 0x20008850) clock_getres(0x5, &(0x7f0000000040)) ioctl$BLKFRASET(r1, 0x8907, &(0x7f0000000140)) 13:42:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{}, {}]}) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = socket(0x1e, 0x1, 0x0) getsockopt(r2, 0x800000010f, 0x20080000000082, &(0x7f00004ad000), &(0x7f0000a3c000)=0xe4) 13:42:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000ebffffff9e"]) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)={0x2, 0x4, [{0x1, 0x0, 0x7}, {0x100000000, 0x0, 0x3}]}) 13:42:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000447000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000997000/0x3000)=nil) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000000), 0x1f01, 0x10000000002) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80000, 0x0) epoll_create1(0x80000) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000080)=0x8) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) 13:42:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xfff, 0x608000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240), &(0x7f00000002c0)=0x14) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)="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", 0xce3) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000440)={0x7ff, 0x1ff, 0x8, 0x100}) listen(r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x100, 0x0) write$binfmt_aout(r3, &(0x7f0000001380)={{0x10b, 0x1753, 0xc, 0x33a, 0x331, 0x4, 0x196, 0x8d5}, "d79d3846f5da5df1654decf09346c6437b616f5b02fecb5b444222b3279f0213f745e4dcfbe0e04cf92156555eada37b692ecca0cc55f9a4e25813b90ea851e8f37d3ffec9c8b0c9267bc76fb7cab1f6e9576f07bfc87c228cb77b28904416824ff71beff0efd1405eede82267b67b1cd339ee2fbb317f71c6116760396f1cccce662180b32098e043f0631bb442c044c89979812c74da1411c876d20061d43d546a", [[], [], [], [], [], [], [], [], [], []]}, 0xac2) write$P9_RLCREATE(r3, &(0x7f00000000c0)={0x18, 0xf, 0x1, {{0x0, 0x4, 0x1}, 0x401}}, 0x18) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)=0x0) ptrace(0x18, r4) creat(&(0x7f0000001340)='./file0\x00', 0x4) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000d0}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x18, 0x0, 0x201, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="478b5fea962494658dc2633cef9ec2390c5ed00a2ca8d4e35bd61960f0a7c6e0bc3391e733eaa1f165ae2e6776792a50923ee0f945833daeaf70993c4d6644cf4eb64957c50fb3b65dee0593a90be1aa56f8ba924bf408eec6d4714481a9d847d026af0f795aee6a6e9cc5135844321ad6e866dd919d7283f59cf0da6300d6f660599e3da09a5062bfce8e0863a999"], 0x8f) accept4(r1, 0x0, &(0x7f0000000040), 0x80800) openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x10000, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x2, 0x600) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000011c0)={0x0, 0x6, 0x0, 0x981, 0x4, 0x80000001, 0x83e, 0xffffffffffffff80, {0x0, @in={{0x2, 0x4e24, @loopback}}, 0x800, 0x13b, 0x8, 0x9, 0x10000}}, &(0x7f0000000300)=0xb0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001280)={r5, 0x8b, "b00614309ead8b0886c0961cfa34200b547dee08ba58bf9ddba7ba6ae8e20516de461bc8ac916bc171f0dc46831ea5d1929f8975cac2e80c9e4c37e3de46170893db176154ebf7e07919846dddb04f1a2b27d6e7e59c9bc70556ab0cea74a0b10d612094754ea9754f922a42bcddaf541378c03d1ea6e87746fe825be9520eba9aa6c36ab79ea069ecd60e"}, &(0x7f0000000340)=0x93) 13:42:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x84) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r0, r1, 0x1001) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x3, 0x181003) write$binfmt_aout(r2, &(0x7f00000000c0)={{0x107, 0x100, 0x1, 0x385, 0x3a2, 0x10000, 0x18f, 0xdc1d}, "f8bdd0fb58ac9633d7397de788598ff5b161b278d6206961b2fbadbfb6a7bcff810a4c372a2b5e70f6a43cbc71b8d3aa328af870b2811230b65c85b5c7a1f67fa1719b3e3f2efc6d821a3f54bf79ee9095c3708999ef76b03f3a7699420e6162c48471006f52ec42b4bc57ad9884ca9a1ffe7c89b747c226474bc41b182071d65b4a20a9400d8603ac163aa056a86abb91028bcd99e565790efdede587c0dbdeffa703dce1e3fc25fdb1", [[], [], [], [], [], [], [], []]}, 0x8ca) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @broadcast}, 0xc) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) 13:42:05 executing program 2: prctl$intptr(0x40018, 0x1) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @remote}}, [0x200, 0x9, 0x7, 0x5, 0x69, 0x64, 0x4, 0x1, 0xb, 0x401, 0xfff, 0x2, 0x9, 0xf65, 0x3]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r1, 0xc7}, 0x8) seccomp(0x1, 0x1, &(0x7f0000007ff0)={0x1, &(0x7f000004dff0)=[{0x6}]}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0xb02, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x400c0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000300)=0x1e, 0x4) [ 236.310936] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 236.363531] sched: DL replenish lagged too much [ 236.410936] audit: type=1326 audit(1537623725.275:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7394 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457679 code=0x0 [ 236.487206] audit: type=1326 audit(1537623725.355:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7394 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457679 code=0x0 [ 236.564827] audit: type=1326 audit(1537623725.435:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7394 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=273 compat=0 ip=0x40e204 code=0x0 13:42:05 executing program 2: r0 = memfd_create(&(0x7f0000000200)='veth0_to_team\x00', 0x2) fchown(r0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@rand_addr, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@loopback, 0x4a, r1}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000000)={0x3, 0x8}) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000080)=""/143) socketpair$inet(0x2, 0x6, 0xcfa4, &(0x7f0000000040)) 13:42:05 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3f, 0x2000) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0xfffffffffffffffc, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xb, 0x2, 0x0, 0x0, 0x0, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402f, 0x0, @local={0xac, 0x5c}, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, &(0x7f0000000140)) fcntl$setpipe(r0, 0x407, 0x80000000) 13:42:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) fsync(r0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@remote}, 0x14) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x6, 0xe7f1, 0xffff, 0xc, 0x3, 0x0, 0x3, 0x273, 0x40, 0x172, 0xfffffffffffffff7, 0xa90, 0x38, 0x1, 0xf9dd, 0x9, 0x20}, [{0x2, 0x8, 0xffff, 0x2, 0x4ac42731, 0x0, 0x1ff, 0x48a4}, {0x70000003, 0x0, 0x36ac, 0x0, 0x80000001, 0x8001, 0x7fffffff, 0x2}], "5c4d3ee74a398f781c969c9618ea1fe091b5de84c548777a7346e8a0b094ac982149160b0554901689e335d576b934a25e7370cefdf69b79ee95f26fe217842d322a1e623fad2b1526d4e4a578b93ae4e7c83567290ebd533dc7c44e0df31eb84662", [[], [], [], [], [], []]}, 0x712) listen(r0, 0x6) 13:42:05 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0xfffb, 0x1b, 0x0, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200000, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0xffc99a3b}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', &(0x7f00000001c0)='./file0\x00', 0x100000001, 0x2, &(0x7f00000012c0)=[{&(0x7f0000000200)="02efcf402e92508eb38827b03e7778102af418ae9a8fd9590174085f87e953cd65ee07d9b8f1fb444a51ecf4e082f1637dae57477111f730d98b0fa831bb2af72a20fc24838ed256b078c99b62c585ba839e329870f8a4cf030757e1c1b1334db6e457b52456e10fa922a13068b80e04f4302d103290ddd91c6e49456342506929f269b6aef88483d55d0279c7789a578d69381d2f125c872d325d55fe182fd768bcbb4fd54d9586cf67d072c4935555bed0a71f8b770a47487dc4191c3748f8318b004b370ad73db53b8e3fd900c25bd90603218fed345b91761938cc36e5276d323fdd5fe73f2e58f87d273f92bed22749f2a09428344006377cf145ad935df4f4a701fd0253a2117c6aed36666f4788dbb79ef3a78d83bd1cf32186a8db68d4fa4918fb7cafa65e4f24771c679e4babdc6b1ce567fff306a1e2c4856ed3dcfd96f40c49cbe7793bc5ff796e599fca656e423d1f93409f7820bf73941f9581133035666faa768c575d964c922363ab24d64eb9682003a0c551dfa0b17204452f208f9d06d7cd9a4bd441f477ed3ac11bab04996d0b7e3a4a7653821b3814d896bc65a69f4a52b047a721edeac188b97157326c8e10c32fc8ddc83236480555c511bde9d447cfb8e0cd475f391bb3d2af784d269282cff355d6ad649b23216b9ce68d06cea528d4b239e1d5c9cec2b2c15397b8eb5cd424b619d35c27e6959ab30b46189d450004328967380b6678bda6b79f01cdd3046d181bab2aa6ba162da7c1839874e43ff764513c816c8cba11bfb282fcc44831f95acd44705cc61469f41b5f9386a61fa97b387e89c8162ff04ddc37bccdf1545ffaf53238874ee2a2b934af70cf6f22f3289fd0feea0c30c0762cdfcff54803780060bc1d36e6f1c9992bb006aa64644df2b145c022a3d682f3866700affe08a6255b7d72afa2e464e117cf882740612fb21311b648a0f39777c954d69e441956b79e88e39e1d0e3e9ec80d57c26f1f6d526a0d31eb444cf986f222f07ab121eb262912aaa18a84ddc4182ffc1f1706a451584f74dd357baed4d504bc192a2d56070f8edfedf9a52a6f7ca26d0581e3a48c868b97ef7d3c546b5b2bd18fa78d4981f7a28470545fa948a703d60ca410baa9a75b852b6816ef33aae31285a93fd06e7e8909b751b32744ff8fe1e303768af2d8f583021b983cb3e6bcf3bbbbe625e1f72ac3365b7324e4f5de35bf219465dc65e3689ef6956b7e71d2a2185df3df101bc156a7c67504babf44da4ba4ef62c825d7d884d4319ca60547956eaa576befd476cb2ff67fd319e893b1cc9678436c25d4ebcc4f6c49d22455ef1c68dfd9507287a5d6de2206c8ac2fc38014d071b34eeb1a0602c93215ed827577c510e5be320abfa3f08a7b1a159028c7474c6dc0681e8a97db4ba088c9b29c079e51501ba5db6badf10d126a3a7ba3066bdb75fd28fc79a076b21781a1e9307dc9b1ac8154b9c2e0f5d301662844ff195e606d16c856db9f23260e2296ce9559db986690560cf6a84cd4b2d6c0b0b2b8ae7ef1094f5353d77a04747bdcb77b3eb8282da3c6341d6a97b64c47fafe5939bcbf19ae4830362aaf1919dc84f6ab08c48fac8087908a22b4233c2c01094786575457314d9c2de261d834b63dbb08227d9e492f0c95349f993e25b80598ce3c8d53d2a46d5d3ee15fe7cdb050a560a320f672399e5d5b3aaff2267e8295245f3e5c0879207072b2069e9832a77b240c848cd1d16f6c2101f7cb625ec5f32dd9dc13029704f32d627a727d0281164027cfee71c83ddbcd2c7c402cb85852dadc69ce04642d5b230ca08984dcbf1019e720c19213850c9b97aeb450df8ff9aba09d3604168f85a4062cef59f48818bfb13b4a87972972f7652401eb275292eead5f80e9bfe0cae92b24faa888da7dc9dde6048500982e414c7da473f11d49bdfd215cb4b42f5e249aa6eb21a872cb8e01c605411051cda08a895961c1df5a0350197f3854dc0cbbf338a357e610148ff1c627c3d6bb56547e96891c34461e9f0c990790222590974f38d6f20c74f8548922b334cace31949a5483ccc28e8564823786d3d81d06fb52cf1a70975124ad82521e6c233a771838270a59587681c7c9fbe654f6a948f0f633947268a65b62d7314702d60dcf2224e24e8b669533e2d79f135a969d29a71d99c613510d476e42bc421e76ecd231012ea651310b83912eb79174e0fea0129e60e1ca3e62047171b183f537204e299590a8096e85b0e006fda80aefb5b30ad3b1c489b4daef998dfeb09b8e9a4b77db393665e3037d8334b85b01aefd12cfb8ff942615da4ec787aecedd086df13e196da8524aed72e4ed61341c09662d6cc3b0987cf79075b3dee87f108e60d2b508c7eb791897c3cc3d6fb831122a0e2dce830a04f8ebc25d5734c6ab575642fa2f06851dec0bce3110493c627cfa045c44b36e5f50b9398d2911e4065b69a829af760c4772a099ab05d6aa50babf675a79105bc196137fa345674516618bdde88a35594c77017597ef2a04eb70344cb1820bb0fedc0bf6d602ce114df9f4f863570fc04495e632a6ac9fc4bc3ee75e8538a0c6d8f9ac308f15bb8962e44c20a1096ac3408f318fde4d85b31af92a4eb1a3070eab8b84c5d7aff56f7148ca83e08613de7ce106b4cb025b0214c8eabe571765be1225f41d64a3f54a6e87ba99a97d6c5074b50e86ef65beb3e46d8e12f76b08c79dda62ac231f37e9cb457c5d9291c49cc0ce8a7e22125fd23ff15949feda037073539560a0b242f4b9ca416b5bab73f6fb2142a9bf7fb3e97adab57bdca11b282d90b799cff8168a4cb3499a8ee59d15303eaabc89a7a94a38e367259b6253cdf35886308a722d99800b1014e6f0022d8f08b5b28b3c4df8673bf1232d21602765c16f55febaa35ecebaa2c9e70605d7728d6170780e88a1ea6a00ef4a3372805796ba94b4f9cb0ce8f7b6ff97ac43f91e4f7a74fa8bfc107f0b2d3d16d49ddc2be6ea94661095878a28c84d7294f2937440be669d76c350060e7172a07a4c262f8a2875f788457979009b1cc086bdb7ef1ea8854b1c356a2b6d27cc370a5f368ed6ba80f8a0e8b3ea05bcb7a788141135228a42b221c842d880f9863043554e519abd230b20c2fa61d93cd0253711695476d01995580e44a3b6dc10235a3f9a0cd67009316e4d91f1e8ccf4954a4a6d721a029c87312c3293b2e1b65e3f7e1a0cc0b35e9a7226b9d998b51d2d634dcce68a1b526ef92a5eacaa1a3ee26afb07267bca130ac003f84fbe7dec5233a67e14718fa16647f605dbc9bffe0d9a7565282bc6ef998af38ffc5313299fc13fb9f2f82f65998ba31bc6a85e1179a808059032cf1eb961d012710be815c84b2eea532d5b8283901481f8be747acf7e44f06f7f3695696b881149fa06d4cab03a91bb16bdcf22964d01b8605f2054604c96b09c4f379b06a5974e788dc9d6a1ce9fc6c06599cd7d5302ac14536d5baf96bf9cbae862f2a790398aa304d90d4421d22f574f89266723d7c34b9894e88af6248e489435bd8aa27ccb5d4f868e90abb3501b5d5f6eef2132fe80fac45f9e11e747d4c726bcbf1af7781010734723db3ee8973fd671fa4466aa32e2b3f730d3c1207beabc05b0eee328ed1675e95661f72968258992bda97ed305395a8d6d5bd40fcc0b5f997dd142b925634de4abafa5a4d2e7509642d42b726478ae8bf28e32127829b9d7c6252326d6bc45017cd5980d46e55a5b065a374e622e1536297393abc2835a3c27efe33b9b875b80d456b67ed1efaea4f20c737b49e951073c31922876aa71c9eda235f86f60f6cd985a6be62a1049c2971725a37bb5a49e747dfa86b154cba96305de2a7561c6024d420bff5b2185d9b6f89747fb16a4535a6a515d58cd46126ce19cd85f67581aa641e64236cedf52f2f5ceeaf32a8790edc7398a0a9b55ff57a20c37ba38a24c74af470ad21779488401f378719641b79d712cd9a6bb4bf634f4a53fe70307eb09992837f1947f1413f4919a05fe3ad028f06dcd997157f7e04f9b669ffacfa4d7dacdef12689291c5b065f59adcc18d62c5bc66583182c3bdfcaec42882a611d9bf74bd2ecb97b30225d1ce40149faffd83fb14d759ef1a5effaaf6cb4f8149dda887053b64eaa1322dcbacfa9995f6f63a7ee244c18939978109c78f73891247f6238b57dc44fd6c0869de5780d99ed59dea9db549caab93a988308c917eefcc5fd127e233d85cbde4fe9c9fef3144463eb28b35f08bf162c741914dd0e0558eec26671a28efdd5f6e99fc3780bcb8673cf182926e69e6f889444677bc01285e8d8ef9f0a469d253594e208b289451e3334c01f3340a21d9bd8c967c4aa485d970a184282fe1b31a0cb8f1d87ceb92e22d2870cc27520ab790bfefea8b8ccb7cdc40882af8e04619124e1b61635a6db5bf22a2b6392451abbd2875060e24e568a0ad53a62ea27c0823a6e1a7dc7ad6e59adff0a7ead147a1e54ebfe4b6fef510f4ac633961ebadc3dcd2b02f26dcefa4b2b753109afd677375e7f00f487e40a69cde50c99557cc0ec3f46d403dfe7ba17a099cb411b40b22902f3f9a9d8255746daa308310a4d105cbf8eb5fa2c8a763600a94aa3c6fff4ba0209924fb70069bfdbc847be4947dfed5438b7b9fd81d8620149c128cf1dc809566085c2e4d5412d3231c93db3101fd1e2dbffc1c5b75a658143f4ebb4dccd83184c482512ae294ef33a823790dc119700488ad219efef02acdf9516e424e94b6e41858309792d3c86f5f3fab794400857ab219711c7a92b5674a2480f837e92549085303b0ce1dfccaf4ba3081a9539f36990c48c6c1569579540ef224d671ad638ee4afc783700dd2d08527fee43b327f53bd1e8726e57ec145d59159ccfc5e4372aaffcab4ca72a1c9bca22bc317d96b82cdd1d5e005620236824c5815c8bc871cefe64fd83a163737674bc4b630f45e7054394d7fd86f81818a722a03d1b0c1c33ae1eba54fea6546f894dea22c164c1b33baf1664019e00145041d2cfe079cd2fe04b21f13aaab6c7856895ee5e973be8936cd22f1fd71d9665e86c4ab864eb9517a0b28d47780f67226180bb1d6ce24b3b3967120477a6998ae6a70885b0152588d772ceb1792e722404ca2bc2db31c9814e8ffcfc54a02cda89272ce44cbf26f1a9a7a0721af57ee8d534c913846d431e855930269febe28c5525a66df36b2e4b0cda032f819a284f0a53fe3299e3b0ad041a9b0997e9ef7d732b575fb2169de4ae903032507ec3eb5d772de4a7aa4d6046c8074ec145803e0f4d7803f4e7291f1b63e81b3b6a96424c860386f9d2ff869bd35721906df213892659b7fb44327522e5d7385d3bbe3761feee0a460f1e917d08f58073e75e1f5fb521814075c64b1fa97021e6aa9979cd12ceff374dc0ffd80539a1c46607d2d61acee14280e5b0b8b418f9b2ef4e90a2f8c8fa371ae5b19226e88df0c2a33e12564acd26ff31f24b9316fddcbf54e2d2c6845cbe67df131aafd4dffb3a473131dcc372336104ae569fbd2f2e1deddffaa9090fb04c70ecb9041d31b60fd133c5a2b7e15fcc9265ccaea823512223736866cca6b67e3d483afbecafff16b11c63e39f5c741f76ba262157220f8bd4a711b323befae3bdafac47cb96a702b6c37edc0982853cea886d2897d3fe0cf89848a4776b6d95aba57b30dd3fb07c49b89fb390e9cfe82dec0ec2e4244ea8c061f1dce981bd27261ae7913dc35caa94c3c421c4d23160bf0b4cc9a02f9d1fa", 0x1000, 0x8a1c}, {&(0x7f0000001200)="00fa0554ecf6f0b29ae8770f64c35fd5ba6ad154aeab42e392a14d857d47a98a64b1111db867140e013c5167ac8f46bf7259ee2504bf1284527af9eea3ae118afa4b4fdf10f96c592a70e29ee481a451bea8f96c2cfafd7102b5abe1c04618085af943cb473c64c45516dfb455421af365b95312d2242b470c024d3ab07dbdceeb32fc9fabd1a2a60ec8ccbdc0714bb09ad5", 0x92, 0x401}], 0x40, &(0x7f0000001300)={[{@errors_continue='errors=continue'}]}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001340)={0x0}, &(0x7f0000001380)=0xc) migrate_pages(r3, 0xb9, &(0x7f00000013c0)=0x7fff, &(0x7f0000001400)=0xcf33) [ 237.305794] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 237.305794] 13:42:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000003c0), 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000004c0)=0xeffe) r3 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x4800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, &(0x7f0000000400), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000680)={0x0, 0x38e7eaa1, 0x9, 0x7, 0xfffffffffffffff7, 0x2, 0x5, 0x4, {0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x6, 0x69, 0x5, 0x3, 0x3}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000000c0)={r4, 0x800}, &(0x7f0000000140)=0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x8000000800200, &(0x7f0000000480), &(0x7f0000744000), &(0x7f0000000540), &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x9, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x8001}, [@generic={0x9, 0x7f, 0xffffffffffffff00, 0xd1f}, @map={0x18, 0x0, 0x1, 0x0, r3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffffffff0ff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000002c0)='syzkaller\x00', 0x100, 0xe2, &(0x7f00000007c0)=""/226, 0x0, 0x0, [], 0x0, 0xb}, 0x48) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000003c0), &(0x7f0000000600)=0x4) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="04000440000000003a020700"], 0x1) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000040)={0x800, 0x700000000}, 0x2) getpgid(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000005c0)="6d6fb993353075192adc756e74737461747300") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1c, 0xfa00, {0x0, &(0x7f00000001c0)}}, 0x20) creat(&(0x7f0000000100)='./file0\x00', 0x0) 13:42:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x2, 0x8}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4000, 0x0) write(r0, &(0x7f0000000400)="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", 0x200) getsockopt(r1, 0x1, 0x6, &(0x7f0000000040)=""/26, &(0x7f0000000100)=0x1a) sendfile(r0, r1, 0x0, 0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @remote, 0x1f}}}, 0x84) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'team_slave_0\x00', {0x2, 0x4e24}}) 13:42:06 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x800000000001000, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/3, 0x3, 0x0) ioctl$int_in(r1, 0x8000008010500c, &(0x7f0000000080)) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x3) 13:42:06 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./Sgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x90400) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x5, @local, 0xff}, @in={0x2, 0x4e23}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e23, 0x83, @empty, 0x2}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x5, @local, 0x101}, @in6={0xa, 0x4e22, 0x5, @mcast1, 0x8000}, @in={0x2, 0x4e21, @multicast1}], 0xb0) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x12) 13:42:06 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = gettid() eventfd2(0x97, 0x80000) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000000), &(0x7f0000000080)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x10) read$FUSE(r0, &(0x7f0000000500), 0x1000) tkill(r3, 0x1000000000016) 13:42:06 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x8000000003c, &(0x7f0000000140), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 13:42:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, &(0x7f0000000000), &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x2f8) r1 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:42:06 executing program 1: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000702000)) getgroups(0x2, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff]) setresgid(0x0, 0x0, r0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0xfff, 0x0, 0x5, 0xb, 0x4, "c6e47813b3b0aeb911be50ea0a86a608ce809447d471b075e73ea77f115590acd07607fee984cd002e8703efa59d4251c360d61779976406fabb649c66825552", "8d18b5f977adca98481ee5bfaee201f7ebdbef59e9595caa6017deb93dcbd15998f62838b4526cf054f8888e106f64897b45c57e45b44a8ff4df714159d436ef", "f2edd8fd0becdaae49aff11c48fe9a89015b27c929a01e9db92ebf75507324bc", [0x7, 0x2]}) 13:42:06 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) getsockopt(r0, 0x4, 0xd848, &(0x7f0000000000)=""/112, &(0x7f0000000080)=0x70) 13:42:06 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x80300) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10, 0x80800) splice(0xffffffffffffffff, &(0x7f0000000280), r2, &(0x7f0000000300), 0x1, 0x8) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100)=""/202, &(0x7f0000000240)=0xca) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f00000023c0)={"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"}) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000b80)='veth0_to_bond\x00') getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000780)=@assoc_value={0x0, 0x4}, &(0x7f00000007c0)=0x8) fstat(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f0000000680)=0xc) r7 = perf_event_open(&(0x7f0000000500)={0x7, 0x70, 0x0, 0x4, 0x0, 0x5, 0x0, 0x8, 0x80000, 0xc, 0x6, 0xffffffffffffff00, 0x1c00000000000000, 0xc69, 0x5, 0x401, 0x0, 0x1, 0x11b0, 0x0, 0x8, 0x4, 0x2, 0x10000, 0xfffffffffffffffe, 0x0, 0x5, 0xffffffffffffffc8, 0x0, 0x6, 0xe00000000000, 0x1, 0xd26, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000004c0)}, 0x0, 0x0, 0x7, 0x5, 0x3f, 0x0, 0x9}, r5, 0xe, r0, 0x3) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000a00)=[0xee01, 0xee01, 0xee01, 0xee00, 0x0]) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a40)={0x0}, &(0x7f0000000a80)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000b00)={{0x0, r4, 0x0, r8, 0x0, 0x40, 0x3}, 0xb000000000000000, 0x400, 0x0, 0x8, r9}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000bc0)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000008c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000cc0)={{{@in=@remote, @in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}, 0x4e24, 0x5, 0x4e20, 0x5, 0x0, 0xa0, 0xa0, 0x5c, r10, r6}, {0x5, 0x4, 0xd477, 0xa6be, 0x100, 0x7f}, {0x2, 0x0, 0x6, 0xcf07}, 0x2a9, 0x6e6bb9, 0x2, 0x1, 0x2, 0x2}, {{@in=@rand_addr=0x7ff, 0x4d4, 0x33}, 0x2, @in=@dev, 0x3503, 0x3, 0x1, 0x7, 0x498}}, 0xe8) dup3(r7, r7, 0x80000) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440), &(0x7f0000000480)=0xb) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000005c0)={r3, 0x1, 0x0, 0x800, 0x3, 0x400}, &(0x7f0000000640)=0x14) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000006c00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$sock_netdev_private(r1, 0x89f4, &(0x7f0000000740)="7c9b2e60f31b7284c53a671ab0eb39") ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000380)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) futimesat(r0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={{}, {0x0, r11/1000+10000}}) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) [ 237.975376] kernel msg: ebtables bug: please report to author: Wrong len argument [ 237.989405] capability: warning: `syz-executor1' uses 32-bit capabilities (legacy support in use) [ 238.168510] kernel msg: ebtables bug: please report to author: Wrong len argument [ 238.249262] loop5: p1 p2 p3 p4 < > 13:42:07 executing program 1: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/53, 0x35) r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x2, 0x3, @dev={0xfe, 0x80, [], 0xc}, 0x3}, 0x1c) [ 238.275251] loop5: partition table partially beyond EOD, truncated [ 238.304206] loop5: p1 start 1 is beyond EOD, truncated [ 238.313595] loop5: p2 start 101 is beyond EOD, truncated [ 238.324355] loop5: p3 start 201 is beyond EOD, truncated [ 238.331761] loop5: p4 start 301 is beyond EOD, truncated 13:42:07 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f000000efcc)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) [ 238.535500] loop5: p1 p2 p3 p4 < > [ 238.542509] loop5: partition table partially beyond EOD, truncated [ 238.562711] loop5: p1 start 1 is beyond EOD, truncated [ 238.572626] loop5: p2 start 101 is beyond EOD, truncated [ 238.580315] loop5: p3 start 201 is beyond EOD, truncated [ 238.588392] loop5: p4 start 301 is beyond EOD, truncated 13:42:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000000000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x6, 0x1, 0x7fff}) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000100)='./file0\x00', 0xfe8, 0x1, &(0x7f00000017c0)=[{&(0x7f0000001540)}], 0x208000, &(0x7f0000001940)={[{@gid={'gid'}}, {@nls={'nls', 0x3d, 'macinuit'}}]}) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000000c0)) 13:42:07 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6(0xa, 0x803, 0x8) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") clone(0x820002102011ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r2 = fcntl$getown(r0, 0x9) sched_setscheduler(r2, 0x3, &(0x7f0000000000)=0x1) r3 = getpid() sched_setscheduler(r3, 0x100000005, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x18, &(0x7f00000000c0), 0x0) 13:42:07 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c0000000000119078ac14ffbbe000000100004e21b5ae9512"], 0x0) 13:42:07 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x6) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0xffffffffffffffc1) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="c6") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000600), 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @remote}, 0xfffffffffffffea4) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000200)={0x0, {{0x2, 0x0, @multicast1}}}, 0x90) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x5084f74d, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @broadcast}, 0xfd00, 0x800, 0x0, 0x0, 0x0, 0x0, 0xcf39, 0x80000001, 0x2}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) r2 = syz_open_dev$dmmidi(&(0x7f0000000800)='/dev/dmmidi#\x00', 0x3, 0x20000) geteuid() getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) connect$bt_rfcomm(r2, &(0x7f0000000b80)={0x1f, {0x6, 0x20, 0x5, 0x117912bd, 0x4, 0x8}, 0xf7}, 0xa) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000440), &(0x7f0000000480)=0x40) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000100)={{0x0, @rand_addr, 0x0, 0x0, 'lc\x00', 0x0, 0x0, 0x59}, {@multicast1, 0x4e21, 0x0, 0x8}}, 0x44) getpeername$inet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) fallocate(r1, 0x0, 0xffffffff, 0x7) futex(&(0x7f0000000000), 0x4, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x0) shmget(0x2, 0x1000, 0x54000400, &(0x7f00002e6000/0x1000)=nil) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") socket(0x40000000002, 0x3, 0x67) 13:42:07 executing program 4: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) setreuid(r0, r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000340), 0x10) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="001680729a93b74e373151354d7258883ed5ca013abd5c39895533ea42f1fa000000"], &(0x7f0000000180)=0x26) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f0000000640)={0x0, 0x0, 0x2080}) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f0000000480)="660f38816b0066baf80cb8509b4186ef66bafc0cb87a5b0000ef400f09440f20c0350d000000440f22c0b991000040b8e4dd0000ba000000000f30b9800000c00f3235002000000f3066450f083ef2650f01c90f01d1c7442400d3000000c7442402e4000000c7442406000000000f011424", 0x72}], 0x1, 0x0, &(0x7f0000000200), 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f000042e000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, &(0x7f0000000380)="f20f3066b8080000000f23d80f21f86635c00000800f23f8660f09f4b817008ec80f001966b8010000000f01c1b826000f00d067672ef30f01c9bad104ed", 0x3e}], 0x1, 0x8, &(0x7f0000000440)=[@dstype0={0x6, 0x6}], 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000080)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 13:42:07 executing program 3: request_key(&(0x7f00000001c0)='big_key\x00', &(0x7f00000002c0), &(0x7f0000000300)='/dev/sg#\x00', 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000200)) [ 239.092439] sg_write: data in/out 593982219/204 bytes for SCSI command 0x0-- guessing data in; [ 239.092439] program syz-executor3 not setting count and/or reply_len properly [ 239.149308] kasan: CONFIG_KASAN_INLINE enabled [ 239.156568] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 239.163927] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 239.170157] CPU: 0 PID: 7523 Comm: syz-executor4 Not tainted 4.19.0-rc4-next-20180921+ #77 [ 239.178549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.187902] RIP: 0010:__schedule+0x1144/0x1ed0 [ 239.192491] Code: 89 e0 48 c1 e8 03 42 80 3c 28 00 0f 85 7e 08 00 00 4d 8b 24 24 4d 85 e4 0f 84 7e f5 ff ff 49 8d 7c 24 10 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 a4 e8 e0 bb 00 fa eb 9d 48 8d bb 28 04 00 00 48 [ 239.211396] RSP: 0000:ffff88018e0a73c8 EFLAGS: 00010806 [ 239.216776] RAX: 1bd5a00000000022 RBX: ffff880197b54480 RCX: 1ffff10031c21897 [ 239.224051] RDX: 0000000040000002 RSI: 0000000000000000 RDI: dead000000000110 [ 239.231317] RBP: ffff88018e0a75a0 R08: ffff88018e1f4500 R09: fffff52001c32647 [ 239.238586] R10: fffff52001c32647 R11: ffffc9000e19323b R12: dead000000000100 [ 239.245854] R13: dffffc0000000000 R14: ffff8801dac2cc40 R15: ffff88018e1f4500 [ 239.253130] FS: 00007fb91c3a9700(0000) GS:ffff8801dac00000(0000) knlGS:0000000000000000 [ 239.261356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.267235] CR2: 0000000020feb800 CR3: 00000001d8342000 CR4: 00000000001426f0 [ 239.274502] Call Trace: [ 239.277128] ? __save_stack_trace+0x8d/0xf0 [ 239.281470] ? __sched_text_start+0x8/0x8 [ 239.285625] ? mark_held_locks+0xc7/0x130 [ 239.289819] ? kasan_kmalloc+0xc7/0xe0 [ 239.294220] ? preempt_schedule_irq+0x5e/0x110 [ 239.298804] ? preempt_schedule_irq+0x5e/0x110 [ 239.303402] ? lockdep_hardirqs_on+0x421/0x5c0 [ 239.308021] ? trace_hardirqs_on+0xbd/0x310 [ 239.312348] ? retint_kernel+0x1b/0x2d [ 239.316248] ? trace_hardirqs_off_caller+0x300/0x300 [ 239.321363] ? graph_lock+0x170/0x170 [ 239.325168] ? find_held_lock+0x36/0x1c0 [ 239.329249] preempt_schedule_irq+0x87/0x110 [ 239.333661] retint_kernel+0x1b/0x2d [ 239.337377] RIP: 0010:lock_is_held_type+0x18b/0x210 [ 239.342400] Code: ff df 41 c7 84 24 7c 08 00 00 00 00 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 75 63 48 83 3d 9c 50 13 08 00 74 30 48 89 df 57 9d <0f> 1f 44 00 00 48 83 c4 08 44 89 e8 5b 41 5c 41 5d 5d c3 48 83 c4 [ 239.361298] RSP: 0000:ffff88018e0a7698 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 239.369025] RAX: dffffc0000000000 RBX: 0000000000000282 RCX: ffffc90005863000 [ 239.376294] RDX: 1ffffffff12e44be RSI: 0000000000000000 RDI: 0000000000000282 [ 239.383559] RBP: ffff88018e0a76b8 R08: ffff88018e1f4500 R09: 0000000000000000 [ 239.390837] R10: ffffed003b585b57 R11: ffff8801dac2dabb R12: ffff88018e1f4500 [ 239.398106] R13: 0000000000000000 R14: ffffffff8833b280 R15: 0000000000001110 [ 239.405695] ___might_sleep+0x280/0x330 [ 239.409694] ? ttwu_stat+0x5c0/0x5c0 [ 239.413421] ? preempt_count_add+0x7d/0x160 [ 239.417748] clear_huge_page+0x1c2/0x490 [ 239.421822] do_huge_pmd_anonymous_page+0x854/0x17e0 [ 239.426953] ? __lock_acquire+0x7ec/0x4ec0 [ 239.431211] ? __thp_get_unmapped_area+0x180/0x180 [ 239.436148] ? mark_held_locks+0x130/0x130 [ 239.440416] ? kvm_vcpu_ioctl+0x29c/0x1150 [ 239.444655] ? rcu_read_lock_sched_held+0x108/0x120 [ 239.449669] ? kfree+0x1fa/0x230 [ 239.453042] ? kvm_vcpu_ioctl+0x2a1/0x1150 [ 239.457284] ? pud_val+0x88/0x100 [ 239.460739] ? pmd_val+0x100/0x100 [ 239.464289] __handle_mm_fault+0x3880/0x53e0 [ 239.468704] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 239.473553] ? graph_lock+0x170/0x170 [ 239.477352] ? kasan_check_read+0x11/0x20 [ 239.481499] ? print_usage_bug+0xc0/0xc0 [ 239.485574] ? rcu_softirq_qs+0x20/0x20 [ 239.489552] ? graph_lock+0x170/0x170 [ 239.493358] ? graph_lock+0x170/0x170 [ 239.497172] ? handle_mm_fault+0x42a/0xc70 [ 239.501414] ? lock_downgrade+0x900/0x900 [ 239.505566] ? check_preemption_disabled+0x48/0x200 [ 239.510586] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 239.515534] ? kasan_check_read+0x11/0x20 [ 239.519695] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 239.524974] ? rcu_softirq_qs+0x20/0x20 [ 239.528960] ? trace_hardirqs_off_caller+0x300/0x300 [ 239.534074] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 239.539615] ? check_preemption_disabled+0x48/0x200 [ 239.544636] handle_mm_fault+0x54f/0xc70 [ 239.548702] ? __handle_mm_fault+0x53e0/0x53e0 [ 239.553287] ? find_vma+0x34/0x190 [ 239.556835] __do_page_fault+0x673/0xec0 [ 239.560905] ? mm_fault_error+0x380/0x380 [ 239.565054] ? trace_hardirqs_off+0xb8/0x310 [ 239.569467] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 239.575015] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 239.580386] ? trace_hardirqs_on_caller+0x310/0x310 [ 239.585408] do_page_fault+0xed/0x7d1 [ 239.589216] ? vmalloc_sync_all+0x30/0x30 [ 239.593376] ? error_entry+0x70/0xd0 [ 239.597106] ? trace_hardirqs_off_caller+0xbb/0x300 [ 239.602132] ? trace_hardirqs_on_caller+0xc0/0x310 [ 239.607068] ? syscall_return_slowpath+0x5e0/0x5e0 [ 239.612014] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 239.616862] ? trace_hardirqs_off+0x310/0x310 [ 239.621359] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 239.626812] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 239.631833] ? prepare_exit_to_usermode+0x291/0x3b0 [ 239.636853] ? page_fault+0x8/0x30 [ 239.640400] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 239.645244] ? page_fault+0x8/0x30 [ 239.648787] page_fault+0x1e/0x30 [ 239.652237] RIP: 0033:0x401a5c [ 239.655433] Code: ff 01 64 48 8b 3c 25 00 00 00 00 48 81 c7 08 ff ff ff e8 a7 db 01 00 85 c0 75 13 48 63 44 24 04 48 8b 54 24 18 48 8b 4c 24 08 <48> 89 0c c2 64 f0 83 2c 25 d0 ff ff ff 01 64 f0 83 04 25 d0 ff ff [ 239.674337] RSP: 002b:00007fb91c3a7040 EFLAGS: 00010246 [ 239.679698] RAX: 0000000000000000 RBX: 00007fb91c3a74f0 RCX: 00008f0000509120 [ 239.686972] RDX: 0000000020feb800 RSI: 0000000000000000 RDI: 00007fb91c3a9608 [ 239.694272] RBP: 0000000020feb800 R08: 0000000000000090 R09: 0000000000000006 [ 239.701536] R10: 00000000000000b3 R11: 0000000000000206 R12: 0000000000000000 [ 239.708802] R13: 0000000020fe8000 R14: 00000000004c49c2 R15: 0000000000000000 [ 239.716076] Modules linked in: [ 239.719272] [ 239.719278] ====================================================== [ 239.719284] WARNING: possible circular locking dependency detected [ 239.719289] 4.19.0-rc4-next-20180921+ #77 Not tainted [ 239.719295] ------------------------------------------------------ [ 239.719301] syz-executor4/7523 is trying to acquire lock: [ 239.719305] 0000000084c6f7c3 ((console_sem).lock){-.-.}, at: down_trylock+0x13/0x70 [ 239.719322] [ 239.719326] but task is already holding lock: [ 239.719330] 00000000d60979a1 (&rq->lock){-.-.}, at: __schedule+0x236/0x1ed0 [ 239.719347] [ 239.719352] which lock already depends on the new lock. [ 239.719355] [ 239.719358] [ 239.719364] the existing dependency chain (in reverse order) is: [ 239.719366] [ 239.719369] -> #2 (&rq->lock){-.-.}: [ 239.719386] _raw_spin_lock+0x2d/0x40 [ 239.719390] task_fork_fair+0xb0/0x6d0 [ 239.719395] sched_fork+0x443/0xba0 [ 239.719399] copy_process+0x2585/0x8780 [ 239.719404] _do_fork+0x1cb/0x11c0 [ 239.719408] kernel_thread+0x34/0x40 [ 239.719412] rest_init+0x22/0xe5 [ 239.719417] start_kernel+0x8bc/0x8f7 [ 239.719422] x86_64_start_reservations+0x29/0x2b [ 239.719426] x86_64_start_kernel+0x76/0x79 [ 239.719431] secondary_startup_64+0xa4/0xb0 [ 239.719434] [ 239.719437] -> #1 (&p->pi_lock){-.-.}: [ 239.719467] _raw_spin_lock_irqsave+0x99/0xd0 [ 239.719471] try_to_wake_up+0xd2/0x12f0 [ 239.719475] wake_up_process+0x10/0x20 [ 239.719479] __up.isra.1+0x1c0/0x2a0 [ 239.719484] up+0x13c/0x1c0 [ 239.719488] __up_console_sem+0xbe/0x1b0 [ 239.719493] console_unlock+0x80c/0x1150 [ 239.719497] vprintk_emit+0x33d/0x930 [ 239.719501] vprintk_default+0x28/0x30 [ 239.719506] vprintk_func+0x7e/0x181 [ 239.719509] printk+0xa7/0xcf [ 239.719513] load_umh+0x51/0xbd [ 239.719518] do_one_initcall+0x140/0x956 [ 239.719523] kernel_init_freeable+0x4bb/0x5ae [ 239.719527] kernel_init+0x11/0x1b2 [ 239.719531] ret_from_fork+0x3a/0x50 [ 239.719534] [ 239.719537] -> #0 ((console_sem).lock){-.-.}: [ 239.719553] lock_acquire+0x1ed/0x520 [ 239.719558] _raw_spin_lock_irqsave+0x99/0xd0 [ 239.719562] down_trylock+0x13/0x70 [ 239.719567] __down_trylock_console_sem+0xae/0x200 [ 239.719571] console_trylock+0x15/0xa0 [ 239.719576] vprintk_emit+0x322/0x930 [ 239.719580] vprintk_default+0x28/0x30 [ 239.719584] vprintk_func+0x7e/0x181 [ 239.719588] printk+0xa7/0xcf [ 239.719593] kasan_die_handler.cold.22+0x11/0x30 [ 239.719598] notifier_call_chain+0x17e/0x380 [ 239.719603] atomic_notifier_call_chain+0x96/0x190 [ 239.719607] notify_die+0x1bd/0x2d0 [ 239.719612] do_general_protection+0x25b/0x340 [ 239.719616] general_protection+0x1e/0x30 [ 239.719621] __schedule+0x1144/0x1ed0 [ 239.719625] preempt_schedule_irq+0x87/0x110 [ 239.719629] retint_kernel+0x1b/0x2d [ 239.719634] lock_is_held_type+0x18b/0x210 [ 239.719638] ___might_sleep+0x280/0x330 [ 239.719643] clear_huge_page+0x1c2/0x490 [ 239.719648] do_huge_pmd_anonymous_page+0x854/0x17e0 [ 239.719653] __handle_mm_fault+0x3880/0x53e0 [ 239.719657] handle_mm_fault+0x54f/0xc70 [ 239.719661] __do_page_fault+0x673/0xec0 [ 239.719678] do_page_fault+0xed/0x7d1 [ 239.719682] page_fault+0x1e/0x30 [ 239.719685] [ 239.719690] other info that might help us debug this: [ 239.719693] [ 239.719696] Chain exists of: [ 239.719699] (console_sem).lock --> &p->pi_lock --> &rq->lock [ 239.719721] [ 239.719725] Possible unsafe locking scenario: [ 239.719728] [ 239.719733] CPU0 CPU1 [ 239.719737] ---- ---- [ 239.719740] lock(&rq->lock); [ 239.719751] lock(&p->pi_lock); [ 239.719762] lock(&rq->lock); [ 239.719771] lock((console_sem).lock); [ 239.719781] [ 239.719785] *** DEADLOCK *** [ 239.719787] [ 239.719792] 3 locks held by syz-executor4/7523: [ 239.719795] #0: 0000000045b583dc (&mm->mmap_sem){++++}, at: __do_page_fault+0x3d9/0xec0 [ 239.719815] #1: 00000000d60979a1 (&rq->lock){-.-.}, at: __schedule+0x236/0x1ed0 [ 239.719835] #2: 000000009297fc32 (rcu_read_lock){....}, at: atomic_notifier_call_chain+0x0/0x190 [ 239.719856] [ 239.719860] stack backtrace: [ 239.719867] CPU: 0 PID: 7523 Comm: syz-executor4 Not tainted 4.19.0-rc4-next-20180921+ #77 [ 239.719875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.719879] Call Trace: [ 239.719883] dump_stack+0x1d3/0x2c4 [ 239.719888] ? dump_stack_print_info.cold.2+0x52/0x52 [ 239.719893] ? vprintk_func+0x85/0x181 [ 239.719898] print_circular_bug.isra.33.cold.54+0x1bd/0x27d [ 239.719903] ? save_trace+0xe0/0x290 [ 239.719907] __lock_acquire+0x33e4/0x4ec0 [ 239.719912] ? mark_held_locks+0x130/0x130 [ 239.719916] ? mark_held_locks+0x130/0x130 [ 239.719921] ? update_load_avg+0x387/0x2470 [ 239.719926] ? __isolate_free_page+0x610/0x610 [ 239.719931] ? __isolate_free_page+0x610/0x610 [ 239.719935] ? __lock_acquire+0x7ec/0x4ec0 [ 239.719940] ? rcu_softirq_qs+0x20/0x20 [ 239.719944] ? unwind_dump+0x190/0x190 [ 239.719949] ? rb_erase+0x3710/0x3710 [ 239.719953] ? graph_lock+0x170/0x170 [ 239.719959] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 239.719963] lock_acquire+0x1ed/0x520 [ 239.719967] ? down_trylock+0x13/0x70 [ 239.719971] ? find_held_lock+0x36/0x1c0 [ 239.719976] ? lock_release+0x970/0x970 [ 239.719987] ? trace_hardirqs_off+0xb8/0x310 [ 239.719992] ? vprintk_emit+0x1d3/0x930 [ 239.719997] ? trace_hardirqs_on_caller+0x310/0x310 [ 239.720002] ? trace_hardirqs_off+0xb8/0x310 [ 239.720006] ? log_store+0x344/0x4c0 [ 239.720011] ? vprintk_emit+0x322/0x930 [ 239.720015] _raw_spin_lock_irqsave+0x99/0xd0 [ 239.720020] ? down_trylock+0x13/0x70 [ 239.720024] down_trylock+0x13/0x70 [ 239.720029] __down_trylock_console_sem+0xae/0x200 [ 239.720033] console_trylock+0x15/0xa0 [ 239.720038] vprintk_emit+0x322/0x930 [ 239.720042] ? wake_up_klogd+0x180/0x180 [ 239.720047] ? __lock_acquire+0x7ec/0x4ec0 [ 239.720052] ? set_next_entity+0x2fe/0xc40 [ 239.720056] ? __lock_acquire+0x7ec/0x4ec0 [ 239.720062] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 239.720067] ? mark_held_locks+0x130/0x130 [ 239.720072] ? check_preemption_disabled+0x48/0x200 [ 239.720076] vprintk_default+0x28/0x30 [ 239.720081] vprintk_func+0x7e/0x181 [ 239.720085] printk+0xa7/0xcf [ 239.720090] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 239.720095] ? perf_event_update_userpage+0xcd0/0xcd0 [ 239.720100] ? kasan_die_handler.cold.22+0x5/0x30 [ 239.720105] ? kasan_die_handler+0x1a/0x31 [ 239.720110] kasan_die_handler.cold.22+0x11/0x30 [ 239.720114] notifier_call_chain+0x17e/0x380 [ 239.720119] ? unregister_die_notifier+0x20/0x20 [ 239.720124] ? kasan_check_read+0x11/0x20 [ 239.720129] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 239.720134] ? rcu_softirq_qs+0x20/0x20 [ 239.720138] ? rcu_softirq_qs+0x20/0x20 [ 239.720143] ? cmp_ex_search+0x8c/0xb0 [ 239.720148] atomic_notifier_call_chain+0x96/0x190 [ 239.720152] notify_die+0x1bd/0x2d0 [ 239.720157] ? __atomic_notifier_call_chain+0x1a0/0x1a0 [ 239.720162] ? __schedule+0x1144/0x1ed0 [ 239.720167] ? search_exception_tables+0x47/0x50 [ 239.720171] ? fixup_exception+0xb1/0xde [ 239.720176] do_general_protection+0x25b/0x340 [ 239.720181] general_protection+0x1e/0x30 [ 239.720185] RIP: 0010:__schedule+0x1144/0x1ed0 [ 239.720199] Code: 89 e0 48 c1 e8 03 42 80 3c 28 00 0f 85 7e 08 00 00 4d 8b 24 24 4d 85 e4 0f 84 7e f5 ff ff 49 8d 7c 24 10 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 a4 e8 e0 bb 00 fa eb 9d 48 8d bb 28 04 00 00 48 [ 239.720204] RSP: 0000:ffff88018e0a73c8 EFLAGS: 00010806 [ 239.720214] RAX: 1bd5a00000000022 RBX: ffff880197b54480 RCX: 1ffff10031c21897 [ 239.720221] RDX: 0000000040000002 RSI: 0000000000000000 RDI: dead000000000110 [ 239.720227] RBP: ffff88018e0a75a0 R08: ffff88018e1f4500 R09: fffff52001c32647 [ 239.720234] R10: fffff52001c32647 R11: ffffc9000e19323b R12: dead000000000100 [ 239.720240] R13: dffffc0000000000 R14: ffff8801dac2cc40 R15: ffff88018e1f4500 [ 239.720245] ? __schedule+0x1119/0x1ed0 [ 239.720249] ? __save_stack_trace+0x8d/0xf0 [ 239.720254] ? __sched_text_start+0x8/0x8 [ 239.720258] ? mark_held_locks+0xc7/0x130 [ 239.720263] ? kasan_kmalloc+0xc7/0xe0 [ 239.720268] ? preempt_schedule_irq+0x5e/0x110 [ 239.720273] ? preempt_schedule_irq+0x5e/0x110 [ 239.720277] ? lockdep_hardirqs_on+0x421/0x5c0 [ 239.720282] ? trace_hardirqs_on+0xbd/0x310 [ 239.720287] ? retint_kernel+0x1b/0x2d [ 239.720292] ? trace_hardirqs_off_caller+0x300/0x300 [ 239.720296] ? graph_lock+0x170/0x170 [ 239.720301] ? find_held_lock+0x36/0x1c0 [ 239.720306] preempt_schedule_irq+0x87/0x110 [ 239.720310] retint_kernel+0x1b/0x2d [ 239.720315] RIP: 0010:lock_is_held_type+0x18b/0x210 [ 239.720329] Code: ff df 41 c7 84 24 7c 08 00 00 00 00 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 75 63 48 83 3d 9c 50 13 08 00 74 30 48 89 df 57 9d <0f> 1f 44 00 00 48 83 c4 08 44 89 e8 5b 41 5c 41 5d 5d c3 48 83 c4 [ 239.720334] RSP: 0000:ffff88018e0a7698 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 239.720345] RAX: dffffc0000000000 RBX: 0000000000000282 RCX: ffffc90005863000 [ 239.720351] RDX: 1ffffffff12e44be RSI: 0000000000000000 RDI: 0000000000000282 [ 239.720358] RBP: ffff88018e0a76b8 R08: ffff88018e1f4500 R09: 0000000000000000 [ 239.720364] R10: ffffed003b585b57 R11: ffff8801dac2dabb R12: ffff88018e1f4500 [ 239.720371] R13: 0000000000000000 R14: ffffffff8833b280 R15: 0000000000001110 [ 239.720375] ___might_sleep+0x280/0x330 [ 239.720380] ? ttwu_stat+0x5c0/0x5c0 [ 239.720384] ? preempt_count_add+0x7d/0x160 [ 239.720389] clear_huge_page+0x1c2/0x490 [ 239.720394] do_huge_pmd_anonymous_page+0x854/0x17e0 [ 239.720411] ? __lock_acquire+0x7ec/0x4ec0 [ 239.720416] ? __thp_get_unmapped_area+0x180/0x180 [ 239.720421] ? mark_held_locks+0x130/0x130 [ 239.720425] ? kvm_vcpu_ioctl+0x29c/0x1150 [ 239.720430] ? rcu_read_lock_sched_held+0x108/0x120 [ 239.720434] ? kfree+0x1fa/0x230 [ 239.720439] ? kvm_vcpu_ioctl+0x2a1/0x1150 [ 239.720443] ? pud_val+0x88/0x100 [ 239.720447] ? pmd_val+0x100/0x100 [ 239.720451] __handle_mm_fault+0x3880/0x53e0 [ 239.720456] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 239.720460] ? graph_lock+0x170/0x170 [ 239.720465] ? kasan_check_read+0x11/0x20 [ 239.720469] ? print_usage_bug+0xc0/0xc0 [ 239.720474] ? rcu_softirq_qs+0x20/0x20 [ 239.720478] ? graph_lock+0x170/0x170 [ 239.720483] ? graph_lock+0x170/0x170 [ 239.720487] ? handle_mm_fault+0x42a/0xc70 [ 239.720492] ? lock_downgrade+0x900/0x900 [ 239.720497] ? check_preemption_disabled+0x48/0x200 [ 239.720500] ? rcu_rea [ 239.720508] Lost 39 message(s)! [ 240.739220] ---[ end trace 9e23f9adb6d7eb8b ]--- [ 240.743987] RIP: 0010:__schedule+0x1144/0x1ed0 [ 240.748575] Code: 89 e0 48 c1 e8 03 42 80 3c 28 00 0f 85 7e 08 00 00 4d 8b 24 24 4d 85 e4 0f 84 7e f5 ff ff 49 8d 7c 24 10 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 a4 e8 e0 bb 00 fa eb 9d 48 8d bb 28 04 00 00 48 [ 240.767488] RSP: 0000:ffff88018e0a73c8 EFLAGS: 00010806 [ 240.772862] RAX: 1bd5a00000000022 RBX: ffff880197b54480 RCX: 1ffff10031c21897 [ 240.780143] RDX: 0000000040000002 RSI: 0000000000000000 RDI: dead000000000110 [ 240.787411] RBP: ffff88018e0a75a0 R08: ffff88018e1f4500 R09: fffff52001c32647 [ 240.794692] R10: fffff52001c32647 R11: ffffc9000e19323b R12: dead000000000100 [ 240.801962] R13: dffffc0000000000 R14: ffff8801dac2cc40 R15: ffff88018e1f4500 [ 240.809241] FS: 00007fb91c3a9700(0000) GS:ffff8801dac00000(0000) knlGS:0000000000000000 [ 240.817479] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.823360] CR2: 0000000020feb800 CR3: 00000001d8342000 CR4: 00000000001426f0 [ 240.830628] Kernel panic - not syncing: Fatal exception [ 242.017359] Shutting down cpus with NMI [ 242.022358] Kernel Offset: disabled [ 242.026011] Rebooting in 86400 seconds..