[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 55.701397][ T26] audit: type=1800 audit(1567822658.458:25): pid=8565 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 55.742152][ T26] audit: type=1800 audit(1567822658.468:26): pid=8565 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 55.787477][ T26] audit: type=1800 audit(1567822658.468:27): pid=8565 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.5' (ECDSA) to the list of known hosts. 2019/09/07 02:17:49 fuzzer started 2019/09/07 02:17:51 dialing manager at 10.128.0.26:43875 2019/09/07 02:17:51 syscalls: 2487 2019/09/07 02:17:51 code coverage: enabled 2019/09/07 02:17:51 comparison tracing: enabled 2019/09/07 02:17:51 extra coverage: extra coverage is not supported by the kernel 2019/09/07 02:17:51 setuid sandbox: enabled 2019/09/07 02:17:51 namespace sandbox: enabled 2019/09/07 02:17:51 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/07 02:17:51 fault injection: enabled 2019/09/07 02:17:51 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/07 02:17:51 net packet injection: enabled 2019/09/07 02:17:51 net device setup: enabled 02:20:43 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000000)) 02:20:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) unshare(0x8000400) shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(0x0, &(0x7f0000fed000/0x4000)=nil, 0x5000) syzkaller login: [ 241.153852][ T8732] IPVS: ftp: loaded support on port[0] = 21 [ 241.314731][ T8732] chnl_net:caif_netlink_parms(): no params data found [ 241.368634][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.376443][ T8732] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.385809][ T8732] device bridge_slave_0 entered promiscuous mode [ 241.401651][ T8735] IPVS: ftp: loaded support on port[0] = 21 [ 241.409604][ T8732] bridge0: port 2(bridge_slave_1) entered blocking state 02:20:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x806}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x43, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8916, &(0x7f00000000c0)='nr0\x01:\xf2%\xa3\'>\xf8]\x81$?\xfa\x02\x00\x00\x00\x00\x00\x80\x00\x00\n\xf4D3A}\xe4\xac\xff\x82q\xc7J\xe2J?\x00\x8b\x9c[\xdd\x06\xa4\n') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x891c, &(0x7f0000000580)='nr0\x01:\xf2%\xa3\'>\xf8]\x81$?\xfa\x02\x00\x05\x06\x00\x00\x00\x00\x00\x00\x00D3A}\xe4\xac\xff\x82q\xc7J\xe2J\x06\x00\x00\x00\x00\xd9\xbc\x0e\x9a\xd5\t\f\xe2\x90G903\xd7\x8d\xa8\x9e@?\xe5\xb1\rQ-\v\xcb\xbf\xd6=\bWN\x824\x06\xe9fL\x9b>\xdd\a\xba8\x1a{\x93\xbb\x02*5F\x8d*\xbb\xd9|\x03\x86&Ds\xd1`=\x04\'\xf7\xd7\xb3\xae3\x81\xdd\xf57\xd9Y=\xb6/\xe2g\xc7\xcd\x1d\xb3T9\xda\xc3\x80\xd4\x13\x9f\xbf\xc0\x82\xe2\xc7\xc8\x18w\xc163B\xdcW\xff\xaf\x00\x00\x00\x00J\x00*\x14\b\xeb\xc4\x8d\xb7\x81h/\x9d\xcf\x8cJ\xec\b\xdd&\xc7`\x86\xe5\xaf\xdeC\xcd\x9e\x01\xd4\x9b\x9b)\xf9=\xed\x15!+\xc4>V\x19!V\xaajPP\x00\xfa$Q\x82\x007Qu.\x9bm\xf9\x8ctEI\x94\xbf\xd9\xe4l\x1a&\x1ae\x02p\xd6J\xe5},V\xe9]\x96\xbc\r\x8a\xa5G\x84*\xdd\x14\xdc\xef\xc9\xber\xac;\xd2]\xd8\x9f\x96\xc5\x00\x00~\xb4\xd8LS\x8e\x84\x88\a\x92\xe1\xac\xf7\xd5\xe8\x84h\xf4v\x86\xe7+\xba\xe3F\x02 gEo\xf5M\x1c\xc9\xb3@\xd0}S\v\"G\xf8\x9f\x82(iuW{+\xef\x9cD\x9d9\xf6\xdf/.\xcep;\x04 \xe3r\x91\xbc\x17)\x1f') r2 = socket$kcm(0x2b, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 241.416790][ T8732] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.430699][ T8732] device bridge_slave_1 entered promiscuous mode [ 241.481691][ T8732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.510930][ T8732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.593385][ T8732] team0: Port device team_slave_0 added [ 241.600759][ T8732] team0: Port device team_slave_1 added [ 241.659904][ T8735] chnl_net:caif_netlink_parms(): no params data found [ 241.684806][ T8738] IPVS: ftp: loaded support on port[0] = 21 02:20:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00002f5ff8)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") mlockall(0x5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) [ 241.735176][ T8732] device hsr_slave_0 entered promiscuous mode 02:20:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/69, 0x45}], 0x1}}], 0x1, 0x0, 0x0) [ 241.892522][ T8732] device hsr_slave_1 entered promiscuous mode [ 241.970367][ T8740] IPVS: ftp: loaded support on port[0] = 21 [ 242.039127][ T8732] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.046406][ T8732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.054298][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.061377][ T8732] bridge0: port 1(bridge_slave_0) entered forwarding state 02:20:44 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write(r1, &(0x7f0000000080)="00286eb4fa920000000000000000", 0xffffffc7) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000006cc0)=[{{0x0, 0x2, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) [ 242.171837][ T8735] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.188127][ T8735] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.196703][ T8735] device bridge_slave_0 entered promiscuous mode [ 242.205884][ T8735] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.213312][ T8735] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.221210][ T8735] device bridge_slave_1 entered promiscuous mode [ 242.255689][ T8743] IPVS: ftp: loaded support on port[0] = 21 [ 242.277874][ T8735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.288734][ T8735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.307449][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.325967][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.362580][ T8735] team0: Port device team_slave_0 added [ 242.370454][ T8735] team0: Port device team_slave_1 added [ 242.430364][ T8738] chnl_net:caif_netlink_parms(): no params data found [ 242.456300][ T8745] IPVS: ftp: loaded support on port[0] = 21 [ 242.534875][ T8735] device hsr_slave_0 entered promiscuous mode [ 242.582547][ T8735] device hsr_slave_1 entered promiscuous mode [ 242.622292][ T8735] debugfs: Directory 'hsr0' with parent '/' already present! [ 242.639169][ T8738] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.646762][ T8738] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.654619][ T8738] device bridge_slave_0 entered promiscuous mode [ 242.666235][ T8738] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.674108][ T8738] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.681804][ T8738] device bridge_slave_1 entered promiscuous mode [ 242.730334][ T8738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.777264][ T8738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.821375][ T8738] team0: Port device team_slave_0 added [ 242.833990][ T8740] chnl_net:caif_netlink_parms(): no params data found [ 242.851419][ T8738] team0: Port device team_slave_1 added [ 242.921843][ T8732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.941634][ T8740] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.949954][ T8740] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.958125][ T8740] device bridge_slave_0 entered promiscuous mode [ 243.015106][ T8738] device hsr_slave_0 entered promiscuous mode [ 243.083432][ T8738] device hsr_slave_1 entered promiscuous mode [ 243.142230][ T8738] debugfs: Directory 'hsr0' with parent '/' already present! [ 243.152726][ T8743] chnl_net:caif_netlink_parms(): no params data found [ 243.180792][ T8740] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.188329][ T8740] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.196042][ T8740] device bridge_slave_1 entered promiscuous mode [ 243.215334][ T8732] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.252939][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.261247][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.295239][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.304390][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.313180][ T8748] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.320229][ T8748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.328100][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.336663][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.345230][ T8748] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.352326][ T8748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.367158][ T8740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.385701][ T8743] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.392987][ T8743] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.400676][ T8743] device bridge_slave_0 entered promiscuous mode [ 243.408681][ T8745] chnl_net:caif_netlink_parms(): no params data found [ 243.417739][ T8743] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.425845][ T8743] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.433710][ T8743] device bridge_slave_1 entered promiscuous mode [ 243.452170][ T8743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.467905][ T8740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.491274][ T8743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.511787][ T8735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.550706][ T8743] team0: Port device team_slave_0 added [ 243.564021][ T8745] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.571123][ T8745] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.579680][ T8745] device bridge_slave_0 entered promiscuous mode [ 243.587837][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.597054][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.606877][ T8740] team0: Port device team_slave_0 added [ 243.621880][ T8740] team0: Port device team_slave_1 added [ 243.629661][ T8743] team0: Port device team_slave_1 added [ 243.635755][ T8745] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.643287][ T8745] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.650871][ T8745] device bridge_slave_1 entered promiscuous mode [ 243.670556][ T8735] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.679236][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.688768][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.697218][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.705197][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.713200][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.721608][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.730641][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.756022][ T8745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.794217][ T8745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.807023][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.815885][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.824495][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.831562][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.839353][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.848199][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.856781][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.863865][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.871569][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.880660][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.889480][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.897742][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.906840][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.965160][ T8743] device hsr_slave_0 entered promiscuous mode [ 244.023271][ T8743] device hsr_slave_1 entered promiscuous mode [ 244.072544][ T8743] debugfs: Directory 'hsr0' with parent '/' already present! [ 244.135168][ T8740] device hsr_slave_0 entered promiscuous mode [ 244.192779][ T8740] device hsr_slave_1 entered promiscuous mode [ 244.232186][ T8740] debugfs: Directory 'hsr0' with parent '/' already present! [ 244.244094][ T8732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.255894][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.276382][ T8745] team0: Port device team_slave_0 added [ 244.283524][ T8745] team0: Port device team_slave_1 added [ 244.290591][ T8746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.299295][ T8746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.308064][ T8746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.316992][ T8746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.326612][ T8746] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.369668][ T8738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.385344][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.396311][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.411441][ T8735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.421934][ T8735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.464419][ T8745] device hsr_slave_0 entered promiscuous mode [ 244.512803][ T8745] device hsr_slave_1 entered promiscuous mode [ 244.552289][ T8745] debugfs: Directory 'hsr0' with parent '/' already present! [ 244.582900][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.591577][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.601140][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.609698][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.618796][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.626758][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.635323][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.663546][ T8732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.673476][ T8738] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.711849][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.721907][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.731806][ T8744] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.739159][ T8744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.747460][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.787593][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.797229][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.806338][ T8748] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.813554][ T8748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.824180][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.839615][ T8735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.849987][ T8743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.860068][ T8740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.880039][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.899036][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.908518][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.923380][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.932008][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.941312][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.951332][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.959890][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.968607][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.986598][ T8743] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.997022][ T8738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.012242][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.020235][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.040781][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.096475][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.110331][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.131037][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 02:20:47 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r0, 0x1, 0x70bd28, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x16}, 0x20040000) vmsplice(0xffffffffffffffff, &(0x7f0000001c40)=[{&(0x7f0000001900)="0a50bd57b0c221e271f3fcda7b6030925cd082c7e100274f706d8cd144e831e644217bc906288444efa0d06f6ffa12e5cd2d1446ad737571decbef94718d5e7f4ce2f42c9c3674cc21c4ee349c1412af1cebe9d24ae66edc82c471c68bdc35746da3be0a901791c59206fe475e22979c0965ae8115b6deb2efd2411388561dfd46585d6824475091c2151ef357eb03c932118d7ca6c8983b44921617b9c16d2a7bc371877d7316994688e35dd0347a0d220667f1c15e9ce2c4091372db0da4626cc5e757b9e9a48867d919f4ea9effced140911e2a02166bea2fca888f2f23dbb8e221", 0xe3}, {&(0x7f0000002780)="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", 0x996}], 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf1, 0x21fc}, 0x14) r2 = socket(0x10, 0x4008000000803, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000000c0)=0x81a, 0x4) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0xfffffffffffffd7a) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/231, 0x3d}}], 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000780)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe101}, [@IFLA_LINKINFO={0x28, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x1c, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}], @IFLA_VTI_REMOTE={0x8, 0x5, @remote}, @IFLA_VTI_LOCAL={0x8, 0x4, @local}]}}}]}, 0x48}}, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r5}, 0xc) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x6) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) [ 245.140500][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.155482][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.162784][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.182534][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.199841][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.208367][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.215472][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.226760][ T8740] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.253736][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.262670][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.271384][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.284191][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.293558][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.310609][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.330203][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.338766][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.348359][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.368924][ T8738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.386287][ T8743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.404296][ T8743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.420595][ T8767] device vti0 entered promiscuous mode [ 245.432499][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.440296][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.449078][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.459159][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.467230][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.475212][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.484063][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.493230][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.500276][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.508379][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.519915][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.528673][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.547116][ T8745] 8021q: adding VLAN 0 to HW filter on device bond0 02:20:48 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='projidB3f_map\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x1, "fa"}, &(0x7f0000000080)=0x25) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x3f, {"568d3bbf65d2a83767e19d5dd6d34745"}, 0x682, 0x1ff}}}, 0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x7fffffff, 0x20acde2010e07a9f, 0x100000001, 0x7}, &(0x7f00000001c0)=0x10) r2 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000140)={0xf0f041}) write$P9_ROPEN(r2, 0x0, 0x0) [ 245.572725][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.583958][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.596572][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.608555][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 02:20:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0x40, 0x0, [], {0x0, @reserved}}) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) pwrite64(r0, &(0x7f00000001c0)="8602070941968b99bfe421bab93fcb0d82e222725e587c1848e2ef8477b5673cd5cab949baead8f8c7c74127e2b04753605b2a4b1bffc156", 0x38, 0x0) [ 245.692595][ T8743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.720928][ T8740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.740926][ T8784] EXT4-fs (sda1): required extra inode space not available [ 245.751989][ T8789] vivid-000: disconnect [ 245.752416][ T8740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.774988][ T8784] EXT4-fs (sda1): re-mounted. Opts: debug_want_extra_isize=0x0000000000007fff, [ 245.781636][ T8745] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.802380][ T8781] vivid-000: reconnect [ 245.806961][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.816408][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.826083][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.835544][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.844938][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 02:20:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0x40, 0x0, [], {0x0, @reserved}}) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) pwrite64(r0, &(0x7f00000001c0)="8602070941968b99bfe421bab93fcb0d82e222725e587c1848e2ef8477b5673cd5cab949baead8f8c7c74127e2b04753605b2a4b1bffc156", 0x38, 0x0) [ 245.873175][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.896895][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.906322][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.915466][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.923869][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.960064][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 02:20:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x10, 0x4008000000803, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000000c0)=0x81a, 0x4) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0xfffffffffffffd7a) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/231, 0x3d}}], 0x1, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{}, {}, {}, {}]}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in={0x2, 0x4e21, @multicast1}], 0x10) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000140)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000300)=""/132, &(0x7f0000000180)=0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, 0x84) [ 245.986473][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.006266][ T8797] EXT4-fs (sda1): required extra inode space not available [ 246.029233][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.031217][ T8797] EXT4-fs (sda1): re-mounted. Opts: debug_want_extra_isize=0x0000000000007fff, [ 246.036411][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.046242][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.068362][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.091458][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.099633][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.107798][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.117371][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.126767][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.137888][ T8806] IPVS: length: 132 != 24 [ 246.149147][ T8740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.166411][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.191883][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.207063][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 02:20:49 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0x40, 0x0, [], {0x0, @reserved}}) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) pwrite64(r0, &(0x7f00000001c0)="8602070941968b99bfe421bab93fcb0d82e222725e587c1848e2ef8477b5673cd5cab949baead8f8c7c74127e2b04753605b2a4b1bffc156", 0x38, 0x0) [ 246.240458][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.278218][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 246.290564][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 246.300248][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 246.327490][ T8745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.375561][ T8818] EXT4-fs (sda1): required extra inode space not available [ 246.386066][ T8818] EXT4-fs (sda1): re-mounted. Opts: debug_want_extra_isize=0x0000000000007fff, [ 246.391830][ T8745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 246.432476][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 246.444806][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 02:20:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\r'], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x100000000, 0x1) ioctl$FS_IOC_GETFLAGS(r0, 0x40087602, &(0x7f0000000000)) 02:20:49 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0x40, 0x0, [], {0x0, @reserved}}) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) pwrite64(r0, &(0x7f00000001c0)="8602070941968b99bfe421bab93fcb0d82e222725e587c1848e2ef8477b5673cd5cab949baead8f8c7c74127e2b04753605b2a4b1bffc156", 0x38, 0x0) [ 246.663018][ T8840] EXT4-fs (sda1): required extra inode space not available [ 246.693140][ T8840] EXT4-fs (sda1): re-mounted. Opts: debug_want_extra_isize=0x0000000000007fff, [ 246.883539][ T8745] 8021q: adding VLAN 0 to HW filter on device batadv0 02:20:49 executing program 4: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) listen(r0, 0x9) listen(r0, 0x0) [ 247.150754][ C0] hrtimer: interrupt took 41884 ns 02:20:50 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0x40, 0x0, [], {0x0, @reserved}}) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) 02:20:50 executing program 0: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0xb, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) [ 247.288328][ T8879] debugfs: File '8877' in directory 'proc' already present! 02:20:50 executing program 5: set_mempolicy(0x1, 0x0, 0xdc) 02:20:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0xf0f041}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xc014c93b772b4597, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x8188aea6, &(0x7f0000000240)) 02:20:50 executing program 4: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) listen(r0, 0x9) listen(r0, 0x0) 02:20:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x4008000000803, 0x0) r2 = socket$inet6(0xa, 0x1000000000005, 0x0) getsockopt$inet_buf(r2, 0x84, 0x2, &(0x7f0000dcffe8)=""/24, &(0x7f0000000080)=0x18) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000000c0)=0x81a, 0x4) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0xfffffffffffffd7a) r3 = socket(0x10, 0x4008000000803, 0x0) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f00000000c0)=0x81a, 0x4) sendto(r3, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0xbd73144e58f8ebcf, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/231, 0x3d}}], 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x18c, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="c9e109ab343875e6fca18c9d6bad95ea"}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100000001}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe97}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffffffffffa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}]}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x62}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000008c0)=0x2, 0x4) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f0000000140)) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/231, 0x3d}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000500)=0x84) r9 = getpid() sched_setparam(r9, &(0x7f0000000180)=0x488c) capget(&(0x7f0000000540)={0x20071026, r9}, &(0x7f0000000580)={0xb1ed, 0x1, 0x7fffffff, 0x1000, 0x43, 0x58e}) r10 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x1000, 0x900) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000900)=ANY=[@ANYRES32=r8, @ANYBLOB="1f0046234ba5df099a21dda341a32ea5a29338f4e307b7d4d6a24fac8cc9d0443d"], 0xa) ioctl$SG_NEXT_CMD_LEN(r10, 0x2283, &(0x7f00000001c0)=0xb0) getsockopt$netlink(r1, 0x10e, 0x7, &(0x7f0000000080)=""/117, &(0x7f0000000100)=0x75) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x68}}, 0x0) [ 247.338312][ T8879] debugfs: File '8877' in directory 'proc' already present! [ 247.371237][ T8880] EXT4-fs (sda1): required extra inode space not available [ 247.421572][ T8880] EXT4-fs (sda1): re-mounted. Opts: debug_want_extra_isize=0x0000000000007fff, [ 247.436701][ T8886] vivid-004: disconnect [ 247.469287][ T8885] vivid-004: reconnect [ 247.480077][ T8894] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure [ 247.498607][ T8886] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 02:20:50 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="ffd722dce20f92597102784bad12b4ec"}, {0x2, 0x0, 0xffffffffffffffff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r1}}, 0x48) write$nbd(0xffffffffffffffff, &(0x7f0000001300)=ANY=[], 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000040)) [ 247.528920][ T8892] vivid-004: disconnect 02:20:50 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)="295d94c3f64145a7d849ddc142358671fb7dfe8db236b4d3a7325d27012e9269de3e723c1a83cef25270805c3d9c48279e60f5e0b5e912f2c03f94e3a5aa95237903bad52862fde3be64ea32a7f3d68169e33ce3c628eb0af797fb5bf8d6470484f747") getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @broadcast}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000002c0)={0x6, 0x95bb, 0x1, 0xd1, 0xffffffffffffff8a, 0x3, 0x7ff, 0x9}, 0x20) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000005, 0x8010, r0, 0x8000000) perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0x800) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000180)=""/100, 0x64}, {&(0x7f0000000480)=""/142, 0x8e}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000000540)=""/86, 0x56}, {&(0x7f00000005c0)=""/136, 0x88}], 0x6, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x2}, {0x0}], 0x0, &(0x7f0000000400)={[{@logbufs={'logbufs'}}, {@sunit={'sunit'}}, {@filestreams='filestreams'}], [{@uid_eq={'uid'}}]}) 02:20:50 executing program 4: clock_adjtime(0x0, &(0x7f0000000000)={0x6, 0x0, 0xe000000000000000}) syz_mount_image$jfs(&(0x7f0000000100)='jfs\x00', &(0x7f0000000140)='./file0\x00', 0x9, 0x6, &(0x7f0000000440)=[{&(0x7f0000000180)="96d37f0130c96d5d469d1b3ea46bec5d752d9412941e41bd8f5ccfeb501dcbdf557e229bb87a6372c0d49a20592e3cefc2c515904c177a89aeb5ddde63e49de5e203decd69f7ed7b3600dba8d89fec4613fb7d32af7637daad5eb7cc5d04213b695b6ed1a4dda5c684ca073af4834ec50ac189c6e4abef8efee52f0659d8b0cd38ecb14ff3f0", 0x86, 0x81}, {&(0x7f0000000240)="5fc036e56a83b5835f1dc0feb76a8c0f67d0b27f2b03fbdf1295806dc6caf71302a224ebdb9e1cc1693acdad0dc9cbefe016dcc420ad3d3a8e3738336f5022bced63c33e02d0425a927e02701fa6abbd43b9af6e88c478d717844766cf5afeb09605b85ad59a", 0x66, 0x5}, {&(0x7f00000002c0)="19a4ad9be69bb907d373eb631900dfa4d86fa8d48c6737e18d62de07dcce25471e25b39913e936c331f7271f91e0c937132a41016aab63010a9f1c50a7442dfd04887c4dcb5b277a56883314", 0x4c, 0x1}, {&(0x7f0000000340)="c92cd1b28dbb490a3fbd115164a5b9d10d", 0x11, 0x1ff}, {&(0x7f0000000380)="9db20856153121f7018cce6646aa52baf93d0637b5048c3e272d1831d9ff58868784e83ec20e01397ccbbde219d3b06ee9408bd72ae88358639ecc3470310c2d6da13d", 0x43, 0x6}, {&(0x7f0000000400)="ac3d21867eb3408b638bfd33440da1a66e7f3e4009428979d4d7b13011cdc38d8d7150", 0x23, 0x1}], 0x800, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f71756f74612c696e746567726974792c646973636172643d3078303030303030303130303030303030302c6e6f71050074612c6e6f696e746567726974792c71756f74612c6e6f646973636172642c7375626a5f757365723d25bb2f2c6f626a5f757365725e6e6f6465762c646566636f6e746578743d73746166665f752c6d61736b3d5e4d41595f524541442c00"/157]) [ 247.590256][ T8892] vivid-004: reconnect 02:20:50 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0x40, 0x0, [], {0x0, @reserved}}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) 02:20:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000840)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) socket$alg(0x26, 0x5, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x10, 0x2000000000000002, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2f0000001d0005c5ffffff000d0000000200001f01000000000002c9130001000000000050800000d18e1092e0c875", 0x2f}], 0x1}, 0x0) r2 = socket(0x10, 0x4008000000803, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000000c0)=0x81a, 0x4) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0xfffffffffffffd7a) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/231, 0x3d}}], 0x1, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000100)={0x101}, 0x4) 02:20:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8000, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000140)={0xf0f041}) ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f00000000c0)={0x3, &(0x7f0000000340)=""/236, &(0x7f0000000540)=[{0x100, 0x35, 0x2, &(0x7f0000000040)=""/53}, {0x7, 0x7e, 0x20, &(0x7f0000000440)=""/126}, {0x1, 0x7b, 0x4, &(0x7f00000004c0)=""/123}]}) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="18100000fa7de9cd575f7940394c66113d1d6e9e41f7587dbabae4eaca6a821c79cba2c20eb3c560ea04b9ef4dfac22e1ee7a6dfdeba7cfe39429a1ffb57e5b067c14e0304d6f7999cb99614d188c9888783724513b10c2205160572fe65622362aba2e0b69f7b9f9c72964bf5a2071b66715949d2253ba5677589f930", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 247.720859][ T8910] XFS (loop5): unknown mount option [uid=00000000000000000000]. [ 247.864997][ T8923] JFS: discard option not supported on device 02:20:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000056e619a6f1030000000000000037fc00cf7ee5fe84aeecb995244d526c4a7b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="1800120008000100767469000c00020008000500ac141400"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 247.911292][ T8923] jfs: Unrecognized mount option "noq" or missing value [ 247.939451][ T8942] vivid-004: disconnect 02:20:50 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0x40, 0x0, [], {0x0, @reserved}}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) [ 247.994413][ T8938] vivid-004: reconnect 02:20:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b24, &(0x7f0000000340)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x06\x00\x00\x00\x00H\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') [ 248.046543][ T8946] vivid-004: disconnect [ 248.090266][ T8938] vivid-004: reconnect 02:20:50 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000200)={r3, 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r3, 0x6}, 0x8) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x5, [0x49, 0x0, 0x1b], [0xc1]}) r6 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1800000, 0x40000) openat$cgroup_ro(r6, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) 02:20:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x1}, &(0x7f0000000200)=0x8) r2 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x2, 0x2) r3 = socket$inet6(0xa, 0x1000000000005, 0x0) getsockopt$inet_buf(r3, 0x84, 0x2, &(0x7f0000dcffe8)=""/24, &(0x7f0000000080)=0x18) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r9 = socket$inet6(0xa, 0x1000000000005, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r10, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r12, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r13 = socket$inet6(0xa, 0x1000000000005, 0x0) getsockopt$inet_buf(r13, 0x84, 0x2, &(0x7f0000dcffe8)=""/24, &(0x7f0000000080)=0x18) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r14, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r1, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="78fd02b046af42efb521671809da11c129e8e0f4eda802395ef7403e0b6952cbf90c815a42d7f7258834683201d655b0c4b61129881daa77671403cf8aea6d57b798cc4584cf27567b6ee06037ac64726506d1f99ac36f1f0260d8d43ceeb7e6c2ee8026d1c3", @ANYRES16=r14, @ANYRESHEX=r4, @ANYRESOCT=r5, @ANYRESOCT=r0, @ANYRES32=r2, @ANYRES16=r6, @ANYRES32, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRESOCT=r7, @ANYRES64=r8], @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r9, @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=r11, @ANYBLOB="290340a7cb13c2b9dd947c84abbea28fdee7ebab253ea1e78f90130c8abf495b39a965b7008e4f", @ANYRES64=r12]]], 0x3}}, 0x0) r15 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x84a0, 0x200) epoll_ctl$EPOLL_CTL_DEL(r15, 0x2, r0) 02:20:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x232, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x7ffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff7000/0x8000)=nil, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup3(r1, r0, 0x40000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0xe7030000, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0xfffffdd7}], 0x1, 0x0, 0x2000000}, 0x0) syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) 02:20:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x161, 0x11, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xa4}, 0x70) 02:20:51 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000003b00)={0x0, 0x0, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x701}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x203008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000008}, 0x804) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)=@polexpire={0xc0, 0x1b, 0x5, 0x0, 0x0, {{{@in6=@remote, @in6=@dev}}}}, 0xc0}}, 0x0) [ 248.322822][ T8958] kvm [8957]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 02:20:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0x40, 0x0, [], {0x0, @reserved}}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) 02:20:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000012000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r4 = dup2(r0, r2) r5 = dup3(r4, r1, 0x0) ioctl$LOOP_CLR_FD(r5, 0x4c01) 02:20:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x1}, &(0x7f0000000200)=0x8) r2 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x2, 0x2) r3 = socket$inet6(0xa, 0x1000000000005, 0x0) getsockopt$inet_buf(r3, 0x84, 0x2, &(0x7f0000dcffe8)=""/24, &(0x7f0000000080)=0x18) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r9 = socket$inet6(0xa, 0x1000000000005, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r10, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r12, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r13 = socket$inet6(0xa, 0x1000000000005, 0x0) getsockopt$inet_buf(r13, 0x84, 0x2, &(0x7f0000dcffe8)=""/24, &(0x7f0000000080)=0x18) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r14, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r1, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="78fd02b046af42efb521671809da11c129e8e0f4eda802395ef7403e0b6952cbf90c815a42d7f7258834683201d655b0c4b61129881daa77671403cf8aea6d57b798cc4584cf27567b6ee06037ac64726506d1f99ac36f1f0260d8d43ceeb7e6c2ee8026d1c3", @ANYRES16=r14, @ANYRESHEX=r4, @ANYRESOCT=r5, @ANYRESOCT=r0, @ANYRES32=r2, @ANYRES16=r6, @ANYRES32, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRESOCT=r7, @ANYRES64=r8], @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r9, @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=r11, @ANYBLOB="290340a7cb13c2b9dd947c84abbea28fdee7ebab253ea1e78f90130c8abf495b39a965b7008e4f", @ANYRES64=r12]]], 0x3}}, 0x0) r15 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x84a0, 0x200) epoll_ctl$EPOLL_CTL_DEL(r15, 0x2, r0) 02:20:51 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000003b00)={0x0, 0x0, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x701}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x203008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000008}, 0x804) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)=@polexpire={0xc0, 0x1b, 0x5, 0x0, 0x0, {{{@in6=@remote, @in6=@dev}}}}, 0xc0}}, 0x0) 02:20:51 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x28840, 0x0) r1 = socket$inet6(0xa, 0x1000000000005, 0x0) getsockopt$inet_buf(r1, 0x84, 0x2, &(0x7f0000dcffe8)=""/24, &(0x7f0000000080)=0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r3 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000140)="ff24d91e3e75a9c4e2b7509a62712607afa49e713715d3cc9fbe28ba97beb105c0f5b504da0b59b1d21483afe9aa8075a8798147eb6096904574dd3b1bc6100c642397d389b99b81a22e584c01ba1e4c072fc3e35596db80b606f114fe903a20923ece0c0886b372e2cc14a5488ec63b8f1978954d8c9291a2ce728c5e7ecf6f8cea7386359e7498ec0963abc7a79eb9f46f2612ac0c519a18f81bca8c6602a6a9e9a76f03e62195c910a7978b00a31bb890fb1b686cb84ca980cd73050aa8925772e82a3d22", &(0x7f0000000240)=""/162}, 0x18) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r3, 0xffffffffffffffff, r2, r4], 0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, &(0x7f0000000100)) 02:20:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200000, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) 02:20:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x232, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x7ffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff7000/0x8000)=nil, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup3(r1, r0, 0x40000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0xe7030000, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0xfffffdd7}], 0x1, 0x0, 0x2000000}, 0x0) syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) 02:20:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x232, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x7ffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff7000/0x8000)=nil, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup3(r1, r0, 0x40000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0xe7030000, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0xfffffdd7}], 0x1, 0x0, 0x2000000}, 0x0) syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) 02:20:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x232, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x7ffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff7000/0x8000)=nil, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup3(r1, r0, 0x40000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0xe7030000, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0xfffffdd7}], 0x1, 0x0, 0x2000000}, 0x0) syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) 02:20:51 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001}}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000140)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000840), 0x4) ioctl$PIO_FONTX(r2, 0x4b6c, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f00000000c0)={0x1, 0x7}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000100)=""/31) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000080)) 02:20:51 executing program 5: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat6\x00') tkill(r0, 0xf) 02:20:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) 02:20:51 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200000, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) 02:20:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="7127a50d1e0bcfe47bf070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x3f, {"568d3bbf65d2a83767e19d5dd6d34745"}, 0x682, 0x1ff}}}, 0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x7fffffff, 0x20acde2010e07a9f, 0x100000001, 0x7}, &(0x7f00000001c0)=0x10) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f00000000c0)={0xb, 0x1, 0xf, 0x1a, 0x0, 0x101, 0x2, 0xd0}) unshare(0xa000400) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nfsfs\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x1c000000, 0x402200) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)='trusted\xbb\\mime_typeppp0eth0\x00', 0x0, r3) 02:20:52 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) 02:20:52 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200000, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) 02:20:52 executing program 1: mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) 02:20:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) r1 = msgget(0x0, 0x0) msgctl$MSG_STAT(r1, 0xb, &(0x7f00000004c0)=""/103) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f00000001c0)="16", 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000700)={'veth0\x00', 0x1}) sendfile(r0, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = socket$inet6(0xa, 0x1000000000005, 0x0) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r7, 0x4054561e, &(0x7f0000000680)={0x8, "36a720ac69fe8a35ae9fe27e9b6abe80b67e65f674ef5377547145a94918c774", 0x5, 0x10, 0xfffffffffffffffd, 0x4, 0xa, 0x2, 0x7fff, 0x80}) r8 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000002e80)={0x0, 0x0}) recvmmsg(r8, &(0x7f0000002e00)=[{{&(0x7f0000000740)=@sco, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/44, 0x2c}, {&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000900)=""/125, 0x7d}, {&(0x7f0000000980)=""/160, 0xa0}, {&(0x7f0000000a40)=""/77, 0x4d}], 0x5, &(0x7f0000000b40)=""/4096, 0x1000}, 0xa8ca}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000001b40)=""/125, 0x7d}, {&(0x7f0000001bc0)=""/220, 0xdc}, {&(0x7f0000001cc0)=""/245, 0xf5}, {&(0x7f0000001dc0)=""/4096, 0x1000}], 0x4}}], 0x2, 0x102, &(0x7f0000002ec0)={r9, r10+10000000}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@loopback, @dev, 0x0}, &(0x7f00000003c0)=0xc) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000480)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, r11}, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) bind$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e24, 0x4, @empty, 0x6ea}, 0x1c) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r12}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="ffd722dce20f92597102784bad12b4ec"}, {0x2, 0x0, 0xffffffffffffffff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r12}}, 0x48) accept4$inet(r4, &(0x7f0000000540)={0x2, 0x0, @multicast1}, &(0x7f0000000580)=0x10, 0x800) arch_prctl$ARCH_SET_GS(0x1001, 0x3f) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000200)=[{0x12, 0x0, [0x9, 0x8000000000003, 0xfffffffffffffffb, 0x5, 0x9, 0x5, 0x7, 0x4, 0x7, 0x0, 0x1f, 0x7ff, 0xb60, 0x5, 0x5, 0x8]}, {0x17, 0x0, [0x2fe3, 0x5, 0x3, 0xff, 0x8001, 0x9, 0x9, 0x80000001, 0x7, 0x5, 0x4, 0x19b9, 0xf8c0000000000, 0x80000001, 0x8, 0xffff]}, {0x23, 0x0, [0x2, 0x84, 0xff, 0x7, 0x7, 0x4, 0x2, 0xff, 0x4, 0x1, 0x1, 0x6, 0x7fffffff, 0x5, 0xc23, 0x2]}, {0x1, 0x0, [0x0, 0xc17e, 0x9, 0x6, 0xfffffffffffffffc, 0x2, 0x22d4, 0x6, 0x3, 0x4, 0x120, 0xffffffffffffffff, 0x2, 0x401, 0x7fff, 0xfffffffffffff007]}, {0x1c, 0x0, [0x4, 0x1, 0x7fffffff, 0x145e, 0xfffffffffffffff8, 0x8, 0x20, 0x4293, 0x0, 0xe96c, 0x7, 0x6, 0x3d, 0x6440, 0x4, 0x200]}, {0x51, 0x0, [0x800, 0xfffffffffffffffc, 0x2, 0x4, 0x7, 0x1f, 0xfffffffffffffffe, 0x5, 0x10000, 0x49b, 0xa0c2, 0x6, 0x81, 0x9, 0x0, 0x4]}], r12, 0x1, 0x1, 0x1b0}}, 0x20) write$binfmt_elf64(r2, 0x0, 0x0) 02:20:52 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x6, 0xc4) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vC3t#\x00', 0x5, 0x101000) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00') getsockopt$ax25_int(r0, 0x101, 0x8000000000009, &(0x7f0000003680), &(0x7f0000000280)=0x4) r2 = socket(0x10, 0x4008000000803, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000000c0)=0x81a, 0x4) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0xfffffffffffffd7a) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/231, 0x3d}}], 0x1, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) 02:20:52 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200000, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) 02:20:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = dup2(r0, 0xffffffffffffffff) ioctl$sock_netdev_private(r1, 0x89f0, &(0x7f0000000300)="295d94c3f64145a7d849ddc142358671fb7dfe8db236b4d3a7325d27012e9269de3e723c1a83cef25270805c3d9c48279e60f5e0b5e912f2c03f94e3a5aa95237903bad52862fde3be64ea32a7f3d68169e33ce3c628eb0af797fb5bf8d6470484f747") ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f00000003c0)={{0x0, @name="be0341f2e5cfc0b8b139cbfe0df144e8f4cb155bae23ebb2c70bdb9a03c9c7dd"}, 0x8, 0xed0, 0x10000}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @broadcast}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000240)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") getsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f00000000c0)={@loopback, @dev, @multicast1}, &(0x7f0000000180)=0xc) unlinkat(r1, &(0x7f0000000080)='./file0/file0\x00', 0x0) r3 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) r4 = socket(0x10, 0x4008000000803, 0x0) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f00000000c0)=0x81a, 0x4) sendto(r4, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0xfffffffffffffd7a) recvmmsg(r4, &(0x7f0000007a40)=[{{&(0x7f0000000400)=@ipx, 0x80, &(0x7f0000000880)=[{&(0x7f0000000480)=""/5, 0x5}, {&(0x7f00000004c0)=""/243, 0xf3}, {&(0x7f00000005c0)=""/46, 0x2e}, {&(0x7f0000000600)=""/36, 0x24}, {&(0x7f0000000640)=""/77, 0x4d}, {&(0x7f00000006c0)=""/202, 0xca}, {&(0x7f00000007c0)=""/63, 0x3f}, {&(0x7f0000000800)=""/73, 0x49}], 0x8, &(0x7f0000002000)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000000900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000ec0), 0x9, &(0x7f0000000f80)=""/69, 0x45}, 0x7c35650a}, {{&(0x7f0000001040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000010c0)=""/206, 0xce}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/196, 0xc4}, {&(0x7f00000012c0)=""/203, 0xcb}], 0x2, &(0x7f0000001400)=""/53, 0x35}, 0x4}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001440)=""/27, 0x1b}, {&(0x7f0000001480)=""/167, 0xa7}], 0x2, &(0x7f0000001580)=""/63, 0x3f}, 0x5}, {{&(0x7f00000015c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000001900), 0x5, &(0x7f0000001980)=""/2, 0x2}, 0x82}, {{&(0x7f00000019c0)=@ax25={{0x3, @netrom}, [@null, @remote, @bcast, @default, @netrom, @default, @rose]}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a40)=""/233, 0xe9}], 0x1, &(0x7f0000001b80)=""/184, 0xb8}, 0x7ff}, {{&(0x7f0000001c40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000007280)=[{&(0x7f0000001cc0)=""/7, 0x7}, {&(0x7f0000001d00)=""/157, 0x9d}, {&(0x7f0000006000)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/63, 0x3f}, {&(0x7f0000001e00)=""/102, 0x66}, {&(0x7f0000001e80)=""/146, 0x92}, {&(0x7f0000007000)=""/162, 0xa2}, {&(0x7f00000070c0)=""/240, 0xf0}, {&(0x7f00000071c0)=""/132, 0x84}], 0x9, &(0x7f0000007340)=""/249, 0xf9}, 0x2180}, {{&(0x7f0000001f40)=@nfc, 0x80, &(0x7f0000007900)=[{&(0x7f0000007440)=""/199, 0xc7}, {&(0x7f0000007540)=""/154, 0x9a}, {&(0x7f0000007600)=""/208, 0xd0}, {&(0x7f0000007700)=""/111, 0x6f}, {&(0x7f0000007780)=""/145, 0x91}, {&(0x7f0000007840)=""/115, 0x73}, {&(0x7f00000078c0)=""/43, 0x2b}], 0x7, &(0x7f0000007980)=""/165, 0xa5}, 0x10001}], 0x8, 0x0, 0x0) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f00000001c0)=0x3, 0x2) fallocate(r3, 0x0, 0x2000421, 0x1) write(r3, &(0x7f0000000340)='/', 0x1) sendfile(r3, r3, &(0x7f0000001000), 0xfec) syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x2000000000011, r3, 0x0) close(0xffffffffffffffff) execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) getitimer(0x3, &(0x7f0000000040)) 02:20:52 executing program 1: mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) 02:20:52 executing program 3: socket$inet(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x81, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r2) r3 = inotify_init() r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_netdev_private(r4, 0x89f0, &(0x7f0000000300)="295d94c3f64145a7d849ddc142358671fb7dfe8db236b4d3a7325d27012e9269de3e723c1a83cef25270805c3d9c48279e60f5e0b5e912f2c03f94e3a5aa95237903bad52862fde3be64ea32a7f3d68169e33ce3c628eb0af797fb5bf8d6470484f747") getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @broadcast}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000002c0)={0x6, 0xff, 0x1, 0xd1, 0xffffffffffffff8a, 0x3, 0x7ff, 0x1fc}, 0x1c) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000400)=@assoc_value, &(0x7f0000000440)=0x8) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000340)={0x1, {0x77359400}, 0x9, 0x4}) inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x1) getdents64(r2, 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) r6 = syz_open_dev$swradio(&(0x7f0000000200)='/d\x01s/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000140)={0xf0f041}) write$P9_RLOPEN(r6, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x96, 0x1, 0x6}, 0x1f}}, 0x18) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000200)={0x6, 0x2, 0x0, "c707352fbde3715c6f44aaad0ecc47f25ed05a0812d5bcfc5f352d6372af83b9"}) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205649, &(0x7f0000000500)={0xa10000, 0x300000, 0x7, [], &(0x7f0000000480)={0x9a0902, 0x4, [], @p_u32=&(0x7f0000000380)=0x8df}}) r8 = getpid() sched_setparam(r8, &(0x7f0000000180)=0x488c) ptrace$setopts(0x4200, r8, 0x4, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) 02:20:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000003200)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006080800418e00000004fcff", 0x58}], 0x1) 02:20:52 executing program 1: mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) 02:20:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x3f, {"568d3bbf65d2a83767e19d5dd6d34745"}, 0x682, 0x1ff}}}, 0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x7fffffff, 0x20acde2010e07a9f, 0x100000001, 0x7}, &(0x7f00000001c0)=0x10) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f0000000000)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x420080, 0x0) ioctl$TIOCCONS(r2, 0x541d) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f00008b7ff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000000010100000008000000000000000000100002000c0001000800040000000000"], 0x24}}, 0x0) 02:20:53 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000180)) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0xf0f041}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000080)) 02:20:53 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) 02:20:53 executing program 0: r0 = socket(0x10, 0x4008000000803, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f00000000c0)=0x81a, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0xfffffffffffffd7a) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/231, 0x3d}}], 0x1, 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f0000000380)=""/176, 0xb0, 0x1000, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x4, @mcast1, 0x9}}, 0x24) socket$inet_udplite(0x2, 0x2, 0x88) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000080)={0xd7, 0x100000001, "c6bf6617e42b6a3523d7d6dfbff9c70f7c0d6adca3de2d44e50505526aa1e1c1c9adba259e2de158e74e867aeb708d4003a8b5b8c5bc88952843177f8db3567e3aedcf53d1f45e34e3c565bc4542b8d3c0eb1eadf375367c22fc93c2b33052878c017dd5bd39cad69be83593c9185d0864f23f10647eb71a3ddeb1040c5f89d926cd3354cb3372e1f0051bef36e44c8c5697aae7e025117933ae74a059afb64b848789dc02640f36d904274325af3e8a8539a4f028088f50fe3bf6e3b1303bdfb424ee91e81c86c5c6b9e64fbea40f"}, 0x2502) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20800, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000002c0)={0x0, 0xfffffffffffffefe, &(0x7f0000000340)=[{&(0x7f0000000200)="2400000020007be11dfffd946f610500020003061f00008100000800080017000400ff7e280000001100ffffba16a0aa1c0900000000000020000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 250.470291][ T9110] vivid-004: disconnect [ 250.503727][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 250.505940][ T9109] vivid-004: reconnect [ 250.548559][ T9110] vivid-004: disconnect [ 250.597005][ T9109] vivid-004: reconnect [ 250.931360][ T9112] bond0: (slave bond_slave_1): Releasing backup interface 02:20:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x4000, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x0, @u32}, @typed={0x8, 0x8, @pid}]}, 0x24}}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000840), 0x4) ioctl$PIO_FONTX(r1, 0x4b6c, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) 02:20:53 executing program 1: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) 02:20:53 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) 02:20:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x20000000000000a, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000200)={r3, 0x2}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r3, 0x7ff}, &(0x7f0000000080)=0x8) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x10) 02:20:53 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) getresuid(&(0x7f0000000340), 0x0, &(0x7f00000003c0)) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='security.capability\x00', 0x0, 0x0, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x400000, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x5) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='9p\x00', 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e7370fc646d612c706f72743d3078303030303030303030303030346532332c72713d3078b53030303030303030303030303030302c72713d3078303030303030303030303030303030302c72713d3078303030303030303030303030303031352c76657273696f6e3d3970323030302c64666c746769643de6b024b98eb5880d743a45fe581bf771f8009c38d0765e1598b1fd98091677169967b6d53a1131f00f791832c8a9d7a9005e918def6d15718c33c2b20e3a21eab45cb9d356c8a5931d517a13646ffa1b5d8d9f27506601e23b93637f888cd6f8dd2319968ae6a407064f4e33381d1d1a2e549c9cf88f11d97f067883f450f130cc16fd1c23e2b336b68ddf20c8bb94cf4a5bbdf0472785154a439d650fa1862108946968aefd8fe71e14868fbe6c350c7cef302ed84d5ec99c976cfc08abc909eaafb9f0af39fbb53ad321bc0b112b1f052c0e1db87758d68d89eb34735745032b97aba762594687d97408535655a9f1b85bc6b2a6d21cc15aac501829013a2622ccdaf4f10d810b6f1fe49d25ebd642ed5b80a3cff0db36fa8a724cf35371654d6418ff58b2d0bf4ef6c1666e2ad1a7e26a3006f28d13e81cefabd134e792bdd50b616fa8cf747f0aaeb5c089d97c869e61104a6635e7f2c220038b724467f78e55ced5696f70925e96fcc5a0b7ef51aa7dbbc5360fb2facdcd4e88cb6663a53a8741f97522ccd266d8eab158cb14b97f25db38d052c06e6437ff1ed60b26f636e5e6d3f32d5c270a59bcaaab0008f605167202a408563d9bbc08367b09ea84fe5912d9d05ebdad04b52c5f3224deaad31c8b5649a3f81f44c606768c13dd7a51c66a878f102a86ca34aed7187b9f9a5f9516130ed44d76e7ed068af9a66134d4fff61dadf8c7e1b4a6e5f53fc7884cf8bce58192b554e68f5bef396ee0a9edd3f447f5a6a8b81b835c9fab59d29b290a57a9d211389bf265765688d8bac01fb715f5d1f3b05aa589eab4d9f86e1d5a302e68447511e7f0c1036068655da7dff35e59d302d059ff", @ANYRESHEX=0x0, @ANYRESOCT=r2]) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) [ 251.048550][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 02:20:53 executing program 0: r0 = socket(0x10, 0x4008000000803, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f00000000c0)=0x81a, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0xfffffffffffffd7a) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/231, 0x3d}}], 0x1, 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f0000000380)=""/176, 0xb0, 0x1000, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x4, @mcast1, 0x9}}, 0x24) socket$inet_udplite(0x2, 0x2, 0x88) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000080)={0xd7, 0x100000001, "c6bf6617e42b6a3523d7d6dfbff9c70f7c0d6adca3de2d44e50505526aa1e1c1c9adba259e2de158e74e867aeb708d4003a8b5b8c5bc88952843177f8db3567e3aedcf53d1f45e34e3c565bc4542b8d3c0eb1eadf375367c22fc93c2b33052878c017dd5bd39cad69be83593c9185d0864f23f10647eb71a3ddeb1040c5f89d926cd3354cb3372e1f0051bef36e44c8c5697aae7e025117933ae74a059afb64b848789dc02640f36d904274325af3e8a8539a4f028088f50fe3bf6e3b1303bdfb424ee91e81c86c5c6b9e64fbea40f"}, 0x2502) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20800, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000002c0)={0x0, 0xfffffffffffffefe, &(0x7f0000000340)=[{&(0x7f0000000200)="2400000020007be11dfffd946f610500020003061f00008100000800080017000400ff7e280000001100ffffba16a0aa1c0900000000000020000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:20:53 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) 02:20:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x4000) io_cancel(0x0, 0x0, &(0x7f0000000680)) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7f454c4602018001390f00000000000002000600ffffffff1c020000380000003901000005000000d300200001000100ae07000000000000040000000700fbc59784000003000000040000000104000000040000000000001f9883e7af6dff607e68a16a0dd95a914b12bcd7613b5955c198a140c73b1cbc2a14cfc45183ca3eaa2e8b13ec734104e4a5425ac529d15af438497fa04887746fc8584dbceeb4cbe166ad3a5b7d00e7a44c8400"/375], 0x177) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x4, 0x20000800, 0x0, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x0, 0x3, 0x2}, 0x10) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x101000, 0x0) prctl$PR_GET_NAME(0x10, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000200)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000005, 0x0) r3 = dup2(r0, 0xffffffffffffffff) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000140)={0x33, 0x12, 0x0, 0xc, 0x2, 0xfffffffffffffff8, 0x4, 0x2b, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)) r4 = getpid() syz_open_procfs(r4, &(0x7f0000000100)='net/udplite6\x00') dup(r0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 251.266133][ T9141] 9pnet_virtio: no channels available for device 127.0.0.1 02:20:54 executing program 1: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) [ 251.391182][ T9152] 9pnet_virtio: no channels available for device 127.0.0.1 [ 251.409459][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 02:20:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fallocate(r0, 0x1, 0x821, 0x41f) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42c00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_settime(0x4, &(0x7f0000000080)={0x0, 0x989680}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/WhN\xb6\xddsht]#\x00', 0xc0c82, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000040)={0x4e, 0xfffffffeffffffff, 0x5, 0x4, 0x2}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000700fe0500ff08000100feffffff", 0x24) 02:20:54 executing program 4: setresuid(0xffffffffffffffff, 0xfffe, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000005, 0x0) getsockopt$inet_buf(r2, 0x84, 0x2, &(0x7f0000dcffe8)=""/24, &(0x7f0000000080)=0x18) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000200)={r4, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x10000, 0x4, 0x6, 0x0, r4}, &(0x7f0000000100)=0x10) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1) 02:20:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x4000, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x0, @u32}, @typed={0x8, 0x8, @pid}]}, 0x24}}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000840), 0x4) ioctl$PIO_FONTX(r1, 0x4b6c, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) 02:20:54 executing program 1: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) 02:20:54 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) 02:20:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a057fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010009081000418e004006040400", 0x58}], 0x1) socket$netlink(0x10, 0x3, 0x15) 02:20:55 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) r1 = socket(0x10, 0x4008000000803, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f00000000c0)=0x81a, 0x4) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0xfffffffffffffd7a) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/231, 0x3d}}], 0x1, 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@null=' \x00', 0x9, 'nlmon0\x00'}) ioctl$VIDIOC_S_SELECTION(r0, 0x80045643, &(0x7f0000000080)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000003c0)={0x101, 0x7, 0x1b000}, 0x4) 02:20:55 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x3, 0x0) r2 = socket(0x10, 0x4008000000803, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000000c0)=0x81a, 0x4) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0xfffffd33, 0x0, 0x0, 0xfffffffffffffd7a) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/231, 0x3d}}], 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 02:20:55 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x14, 0x1a200) clock_gettime(0x0, &(0x7f0000000080)) write$P9_RREMOVE(r0, &(0x7f00000000c0)={0x7, 0x7b, 0x1}, 0x7) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0245720, &(0x7f0000000300)={0x11, {r1, r2+30000000}, 0x9, 0x42}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x8c, 0x0, 0x20000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x6000000000000001, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x8000000000000002, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00\x00\x00\x00\x00\x00\x00\x00\xb9\xd9\xd3q\xa1h\x00', 0x0, 0x0, 0x28d, [], 0x0, 0x0, &(0x7f0000000100)=""/5}, &(0x7f00000002c0)=0x78) getpgid(0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) r6 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'gretap0\x00'}, 0xffffffffffffff3d) ioctl(r7, 0x800000000008982, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f5, 0x0, 0xffff, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0xfffffffffffffffc, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000880)=ANY=[], 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x20, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x4, 0x9}]}, 0x20}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x401, 0x40000000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r9 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r9, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) bind$packet(r9, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r9, 0x107, 0x5, &(0x7f0000001000), 0xc5) 02:20:55 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1cb, 0x40, 0x0, 0x80, 0x0, 0x38, 0x0, 0xfffffffffffffc01, 0x6, 0xfffffffffffffe00}, [{0x60000000, 0x0, 0x200, 0x6, 0xfff, 0x0, 0x0, 0x40}]}, 0x78) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) [ 252.818409][ T9184] EXT4-fs: 12 callbacks suppressed [ 252.818419][ T9184] EXT4-fs (sda1): required extra inode space not available [ 252.852845][ T9184] EXT4-fs (sda1): re-mounted. Opts: debug_want_extra_isize=0x0000000000007fff, 02:20:55 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) 02:20:55 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x3f, {"568d3bbf65d2a83767e19d5dd6d34745"}, 0x682, 0x1ff}}}, 0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x7fffffff, 0x20acde2010e07a9f, 0x100000001, 0x7}, &(0x7f00000001c0)=0x10) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="373a320920208340ed1755089505b1070a2ea8b5805fa32bf83114897a159069b25735652deca6c330aa37b2ef0000000080000000000000000000000080d6ebb5b7401348c6837ed071b9f08a68bf5e24ee434ac5a24bb333a1ca4b56a5e68190931a3a7577f21a8ab16dde5182bed898e43e615893052b01d1c540c8a6fcb0b49940c84ff5f5ae8815ca38529e7fac67124fad397ed5ea8c56676eddf6cdf798b68b6946a2aa2a72739b5ad5548ae74edcfb3e8a7f97fce52eae5004cc9abc88fbb52d802692d5828db9bbced730aa0b97ec69dd0b0355587d921bd9d42135c22e2cb394caa8"], 0x4) 02:20:55 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) 02:20:56 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) [ 253.220121][ T9214] block nbd0: Receive control failed (result -22) [ 253.234978][ T9215] EXT4-fs (sda1): required extra inode space not available [ 253.285451][ T9215] EXT4-fs (sda1): re-mounted. Opts: debug_want_extra_isize=0x0000000000007fff, 02:20:56 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) 02:20:56 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) [ 253.559404][ T9226] EXT4-fs (sda1): required extra inode space not available [ 253.592900][ T9226] EXT4-fs (sda1): re-mounted. Opts: debug_want_extra_isize=0x0000000000007fff, 02:20:56 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200000, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) [ 253.764116][ T9234] block nbd0: Device being setup by another task 02:20:56 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) [ 253.846540][ T9197] block nbd0: shutting down sockets [ 253.896445][ T9240] EXT4-fs (sda1): required extra inode space not available [ 253.951491][ T9240] EXT4-fs (sda1): re-mounted. Opts: debug_want_extra_isize=0x0000000000007fff, 02:20:56 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7fff}}]}) [ 255.346036][ T646] device bridge_slave_1 left promiscuous mode [ 255.352941][ T646] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.394959][ T646] device bridge_slave_0 left promiscuous mode [ 255.401152][ T646] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.302951][ T646] device hsr_slave_0 left promiscuous mode [ 257.372342][ T646] device hsr_slave_1 left promiscuous mode [ 257.425673][ T646] team0 (unregistering): Port device team_slave_1 removed [ 257.437615][ T646] team0 (unregistering): Port device team_slave_0 removed [ 257.450882][ T646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.508881][ T646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.599166][ T646] bond0 (unregistering): Released all slaves [ 257.731360][ T9266] IPVS: ftp: loaded support on port[0] = 21 [ 257.801981][ T9266] chnl_net:caif_netlink_parms(): no params data found [ 257.835355][ T9266] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.842588][ T9266] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.850348][ T9266] device bridge_slave_0 entered promiscuous mode [ 257.858319][ T9266] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.865503][ T9266] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.873703][ T9266] device bridge_slave_1 entered promiscuous mode [ 257.962219][ T9266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.979829][ T9266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.010424][ T9266] team0: Port device team_slave_0 added [ 258.024237][ T9266] team0: Port device team_slave_1 added [ 258.165135][ T9266] device hsr_slave_0 entered promiscuous mode [ 258.192528][ T9266] device hsr_slave_1 entered promiscuous mode [ 258.242266][ T9266] debugfs: Directory 'hsr0' with parent '/' already present! [ 258.268381][ T9266] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.275521][ T9266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.282975][ T9266] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.290052][ T9266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.365604][ T9266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.388016][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.401080][ T8748] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.416967][ T8748] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.434474][ T9266] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.453955][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.469147][ T8748] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.476359][ T8748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.513158][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.528545][ T8744] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.535703][ T8744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.553923][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.580103][ T9266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 258.597952][ T9266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.612664][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.629200][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.639240][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.654485][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.680159][ T9266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.691879][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 399.502572][ T1064] INFO: task syz-executor.0:9197 can't die for more than 143 seconds. [ 399.510979][ T1064] syz-executor.0 D27208 9197 8732 0x00004004 [ 399.517717][ T1064] Call Trace: [ 399.521121][ T1064] __schedule+0x76e/0x17a0 [ 399.525623][ T1064] ? __sched_text_start+0x8/0x8 [ 399.530484][ T1064] ? __kasan_check_read+0x11/0x20 [ 399.535568][ T1064] ? __lock_acquire+0x16f2/0x4a00 [ 399.540600][ T1064] schedule+0xd9/0x260 [ 399.544770][ T1064] schedule_timeout+0x717/0xc50 [ 399.549632][ T1064] ? find_held_lock+0x35/0x130 [ 399.554572][ T1064] ? usleep_range+0x170/0x170 [ 399.559253][ T1064] ? lock_downgrade+0x920/0x920 [ 399.564163][ T1064] ? _raw_spin_unlock_irq+0x28/0x90 [ 399.569356][ T1064] ? wait_for_completion+0x294/0x440 [ 399.574692][ T1064] ? _raw_spin_unlock_irq+0x28/0x90 [ 399.579916][ T1064] ? lockdep_hardirqs_on+0x418/0x5d0 [ 399.585289][ T1064] ? trace_hardirqs_on+0x67/0x240 [ 399.590322][ T1064] ? __kasan_check_read+0x11/0x20 [ 399.595429][ T1064] wait_for_completion+0x29c/0x440 [ 399.600656][ T1064] ? wait_for_completion_interruptible+0x470/0x470 [ 399.607209][ T1064] ? wake_up_q+0xf0/0xf0 [ 399.611465][ T1064] ? flush_workqueue_prep_pwqs+0x352/0x590 [ 399.617309][ T1064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.624179][ T1064] flush_workqueue+0x40f/0x14c0 [ 399.629087][ T1064] ? __dev_printk+0x202/0x20e [ 399.633835][ T1064] ? _dev_warn+0xd7/0x109 [ 399.638170][ T1064] ? pwq_unbound_release_workfn+0x2f0/0x2f0 [ 399.644192][ T1064] ? sock_shutdown+0x83/0x200 [ 399.648975][ T1064] nbd_ioctl+0xb32/0xc50 [ 399.653265][ T1064] ? nbd_ioctl+0xb32/0xc50 [ 399.657801][ T1064] ? nbd_release+0x150/0x150 [ 399.663311][ T1064] ? finish_wait+0x260/0x260 [ 399.667903][ T1064] ? nbd_release+0x150/0x150 [ 399.672559][ T1064] blkdev_ioctl+0xedb/0x1c20 [ 399.677236][ T1064] ? blkpg_ioctl+0xa90/0xa90 [ 399.682828][ T1064] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 399.688738][ T1064] block_ioctl+0xee/0x130 [ 399.693127][ T1064] ? blkdev_fallocate+0x410/0x410 [ 399.698240][ T1064] do_vfs_ioctl+0xdb6/0x13e0 [ 399.702898][ T1064] ? ioctl_preallocate+0x210/0x210 [ 399.708003][ T1064] ? __fget+0x384/0x560 [ 399.712206][ T1064] ? ksys_dup3+0x3e0/0x3e0 [ 399.716620][ T1064] ? nsecs_to_jiffies+0x30/0x30 [ 399.721466][ T1064] ? tomoyo_file_ioctl+0x23/0x30 [ 399.726540][ T1064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.732839][ T1064] ? security_file_ioctl+0x8d/0xc0 [ 399.737956][ T1064] ksys_ioctl+0xab/0xd0 [ 399.742227][ T1064] __x64_sys_ioctl+0x73/0xb0 [ 399.746817][ T1064] do_syscall_64+0xfa/0x760 [ 399.751314][ T1064] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 399.757870][ T1064] RIP: 0033:0x4598e9 [ 399.761765][ T1064] Code: Bad RIP value. [ 399.765901][ T1064] RSP: 002b:00007fdddf534c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.774352][ T1064] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004598e9 [ 399.782378][ T1064] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 399.790353][ T1064] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 399.798363][ T1064] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdddf5356d4 [ 399.806455][ T1064] R13: 00000000004c31c9 R14: 00000000004d6978 R15: 00000000ffffffff [ 399.814498][ T1064] INFO: task syz-executor.0:9197 blocked for more than 143 seconds. [ 399.822515][ T1064] Not tainted 5.3.0-rc6-next-20190830 #75 [ 399.828762][ T1064] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 399.837551][ T1064] syz-executor.0 D27208 9197 8732 0x00004004 [ 399.843915][ T1064] Call Trace: [ 399.847216][ T1064] __schedule+0x76e/0x17a0 [ 399.851615][ T1064] ? __sched_text_start+0x8/0x8 [ 399.856512][ T1064] ? __kasan_check_read+0x11/0x20 [ 399.861550][ T1064] ? __lock_acquire+0x16f2/0x4a00 [ 399.866643][ T1064] schedule+0xd9/0x260 [ 399.870711][ T1064] schedule_timeout+0x717/0xc50 [ 399.875607][ T1064] ? find_held_lock+0x35/0x130 [ 399.880378][ T1064] ? usleep_range+0x170/0x170 [ 399.885673][ T1064] ? lock_downgrade+0x920/0x920 [ 399.890515][ T1064] ? _raw_spin_unlock_irq+0x28/0x90 [ 399.895764][ T1064] ? wait_for_completion+0x294/0x440 [ 399.901045][ T1064] ? _raw_spin_unlock_irq+0x28/0x90 [ 399.906297][ T1064] ? lockdep_hardirqs_on+0x418/0x5d0 [ 399.911844][ T1064] ? trace_hardirqs_on+0x67/0x240 [ 399.916898][ T1064] ? __kasan_check_read+0x11/0x20 [ 399.921918][ T1064] wait_for_completion+0x29c/0x440 [ 399.927061][ T1064] ? wait_for_completion_interruptible+0x470/0x470 [ 399.933601][ T1064] ? wake_up_q+0xf0/0xf0 [ 399.937843][ T1064] ? flush_workqueue_prep_pwqs+0x352/0x590 [ 399.943691][ T1064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.949928][ T1064] flush_workqueue+0x40f/0x14c0 [ 399.954828][ T1064] ? __dev_printk+0x202/0x20e [ 399.959518][ T1064] ? _dev_warn+0xd7/0x109 [ 399.963891][ T1064] ? pwq_unbound_release_workfn+0x2f0/0x2f0 [ 399.969796][ T1064] ? sock_shutdown+0x83/0x200 [ 399.974523][ T1064] nbd_ioctl+0xb32/0xc50 [ 399.978772][ T1064] ? nbd_ioctl+0xb32/0xc50 [ 399.983246][ T1064] ? nbd_release+0x150/0x150 [ 399.987848][ T1064] ? finish_wait+0x260/0x260 [ 399.992498][ T1064] ? nbd_release+0x150/0x150 [ 399.997085][ T1064] blkdev_ioctl+0xedb/0x1c20 [ 400.001659][ T1064] ? blkpg_ioctl+0xa90/0xa90 [ 400.006370][ T1064] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 400.013145][ T1064] block_ioctl+0xee/0x130 [ 400.017467][ T1064] ? blkdev_fallocate+0x410/0x410 [ 400.022544][ T1064] do_vfs_ioctl+0xdb6/0x13e0 [ 400.027139][ T1064] ? ioctl_preallocate+0x210/0x210 [ 400.032292][ T1064] ? __fget+0x384/0x560 [ 400.036456][ T1064] ? ksys_dup3+0x3e0/0x3e0 [ 400.040877][ T1064] ? nsecs_to_jiffies+0x30/0x30 [ 400.045770][ T1064] ? tomoyo_file_ioctl+0x23/0x30 [ 400.050706][ T1064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.057003][ T1064] ? security_file_ioctl+0x8d/0xc0 [ 400.062168][ T1064] ksys_ioctl+0xab/0xd0 [ 400.066315][ T1064] __x64_sys_ioctl+0x73/0xb0 [ 400.070885][ T1064] do_syscall_64+0xfa/0x760 [ 400.075433][ T1064] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.081320][ T1064] RIP: 0033:0x4598e9 [ 400.085244][ T1064] Code: Bad RIP value. [ 400.089304][ T1064] RSP: 002b:00007fdddf534c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.097753][ T1064] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004598e9 [ 400.105794][ T1064] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 400.113815][ T1064] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 400.121868][ T1064] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdddf5356d4 [ 400.129880][ T1064] R13: 00000000004c31c9 R14: 00000000004d6978 R15: 00000000ffffffff [ 400.137887][ T1064] [ 400.137887][ T1064] Showing all locks held in the system: [ 400.146233][ T1064] 1 lock held by khungtaskd/1064: [ 400.151238][ T1064] #0: ffffffff88fa7f00 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 400.160867][ T1064] 2 locks held by kworker/u5:0/1523: [ 400.166186][ T1064] #0: ffff8880a11f3d28 ((wq_completion)knbd0-recv){+.+.}, at: process_one_work+0x88b/0x1740 [ 400.176499][ T1064] #1: ffff8880a5c57dc0 ((work_completion)(&args->work)){+.+.}, at: process_one_work+0x8c1/0x1740 [ 400.187152][ T1064] 1 lock held by rsyslogd/8603: [ 400.191977][ T1064] #0: ffff8880a2e46d60 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 400.200631][ T1064] 2 locks held by getty/8693: [ 400.205342][ T1064] #0: ffff88809bd7c090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 400.214324][ T1064] #1: ffffc90005f4f2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 400.223954][ T1064] 2 locks held by getty/8694: [ 400.228615][ T1064] #0: ffff8880a4b0f090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 400.237590][ T1064] #1: ffffc90005f392e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 400.247178][ T1064] 2 locks held by getty/8695: [ 400.251826][ T1064] #0: ffff8880a3dda090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 400.260793][ T1064] #1: ffffc90005f412e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 400.270399][ T1064] 2 locks held by getty/8696: [ 400.275976][ T1064] #0: ffff8880a059b090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 400.285133][ T1064] #1: ffffc90005f2d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 400.294758][ T1064] 2 locks held by getty/8697: [ 400.299432][ T1064] #0: ffff88809f659090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 400.308419][ T1064] #1: ffffc90005f3d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 400.318007][ T1064] 2 locks held by getty/8698: [ 400.322714][ T1064] #0: ffff888090da9090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 400.331673][ T1064] #1: ffffc90005f532e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 400.341523][ T1064] 2 locks held by getty/8699: [ 400.346221][ T1064] #0: ffff88809a1c4090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 400.355306][ T1064] #1: ffffc90005f212e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 400.365426][ T1064] [ 400.367750][ T1064] ============================================= [ 400.367750][ T1064] [ 400.376340][ T1064] NMI backtrace for cpu 0 [ 400.380676][ T1064] CPU: 0 PID: 1064 Comm: khungtaskd Not tainted 5.3.0-rc6-next-20190830 #75 [ 400.389342][ T1064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.399379][ T1064] Call Trace: [ 400.402766][ T1064] dump_stack+0x172/0x1f0 [ 400.407094][ T1064] nmi_cpu_backtrace.cold+0x70/0xb2 [ 400.412282][ T1064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.418512][ T1064] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 400.424140][ T1064] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 400.430102][ T1064] arch_trigger_cpumask_backtrace+0x14/0x20 [ 400.435984][ T1064] watchdog+0xc99/0x1360 [ 400.440219][ T1064] kthread+0x361/0x430 [ 400.444268][ T1064] ? reset_hung_task_detector+0x30/0x30 [ 400.449791][ T1064] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 400.456022][ T1064] ret_from_fork+0x24/0x30 [ 400.460543][ T1064] Sending NMI from CPU 0 to CPUs 1: [ 400.465884][ C1] NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0xe/0x10 [ 400.467549][ T1064] Kernel panic - not syncing: hung_task: blocked tasks [ 400.480955][ T1064] CPU: 0 PID: 1064 Comm: khungtaskd Not tainted 5.3.0-rc6-next-20190830 #75 [ 400.489601][ T1064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.499637][ T1064] Call Trace: [ 400.502923][ T1064] dump_stack+0x172/0x1f0 [ 400.507241][ T1064] panic+0x2dc/0x755 [ 400.511208][ T1064] ? add_taint.cold+0x16/0x16 [ 400.515884][ T1064] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 400.521519][ T1064] ? ___preempt_schedule+0x16/0x20 [ 400.526622][ T1064] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 400.532766][ T1064] ? nmi_trigger_cpumask_backtrace+0x24c/0x28b [ 400.539048][ T1064] ? nmi_trigger_cpumask_backtrace+0x256/0x28b [ 400.545194][ T1064] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 400.551374][ T1064] watchdog+0xcaa/0x1360 [ 400.555629][ T1064] kthread+0x361/0x430 [ 400.559694][ T1064] ? reset_hung_task_detector+0x30/0x30 [ 400.565225][ T1064] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 400.571449][ T1064] ret_from_fork+0x24/0x30 [ 400.577589][ T1064] Kernel Offset: disabled [ 400.581921][ T1064] Rebooting in 86400 seconds..