[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 16.757221] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.968335] random: sshd: uninitialized urandom read (32 bytes read) [ 23.399768] random: sshd: uninitialized urandom read (32 bytes read) [ 24.249960] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.196' (ECDSA) to the list of known hosts. [ 29.755752] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/07 15:17:57 fuzzer started [ 31.311495] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/07 15:18:00 dialing manager at 10.128.0.26:33379 2018/07/07 15:18:06 syscalls: 1748 2018/07/07 15:18:06 code coverage: enabled 2018/07/07 15:18:06 comparison tracing: enabled 2018/07/07 15:18:06 setuid sandbox: enabled 2018/07/07 15:18:06 namespace sandbox: enabled 2018/07/07 15:18:06 fault injection: enabled 2018/07/07 15:18:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/07 15:18:06 net packed injection: enabled [ 39.649460] random: crng init done 15:19:07 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)=')') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0xb, 0x20040000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000002c0)="48b801000000000000000f23c00f21f835020004000f23f8b9c70200000f32f0460fc78868cc0000b8010000000f01c166b8f8000f00d866bad00466b8c26266efc441adfedcc4c19855a804000000460f1a7d046436640f07", 0x59}], 0x1, 0x0, &(0x7f0000000380), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close(r0) 15:19:07 executing program 2: open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) mount$9p_tcp(&(0x7f0000000000)='\n24.20.20.0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=', 'tcp', 0x2c, {'port', 0x3d}, 0x2c, {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) 15:19:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) sendto$inet(r2, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 15:19:07 executing program 7: r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000013c0)=ANY=[@ANYRES64=r0]) fstat(r0, &(0x7f0000000140)) 15:19:07 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x77}, [], {0x95}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) 15:19:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket(0xa, 0x1, 0x0) 15:19:07 executing program 5: prctl$intptr(0x1c, 0x3f) faccessat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x0, 0x0) 15:19:07 executing program 6: io_submit(0x0, 0x96485e9842301d6f, &(0x7f0000b4b000)) [ 99.947838] IPVS: ftp: loaded support on port[0] = 21 [ 100.006516] IPVS: ftp: loaded support on port[0] = 21 [ 100.033067] IPVS: ftp: loaded support on port[0] = 21 [ 100.038296] IPVS: ftp: loaded support on port[0] = 21 [ 100.072400] IPVS: ftp: loaded support on port[0] = 21 [ 100.082888] IPVS: ftp: loaded support on port[0] = 21 [ 100.104955] IPVS: ftp: loaded support on port[0] = 21 [ 100.127784] IPVS: ftp: loaded support on port[0] = 21 [ 101.773604] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.780074] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.815572] device bridge_slave_0 entered promiscuous mode [ 101.833344] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.840416] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.850443] device bridge_slave_0 entered promiscuous mode [ 101.860418] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.866857] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.876205] device bridge_slave_0 entered promiscuous mode [ 101.890227] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.896693] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.912814] device bridge_slave_0 entered promiscuous mode [ 101.934272] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.940805] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.956228] device bridge_slave_0 entered promiscuous mode [ 101.966060] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.972535] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.982798] device bridge_slave_1 entered promiscuous mode [ 101.990080] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.996494] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.003580] device bridge_slave_0 entered promiscuous mode [ 102.013603] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.020180] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.040548] device bridge_slave_1 entered promiscuous mode [ 102.048564] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.055063] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.063405] device bridge_slave_1 entered promiscuous mode [ 102.070267] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.076644] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.089354] device bridge_slave_1 entered promiscuous mode [ 102.096965] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.103402] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.117811] device bridge_slave_0 entered promiscuous mode [ 102.126268] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 102.133498] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.139895] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.153923] device bridge_slave_0 entered promiscuous mode [ 102.167861] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.174273] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.182971] device bridge_slave_1 entered promiscuous mode [ 102.190631] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.197141] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.206396] device bridge_slave_1 entered promiscuous mode [ 102.215932] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 102.224596] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 102.233443] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 102.245377] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 102.252567] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.258987] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.277354] device bridge_slave_1 entered promiscuous mode [ 102.297284] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 102.306151] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.312603] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.347156] device bridge_slave_1 entered promiscuous mode [ 102.356662] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 102.365368] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 102.374384] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 102.383110] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 102.401587] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 102.411406] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 102.443337] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 102.508853] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 102.517553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 102.537534] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 102.633181] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 102.702841] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 102.717081] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 102.735390] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 102.753140] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 102.770196] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 102.832821] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 102.851063] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 102.869104] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 102.887785] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 102.899038] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 102.917156] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 102.943141] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 103.010732] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 103.047782] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 103.058686] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 103.282442] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 103.298733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.316430] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 103.324534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.422756] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 103.431829] team0: Port device team_slave_0 added [ 103.445559] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 103.461173] team0: Port device team_slave_0 added [ 103.477296] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 103.499760] team0: Port device team_slave_0 added [ 103.509517] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 103.525795] team0: Port device team_slave_0 added [ 103.546165] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 103.558407] team0: Port device team_slave_0 added [ 103.565713] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 103.579704] team0: Port device team_slave_1 added [ 103.588813] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 103.601687] team0: Port device team_slave_0 added [ 103.618170] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 103.632551] team0: Port device team_slave_0 added [ 103.644996] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 103.655131] team0: Port device team_slave_1 added [ 103.660533] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 103.672685] team0: Port device team_slave_1 added [ 103.683215] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 103.693893] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 103.710644] team0: Port device team_slave_1 added [ 103.721056] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 103.736800] team0: Port device team_slave_1 added [ 103.746285] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 103.758508] team0: Port device team_slave_1 added [ 103.764386] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 103.773073] team0: Port device team_slave_1 added [ 103.779893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.794084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.804399] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 103.813623] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 103.820823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.847444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.859129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.870835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.879760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.887831] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 103.895101] team0: Port device team_slave_0 added [ 103.903293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 103.912323] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 103.921748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.933616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.964069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.978575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.986931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.995564] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 104.008716] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 104.029621] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 104.052723] team0: Port device team_slave_1 added [ 104.068138] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 104.076202] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.097353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.110423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.123426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.131801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.139969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.148343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.156493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.164136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.171991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.182477] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 104.189732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.197751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.213594] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 104.223564] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 104.233329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.249505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.264752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.279964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.295888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.304196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.314124] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 104.322532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.336565] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.345247] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 104.354789] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 104.369230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.378155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.390374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.399276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.408620] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 104.420732] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 104.431149] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 104.444100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.452758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.467548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.483647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.491920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.500456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.509137] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 104.516574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.525159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.542178] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 104.557593] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 104.565334] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 104.574268] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 104.586709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.625951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.651376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.663958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.671848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.679943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.687850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.695913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.717517] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 104.724995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.743704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.775452] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 104.783554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.809131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.630828] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.637278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.643996] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.650425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.666290] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 105.678906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.696565] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.703070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.709889] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.716345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.761663] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 105.863834] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.870295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.877046] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.883450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.891351] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 105.910432] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.917066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.924080] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.930711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.939005] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 105.949591] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.956490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.963161] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.969573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.006598] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 106.067485] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.073981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.080695] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.087127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.120483] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 106.142249] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.148686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.155373] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.161760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.169824] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 106.182403] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.188898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.195867] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.202293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.237105] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 106.720242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.731886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.759758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.774008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.781330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.789274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.797843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.194922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.221713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.274831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.366958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.490401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.516181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.533653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.613481] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 110.637063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.659446] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 110.711828] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 110.801900] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 110.900523] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 110.968922] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 110.991449] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 111.026217] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 111.033457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.051561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.071294] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 111.078685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.096524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.118988] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 111.128766] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 111.148089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.166652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.260059] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 111.266601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.288968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.323199] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 111.334890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.345483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.426348] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 111.433102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.447138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.461677] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 111.477813] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.489971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.506663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.571731] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.614621] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 111.621384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.636612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.661402] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.772399] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.795310] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.883086] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.911289] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.045220] 8021q: adding VLAN 0 to HW filter on device team0 15:19:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0xfffffffffffffdeb) r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000002780)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000080)="442d1e066457b59404418e82a7eb21ac71d842e59b2ea28184be8cab45bca5f83f144158bf894a78b0d4c05fc47370d740c94ca23547f0c183a5baf310e7bc9a581f35fad6fdf036577f0037f301ea4eef973bc0f770e4b7e302112ac4fe51e0264bc0d9fd1f1f00638b95dadae854e5cee55295af15b09b539b949ab6f67f1ecddeb00196bf58a688b5578bcc8acb1859a71c9785a7710d732abd35cc5262f6a961d56d84951ec89881aca83bbc66ce3ff152f58c74735d180adb962cf8abc981ecda7e65cd2ecc75c91a27a49e7d531c50a5b03e87bd148dcb4f3b29476787369242f3c10483a8563a600ba7b02485e5f14d161cc07e4cafc7319a351f37dbd5054d85be59becf03ac33caa9fe7345c8037f6955e88bed7c1f72a4aa3df018f54d8de012f4488e77a8a81e9b9bbc6941179ec938efd87628c0ddf8183c7bf6c380eb108e92af39b301612ef70dbd4c026e43e6de9d496ee462efb2700157786d2a20ab1fc082cdfe96761d0d1323b19c5b9d", 0x173}], 0x1, &(0x7f0000000100)}, 0x0) 15:19:21 executing program 7: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x3, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f0000000100)=@in={0x2, 0x4e20}, 0x10, &(0x7f0000000000), 0xfe}, 0x8000) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00009f0ffc), 0x4) 15:19:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 15:19:21 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002940)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000002840)=[{&(0x7f00000015c0)=""/225, 0xe1}], 0x1) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1) readv(r0, &(0x7f0000afd000)=[{&(0x7f0000309f9d)=""/1, 0x1}], 0x1) readv(r0, &(0x7f0000002d40)=[{&(0x7f0000002c40)=""/221, 0xdd}], 0x1) close(r0) 15:19:21 executing program 7: unshare(0x24020400) mkdir(&(0x7f0000024ff6)='./control\x00', 0x0) r0 = open(&(0x7f0000fbe000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000189a2)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f000001aff8)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000017000)='./file0\x00', 0x0) r2 = openat(r1, &(0x7f0000fafff2)='./file0/file0\x00', 0x10240, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x40049409, r2) [ 114.198110] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 114.247574] device bridge_slave_1 left promiscuous mode [ 114.253186] bridge0: port 2(bridge_slave_1) entered disabled state 15:19:21 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002940)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000002840)=[{&(0x7f00000015c0)=""/225, 0xe1}], 0x1) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1) readv(r0, &(0x7f0000afd000)=[{&(0x7f0000309f9d)=""/1, 0x1}], 0x1) readv(r0, &(0x7f0000002d40)=[{&(0x7f0000002c40)=""/221, 0xdd}], 0x1) close(r0) [ 114.295676] device bridge_slave_0 left promiscuous mode [ 114.301321] bridge0: port 1(bridge_slave_0) entered disabled state 15:19:21 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002940)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000002840)=[{&(0x7f00000015c0)=""/225, 0xe1}], 0x1) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1) readv(r0, &(0x7f0000afd000)=[{&(0x7f0000309f9d)=""/1, 0x1}], 0x1) readv(r0, &(0x7f0000002d40)=[{&(0x7f0000002c40)=""/221, 0xdd}], 0x1) close(r0) 15:19:21 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002940)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000002840)=[{&(0x7f00000015c0)=""/225, 0xe1}], 0x1) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1) readv(r0, &(0x7f0000afd000)=[{&(0x7f0000309f9d)=""/1, 0x1}], 0x1) readv(r0, &(0x7f0000002d40)=[{&(0x7f0000002c40)=""/221, 0xdd}], 0x1) close(r0) [ 114.353979] IPVS: ftp: loaded support on port[0] = 21 [ 114.362949] team0 (unregistering): Port device team_slave_1 removed [ 114.377497] team0 (unregistering): Port device team_slave_0 removed [ 114.387289] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 114.404574] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 114.433808] bond0 (unregistering): Released all slaves [ 114.616160] 9pnet: p9_fd_create_tcp (6569): problem connecting socket to [ 114.616160] 24.20.20.0 [ 115.164813] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.171372] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.178842] device bridge_slave_0 entered promiscuous mode [ 115.206632] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.213098] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.220274] device bridge_slave_1 entered promiscuous mode [ 115.247814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 115.275903] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 115.350983] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 115.379315] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 115.488893] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 115.496149] team0: Port device team_slave_0 added [ 115.521085] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 115.528808] team0: Port device team_slave_1 added [ 115.554061] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.580996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 15:19:23 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)=')') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0xb, 0x20040000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000002c0)="48b801000000000000000f23c00f21f835020004000f23f8b9c70200000f32f0460fc78868cc0000b8010000000f01c166b8f8000f00d866bad00466b8c26266efc441adfedcc4c19855a804000000460f1a7d046436640f07", 0x59}], 0x1, 0x0, &(0x7f0000000380), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close(r0) 15:19:23 executing program 6: r0 = socket$inet6_sctp(0xa, 0x400000001, 0x84) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=[{0x10, 0x84}], 0x10}, 0x0) 15:19:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{&(0x7f00000007c0)=@l2, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000900)=""/252, 0xfc}}], 0x1eb, 0x0, 0x0) 15:19:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005940)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="48107936edbbc8470fd3bd7d3faf24211f88c05f85353b1bcef5de3280f2687c2620032770501ef8a908213c16f3b17383193cefab9cd87a0e4958fa53ac2576bdf6e4aa2b73a8ae9ddad19092065a07a0df23aa43a96ad5163f8c10c3516fff9e65261d4d15fc36fc66a9b264b3bed5", 0x70}], 0x1, &(0x7f00000000c0)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000080)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)=""/14, 0xe}, {&(0x7f0000000600)=""/109, 0x6d}], 0x2}, 0x0) 15:19:23 executing program 5: syslog(0x2, 0x0, 0xffe6) 15:19:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) sendto$inet(r2, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 15:19:23 executing program 2: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0x12, 0x0, 0x700000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) [ 115.607647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.644366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 15:19:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb, 0x0) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258) ioctl$int_in(r1, 0x8000008010500d, &(0x7f0000003ff8)) 15:19:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000200)={0x0, 0x0, 0xffffffb8}) 15:19:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) 15:19:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) sendto$inet(r2, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 15:19:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000080)}) [ 115.841185] binder: release 6691:6696 transaction 2 out, still active [ 115.848051] binder: unexpected work type, 4, not freed [ 115.853454] binder: undelivered TRANSACTION_COMPLETE [ 115.896340] binder_alloc: 6691: binder_alloc_buf, no vma [ 115.902009] binder: 6691:6696 transaction failed 29189/-3, size 0-0 line 2967 [ 115.916790] binder: BINDER_SET_CONTEXT_MGR already set [ 115.922716] binder_alloc: 6691: binder_alloc_buf, no vma [ 115.928379] binder: 6691:6703 transaction failed 29189/-3, size 24-8 line 2967 [ 115.941444] binder: 6691:6696 ioctl 40046207 0 returned -16 [ 115.948708] binder: undelivered TRANSACTION_ERROR: 29189 [ 115.968798] binder: release 6691:6696 transaction 2 in, still active [ 115.975398] binder: send failed reply for transaction 2, target dead [ 115.981938] binder: undelivered TRANSACTION_ERROR: 29189 [ 116.121328] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.127732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.134391] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.140785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.148212] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 117.011587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.093345] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 117.152154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.181577] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 117.187993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.195703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.276224] 8021q: adding VLAN 0 to HW filter on device team0 15:19:25 executing program 7: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/115) 15:19:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") process_vm_writev(0x0, &(0x7f0000001600), 0x0, &(0x7f00000028c0), 0x0, 0x100000000000000) 15:19:25 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r0, 0x0, 0x5, &(0x7f0000000000), 0x0) 15:19:25 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{&(0x7f00000007c0)=@l2, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000900)=""/252, 0xfc}}], 0x1eb, 0x0, 0x0) 15:19:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) sendto$inet(r2, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 15:19:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000000080)=0x5, 0x4) 15:19:25 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)=')') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0xb, 0x20040000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000002c0)="48b801000000000000000f23c00f21f835020004000f23f8b9c70200000f32f0460fc78868cc0000b8010000000f01c166b8f8000f00d866bad00466b8c26266efc441adfedcc4c19855a804000000460f1a7d046436640f07", 0x59}], 0x1, 0x0, &(0x7f0000000380), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close(r0) 15:19:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb, 0x0) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258) ioctl$int_in(r1, 0x8000008010500d, &(0x7f0000003ff8)) 15:19:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f00000000c0), 0xfea4) 15:19:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getuid() [ 117.871161] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:19:25 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0000101, 0x0, 0x0, 0x1000000}]}) 15:19:25 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{&(0x7f00000007c0)=@l2, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000900)=""/252, 0xfc}}], 0x1eb, 0x0, 0x0) 15:19:25 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000002c0)) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)) 15:19:25 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/xfrm_stat\x00') dup2(r1, r0) 15:19:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f000009c000/0x1000)=nil, 0x1000, 0x0, 0x800008113, r0, 0x0) 15:19:25 executing program 1: mkdir(&(0x7f0000000480)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000240)) r0 = open$dir(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/36, 0x24) getdents(r0, &(0x7f0000000380)=""/133, 0x85) 15:19:25 executing program 6: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') getdents(r0, &(0x7f0000000000)=""/118, 0x76) getdents(r0, &(0x7f0000000080)=""/97, 0x61) getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 15:19:25 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{&(0x7f00000007c0)=@l2, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000900)=""/252, 0xfc}}], 0x1eb, 0x0, 0x0) 15:19:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x2f84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000140)=@ethtool_link_settings={0x50}}) close(r2) close(r1) 15:19:25 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)) 15:19:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000002c0)="025cc83d6d345f8f762070") r2 = fcntl$dupfd(r0, 0x0, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="66b9dd0200000f32f3a50f2133640f30ba4200b000ee66b9c10200000f320f4633650f013f3665360f0766b9800000c00f326635000100000f30", 0x3a}], 0x1, 0x0, &(0x7f00000000c0), 0x0) 15:19:25 executing program 7: socketpair$unix(0x1, 0x800000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) sendto(r1, &(0x7f0000000980)="e9", 0x1, 0x0, 0x0, 0x0) recvfrom$llc(r2, &(0x7f0000000080)=""/244, 0xf4, 0x40000100, 0x0, 0x0) sendmsg(r0, &(0x7f000003c000)={0x0, 0x0, &(0x7f000005dfe0)=[{&(0x7f000002ff67)='}', 0x1}], 0x1, &(0x7f000003ae30)}, 0x0) close(r0) 15:19:26 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)=')') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0xb, 0x20040000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000002c0)="48b801000000000000000f23c00f21f835020004000f23f8b9c70200000f32f0460fc78868cc0000b8010000000f01c166b8f8000f00d866bad00466b8c26266efc441adfedcc4c19855a804000000460f1a7d046436640f07", 0x59}], 0x1, 0x0, &(0x7f0000000380), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close(r0) 15:19:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb, 0x0) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258) ioctl$int_in(r1, 0x8000008010500d, &(0x7f0000003ff8)) 15:19:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom$packet(r3, &(0x7f0000000040)=""/94, 0x5e, 0x0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x700021) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x0, 0x0, 0x0, 0x0, {0xd}}, 0x5580}, 0x1}, 0x0) 15:19:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 15:19:26 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x75) 15:19:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e22000000006495138037fef504c058000b4824ca945f64009440050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a10", 0x58}], 0x1) 15:19:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r1, 0x1) 15:19:26 executing program 1: capset(&(0x7f0000000040)={0x4000019980330}, &(0x7f0000000740)={0xfffffffffffffffe, 0xffffffffffffffff}) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 15:19:26 executing program 6: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000090607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 118.778171] netlink: 64 bytes leftover after parsing attributes in process `syz-executor4'. [ 118.787162] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 15:19:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") unshare(0x2000400) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffffffffffffff81) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @loopback=0x7f000001}}}}, &(0x7f00000000c0)=0xb0) 15:19:26 executing program 1: lchown(&(0x7f0000000040)='/\x00', 0xffffffffffffffff, 0x0) [ 118.854183] capability: warning: `syz-executor1' uses 32-bit capabilities (legacy support in use) [ 118.872632] netlink: 'syz-executor6': attribute type 1 has an invalid length. 15:19:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x40047459, &(0x7f0000000040)={0x18, 0x4, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'ip_vti0\x00'}}) 15:19:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x2f84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000140)=@ethtool_link_settings={0x50}}) close(r2) close(r1) 15:19:26 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r1) r2 = memfd_create(&(0x7f0000a98000)='y#\x00W', 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fallocate(r1, 0x0, 0x0, 0x1) close(r0) 15:19:26 executing program 1: r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0)={0x1c2, 0x0, 0x29, 0x2}, 0x1c2) [ 118.971660] syz-executor6 (7001) used greatest stack depth: 17312 bytes left 15:19:26 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 119.087676] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 15:19:27 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0x0, 0x32}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 15:19:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb, 0x0) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258) ioctl$int_in(r1, 0x8000008010500d, &(0x7f0000003ff8)) 15:19:27 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) 15:19:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x2) 15:19:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 15:19:27 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_data=&(0x7f00000000c0)="a32fd3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 15:19:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x2}, 0x94) 15:19:27 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000040)=[{0x28, 0x29, 0x2, "4bc333b81b8776f310863be08e4068346a"}], 0x28}}], 0x2, 0x0) 15:19:27 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfdffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 15:19:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) sendto$inet6(r1, &(0x7f0000000c00)="616d17d99c55", 0x6, 0x0, 0x0, 0x0) 15:19:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg(r0, &(0x7f0000001580)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000001440)=[{&(0x7f00000002c0)="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", 0x54b}], 0x1, &(0x7f00000014c0)=[{0xa8, 0x107, 0x1, "b8f8b8c9ef02fe4d86c6dd5e93502eb63c7e992ab66760b39785b5edbb3b90cfbace049bfa4ac4eb4dd715278b8a3423042c57eea871801c7698b07ee8b1ecfc9f6f73f1356ff179aed9d080aa052c5998423e56b6781030d71a1363682046abc3d9a77af0f33d683126255806a7d31da92753deb367438fd0ddcc8f3fb02fdae1e4e0f361143aa55551a36fccd09f1bee510a78ce383d"}], 0xa8, 0x8000}, 0x4) 15:19:27 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000140)) 15:19:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x2f84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000140)=@ethtool_link_settings={0x50}}) close(r2) close(r1) 15:19:27 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000007c0)={{&(0x7f00004b4000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1}) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r1, &(0x7f0000000280)=""/100, 0x64) read(r0, &(0x7f0000000400)=""/100, 0x64) 15:19:27 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x100000001, &(0x7f0000000040)=0x0) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d}, 0x10) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="040004008cfc6cfde19ab3a251fd2cfd09684d9c7afae3b519d21a2ce3cbdfcb2665dd1203ed5f1023fa813c9a0e46000000004001000000", 0x38}]) 15:19:27 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000054ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000000ef74)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f7a3a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) 15:19:27 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = epoll_create(0x20040000000401) fremovexattr(r0, &(0x7f0000000000)=@random={'os2.', '\x00'}) 15:19:28 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000140)) 15:19:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x405c5503, &(0x7f0000000080)={0x0, 0x0, 0x6}) 15:19:28 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='devpts\x00', 0x0, 0x0) 15:19:28 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f000000a3c0)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback=0x7f000001}}}, 0x20000180, &(0x7f0000007d80), 0x0, &(0x7f0000007dc0)}}, {{&(0x7f0000008f40)=@nfc={0x27}, 0x80, &(0x7f000000a280), 0x2ec, &(0x7f000000a300)}}], 0x2, 0x0) 15:19:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0x17}}, 0x8) 15:19:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@generic={0x1, 0x0, 0x3}) 15:19:28 executing program 3: mkdir(&(0x7f0000001000)='./file0\x00', 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000180)="2e2f66696c6530fe", &(0x7f0000000100)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f00000001c0)) 15:19:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='nodev\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x17, 0x0, "10dec303415fe113b503cf1ae125cffac7e0f30f657e036d8beab09fd20f016238cbff4c48bedba30ba1508f70d88ebe0a077b1bb29ee38b71b351d15ce4ec82", "c3174cfe994a2869e5662e1e2a72e0fb4aee287df2df380b95e5b25a31c8f999938bfe8bf214ff8e583ea7b0e03ff510bcddd4757451a798594da244e721450c", "a2b98fba2b259731fba7132ce30a6db82958009e4ff06da85422d63bc7d0db26"}) 15:19:28 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000140)) 15:19:28 executing program 1: set_mempolicy(0x1, &(0x7f0000000000)=0x3, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f00000013c0)=[{&(0x7f0000001080)=""/157, 0x9d}], 0x1) 15:19:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x405c5503, &(0x7f0000000080)={0x0, 0x0, 0x6}) 15:19:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x405c5503, &(0x7f0000000080)={0x0, 0x0, 0x6}) 15:19:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000f7db7f), 0x2f00, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 15:19:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x2f84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000140)=@ethtool_link_settings={0x50}}) close(r2) close(r1) 15:19:28 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}, 0x1, 0x4c, 0x2}, {}], 0x30) 15:19:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast1=0xe0000001, @broadcast=0xffffffff}, 0x10) 15:19:28 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000300)=""/246) ioctl$EVIOCGREP(r0, 0x4004743c, &(0x7f0000001000)=""/174) 15:19:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1000007ffe) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r3 = accept4(r1, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) recvfrom$unix(r3, &(0x7f00000000c0)=""/7, 0x7, 0x0, &(0x7f0000000140)=@abs, 0x70a000) close(r2) 15:19:28 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000140)) 15:19:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x405c5503, &(0x7f0000000080)={0x0, 0x0, 0x6}) [ 120.974514] syz-executor3 (7170) used obsolete PPPIOCDETACH ioctl 15:19:28 executing program 1: prctl$intptr(0x2f, 0x3) 15:19:28 executing program 0: prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000080), &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000002c0)) 15:19:28 executing program 4: syz_mount_image$gfs2(&(0x7f00000001c0)='gfs2\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f00000018c0)={[{@locktable={'locktable', 0x3d, '--eth0securitycgroupposix_acl_accessposix_acl_accessvboxnet0-securityselinuxmd5sum'}, 0x2c}]}) 15:19:28 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0xffffffff, 0x0, 0x0, 0xc0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f00000003c0), {[{{@uncond, 0x0, 0x98, 0xc0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@ip={@local={0xac, 0x14, 0x14, 0xaa}, @broadcast=0xffffffff, 0x0, 0x0, 'yam0\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xe0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x390) 15:19:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)) 15:19:28 executing program 7: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000052001f0014f9f407000904ff0200070208000100ffffffff087fe0c073000006", 0x24) 15:19:28 executing program 1: prctl$getreaper(0x17, &(0x7f0000000040)) [ 121.138848] gfs2: not a GFS2 filesystem 15:19:28 executing program 6: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x40000) 15:19:28 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00007a1ff6)='net/unix\x00') sendfile(r0, r2, &(0x7f0000000000), 0x800000bf) [ 121.178295] gfs2: not a GFS2 filesystem [ 121.191266] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 15:19:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000680)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={@dev={0xfe, 0x80}, @remote={0xfe, 0x80, [], 0xbb}, @mcast1={0xff, 0x1, [], 0x1}}) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000004c0)=ANY=[]) 15:19:29 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b20000)={0x1, &(0x7f0000d39000)=[{}]}, 0x8) 15:19:29 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/32, 0x2f5}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2, &(0x7f0000000340)=""/123, 0x7b}, 0x0) 15:19:29 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/4096, 0x1000) 15:19:29 executing program 2: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@local={0xac, 0x14, 0x14, 0xaa}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xb5) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 15:19:29 executing program 0: r0 = memfd_create(&(0x7f0000029000)='\\\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000032ff3)='/dev/snd/seq\x00', 0x0, 0x6) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, @time, {}, {}, @addr}], 0x90) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000), 0x4) 15:19:29 executing program 6: prctl$intptr(0x1c, 0x64) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)={0x0, 0x1, 0x5}) prctl$intptr(0x200000002f, 0x2) 15:19:29 executing program 1: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f0000a05000)=[{0x6}]}) prctl$seccomp(0x16, 0x0, &(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2}, {0x2, 0x0, @loopback=0x7f000001}, {0x2}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) [ 121.853704] audit: type=1326 audit(121.852:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7235 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455ba9 code=0x0 15:19:29 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2={0x1f}, 0x80}}, {{&(0x7f0000007500)=@hci={0x1f}, 0x80, &(0x7f0000007680), 0x141, &(0x7f00000076c0), 0x10}}], 0x4000000000003d5, 0x0) 15:19:29 executing program 6: syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@data_err_ignore='data_err=ignore', 0x2c}, {@bsddf='bsddf', 0x2c}]}) 15:19:29 executing program 0: r0 = memfd_create(&(0x7f0000029000)='\\\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000032ff3)='/dev/snd/seq\x00', 0x0, 0x6) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, @time, {}, {}, @addr}], 0x90) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000), 0x4) [ 121.894183] FAT-fs (loop5): bogus number of reserved sectors [ 121.900108] FAT-fs (loop5): Can't find a valid FAT filesystem 15:19:29 executing program 7: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) ftruncate(r0, 0x6b1) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x150) write$cgroup_type(r0, &(0x7f0000000540)='threaded\x00', 0xff64) 15:19:29 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, &(0x7f0000001800)=""/130, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 121.938639] FAT-fs (loop5): bogus number of reserved sectors [ 121.944721] FAT-fs (loop5): Can't find a valid FAT filesystem [ 121.975776] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities 15:19:29 executing program 0: r0 = memfd_create(&(0x7f0000029000)='\\\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000032ff3)='/dev/snd/seq\x00', 0x0, 0x6) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, @time, {}, {}, @addr}], 0x90) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000), 0x4) [ 122.037256] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities 15:19:29 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mlock2(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) 15:19:29 executing program 6: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bb9000/0x2000)=nil, 0x2000, 0xf) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x2, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000080)=0x5, 0x5, 0x0) 15:19:29 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x4002, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000700)=@random={'btrfs.', '/dev/hwrng\x00'}, &(0x7f0000000740)='*procppp1*&-/\x00', 0xe, 0x0) clone(0x0, &(0x7f0000000700), &(0x7f00000001c0), &(0x7f00000000c0), &(0x7f0000000400)) umount2(&(0x7f00000000c0)='./file0\x00', 0x1000000000000003) 15:19:29 executing program 0: r0 = memfd_create(&(0x7f0000029000)='\\\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000032ff3)='/dev/snd/seq\x00', 0x0, 0x6) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, @time, {}, {}, @addr}], 0x90) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000), 0x4) [ 122.146899] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 122.155262] FAT-fs (loop7): Filesystem has been set read-only [ 122.196569] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 122.224334] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 1041) [ 122.262153] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 122.271801] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 1041) [ 122.279740] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1041) [ 122.288714] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 1041) [ 122.312261] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 1041) [ 122.755953] audit: type=1326 audit(122.754:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7235 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455ba9 code=0x0 15:19:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) ioctl$ASHMEM_GET_SIZE(r2, 0x80487436, 0x709000) 15:19:30 executing program 5: socket(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00\x00d\x00', 0x20, 0x1, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x0, &(0x7f0000000040), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'bond0\x00', 'bond_slave_0\x00', 'veth0_to_team\x00', 'veth0\x00', @link_local={0x1, 0x80, 0xc2}, [], @empty, [], 0x108, 0x108, 0x138, [@limit={'limit\x00', 0x20, {{0xfffffffffffffc00, 0x81}}}, @ipvs={'ipvs\x00', 0x28, {{@ipv6}}}]}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x240) 15:19:30 executing program 6: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f00004fd000), 0x4) setsockopt$inet_int(r0, 0x0, 0x40000000000c8, &(0x7f0000000080), 0x4) 15:19:30 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, &(0x7f0000001800)=""/130, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 15:19:30 executing program 0: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f0000000240)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f0000000200)=0xc) setresuid(r1, r1, r1) 15:19:30 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='rootfs\x00', 0x0, &(0x7f0000000000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='vxfs\x00', 0x3080, &(0x7f00000003c0)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00008deff8)='/\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)="6e66730039ad695ab91f0928267795ce2b07ba848ecc6b7c69", 0x2007a00, &(0x7f0000000140)) umount2(&(0x7f0000000100)='./file0\x00', 0xa) 15:19:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)) 15:19:30 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1c, &(0x7f00000000c0)="915497d45ce000df050000005fdf14577add283b", 0x14) 15:19:30 executing program 6: r0 = socket(0x10, 0x20000000802, 0x0) write(r0, &(0x7f0000000040)="240000001a0025f00018000400edfc0e8000000000000000000000000800010048050000", 0x24) 15:19:30 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, &(0x7f0000001800)=""/130, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 122.970361] ebt_limit: overflow, try lower: 4294966272/129 15:19:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff}}, 0xa) 15:19:30 executing program 1: epoll_create1(0x0) socket(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') unshare(0x400) pselect6(0x2e7, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) [ 123.022613] ebt_limit: overflow, try lower: 4294966272/129 15:19:30 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='rootfs\x00', 0x0, &(0x7f0000000000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='vxfs\x00', 0x3080, &(0x7f00000003c0)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00008deff8)='/\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)="6e66730039ad695ab91f0928267795ce2b07ba848ecc6b7c69", 0x2007a00, &(0x7f0000000140)) umount2(&(0x7f0000000100)='./file0\x00', 0xa) 15:19:30 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000140)=@req={0xb61a, 0x1ff}, 0x10) 15:19:30 executing program 4: sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f00007e0000)=[{&(0x7f0000007000)="fd", 0x1}], 0x1, &(0x7f0000334f28)}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2283, &(0x7f0000007000)) 15:19:30 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x3a, &(0x7f0000000700), 0x4) 15:19:30 executing program 6: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) write$eventfd(r2, &(0x7f0000000040), 0x8) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x1c) tee(r1, r0, 0x8, 0x0) dup2(r1, r3) 15:19:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") recvmmsg(0xffffffffffffff9c, &(0x7f0000005200)=[{{&(0x7f0000002700)=@can, 0x80, &(0x7f0000004b80)=[{&(0x7f0000002780)=""/152, 0x98}, {&(0x7f0000002840)=""/49, 0x31}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/34, 0x22}, {&(0x7f00000048c0)=""/150, 0x96}, {&(0x7f0000004980)=""/21, 0x15}], 0x7, &(0x7f0000004c40)=""/65, 0x41}}], 0x1, 0x0, &(0x7f0000005440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) 15:19:30 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, &(0x7f0000001800)=""/130, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 15:19:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x7ff, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 15:19:30 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)={[0x2b]}, 0x1) 15:19:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4068aea3, &(0x7f00000001c0)) 15:19:30 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setopts(0x4201, r1, 0x0, 0x709000) 15:19:30 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback=0x7f000001}, 0x10) clock_gettime(0x0, &(0x7f0000004f00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f00000048c0), 0x0, &(0x7f0000004940)}}, {{&(0x7f0000004980)=@in={0x0, 0x0, @local}, 0x80, &(0x7f0000004bc0), 0x0, &(0x7f0000004c40)=""/228, 0xe4}}], 0x2, 0x10000, &(0x7f0000004f40)={0x0, r1+30000000}) 15:19:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000), &(0x7f0000000100)=0x4) 15:19:30 executing program 2: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x8) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 15:19:30 executing program 4: syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0xb, 0x20040000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000002c0)="48b801000000000000000f23c00f21f835020004000f23f8b9c70200000f32f0460fc78868cc0000b8010000000f01c166b8f8000f00d866bad00466b8c26266efc441adfedcc4c19855a804000000460f1a7d046436640f07", 0x59}], 0x1, 0x0, &(0x7f0000000380), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close(r0) 15:19:30 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='rootfs\x00', 0x0, &(0x7f0000000000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='vxfs\x00', 0x3080, &(0x7f00000003c0)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00008deff8)='/\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)="6e66730039ad695ab91f0928267795ce2b07ba848ecc6b7c69", 0x2007a00, &(0x7f0000000140)) umount2(&(0x7f0000000100)='./file0\x00', 0xa) 15:19:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2000000802, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa}, 0x1c) sendmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)=[{0x18, 0x29, 0x3, "01"}], 0x18}}], 0x1, 0x0) 15:19:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d3aaae231d5211e24221da94670ff3e2b78f283db0cf4ed38ddb25a3985e33981296a291c0c1e2673934a41dcdaf2e33ca601b7d02416f6a232ebba10181ad"}, 0x60) 15:19:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x400000b7}]}) 15:19:30 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={"6c6f0000ffffff9f0000ddff00"}) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x4881) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'lo\x00', 0xfff}) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) [ 123.517842] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 123.672140] device lo entered promiscuous mode [ 123.688296] syz-executor1 (7426) used greatest stack depth: 17136 bytes left 15:19:31 executing program 6: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) write$eventfd(r2, &(0x7f0000000040), 0x8) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x1c) tee(r1, r0, 0x8, 0x0) dup2(r1, r3) 15:19:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x80000001, 0x0, 0x0, 0x1}, 0x14) 15:19:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f0000000300), 0x20) recvmmsg(r0, &(0x7f0000003240)=[{{&(0x7f0000002c40)=@pppol2tpv3, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002cc0)=""/176, 0xb0}], 0x1, &(0x7f0000002dc0)=""/81, 0x51}}, {{&(0x7f0000002e40)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000003180), 0x0, &(0x7f00000031c0)=""/117, 0x75}}], 0x2, 0x2040, &(0x7f0000003380)={0x77359400}) 15:19:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_procfs(0x0, &(0x7f0000000140)='net/rt6_stats\x00') syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 15:19:31 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='rootfs\x00', 0x0, &(0x7f0000000000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='vxfs\x00', 0x3080, &(0x7f00000003c0)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00008deff8)='/\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)="6e66730039ad695ab91f0928267795ce2b07ba848ecc6b7c69", 0x2007a00, &(0x7f0000000140)) umount2(&(0x7f0000000100)='./file0\x00', 0xa) 15:19:31 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_virtio(&(0x7f0000000440)='/dev/rfkill\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='9p\x00', 0x0, &(0x7f0000000500)={'trans=', 'virtio', 0x2c, {'port', 0x3d}, 0x2c, {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) 15:19:31 executing program 1: syz_emit_ethernet(0x26, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x3, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)) 15:19:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="002000000000f1e0"], 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:31 executing program 3: msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000140)={0x1}, 0x8, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") msgrcv(0x0, &(0x7f0000000000)={0x0, ""/15}, 0x17, 0x1, 0x0) 15:19:31 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000003c0)) close(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) [ 124.181757] 9pnet_virtio: no channels available for device /dev/rfkill [ 124.207596] 9pnet_virtio: no channels available for device /dev/rfkill 15:19:31 executing program 4: syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0xb, 0x20040000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000002c0)="48b801000000000000000f23c00f21f835020004000f23f8b9c70200000f32f0460fc78868cc0000b8010000000f01c166b8f8000f00d866bad00466b8c26266efc441adfedcc4c19855a804000000460f1a7d046436640f07", 0x59}], 0x1, 0x0, &(0x7f0000000380), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close(r0) 15:19:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 15:19:31 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x14, &(0x7f0000000000), 0x4) close(0xffffffffffffffff) 15:19:31 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00'}, &(0x7f0000000080)=0x54) 15:19:31 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_virtio(&(0x7f0000000440)='/dev/rfkill\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='9p\x00', 0x0, &(0x7f0000000500)={'trans=', 'virtio', 0x2c, {'port', 0x3d}, 0x2c, {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) 15:19:31 executing program 7: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000200)={0x0, 0x4e, &(0x7f00000000c0)="84a070a7924ae3ab2d53b51461e50f1bf266da3a29c7d13d1cc423b1f29899c34e85fd19d01dca823411ad9e5896711580ceb14ee351276f9a596c24fc5840ba216754d4e8b4038ab0ee23749ece"}) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x80104592, &(0x7f0000000100)) [ 124.379717] sctp: [Deprecated]: syz-executor5 (pid 7489) Use of int in max_burst socket option deprecated. [ 124.379717] Use struct sctp_assoc_value instead [ 124.407123] IPVS: ftp: loaded support on port[0] = 21 [ 124.430510] 9pnet_virtio: no channels available for device /dev/rfkill [ 124.441596] sctp: [Deprecated]: syz-executor5 (pid 7489) Use of int in max_burst socket option deprecated. [ 124.441596] Use struct sctp_assoc_value instead [ 124.523571] IPVS: ftp: loaded support on port[0] = 21 15:19:32 executing program 6: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) write$eventfd(r2, &(0x7f0000000040), 0x8) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x1c) tee(r1, r0, 0x8, 0x0) dup2(r1, r3) 15:19:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000072f000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x8000}) 15:19:32 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_virtio(&(0x7f0000000440)='/dev/rfkill\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='9p\x00', 0x0, &(0x7f0000000500)={'trans=', 'virtio', 0x2c, {'port', 0x3d}, 0x2c, {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) 15:19:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") accept4$unix(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f00000000c0)=ANY=[]) acct(&(0x7f00000002c0)='./file0\x00') 15:19:32 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x2, &(0x7f00000007c0)={{0x0, 0x7530}}, 0x0) 15:19:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000001000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) ioctl$EVIOCSKEYCODE(r1, 0x40284504, &(0x7f0000000140)=[0x80000000106]) 15:19:32 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x19000000}) [ 124.934744] 9pnet_virtio: no channels available for device /dev/rfkill 15:19:32 executing program 7: r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) readv(r1, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$TCXONC(r1, 0x540a, 0x2) tkill(r0, 0x1000000000016) 15:19:32 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080)='L', &(0x7f00000000c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000080)=""/145}, 0x18) [ 124.993377] Process accounting resumed 15:19:32 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295e273b5abcf477671070") sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2}, 0x10) ppoll(&(0x7f0000000140)=[{r0}, {r0}, {r1}], 0x3, &(0x7f00000001c0), &(0x7f00000002c0), 0x8) 15:19:32 executing program 4: syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0xb, 0x20040000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000002c0)="48b801000000000000000f23c00f21f835020004000f23f8b9c70200000f32f0460fc78868cc0000b8010000000f01c166b8f8000f00d866bad00466b8c26266efc441adfedcc4c19855a804000000460f1a7d046436640f07", 0x59}], 0x1, 0x0, &(0x7f0000000380), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close(r0) 15:19:32 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_virtio(&(0x7f0000000440)='/dev/rfkill\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='9p\x00', 0x0, &(0x7f0000000500)={'trans=', 'virtio', 0x2c, {'port', 0x3d}, 0x2c, {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) 15:19:32 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0xfff6) syz_fuse_mount(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x8000) dup2(r1, r2) 15:19:32 executing program 5: seccomp(0x400001, 0x0, &(0x7f0000004000)={0x0, &(0x7f000002aff0)}) 15:19:32 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000003c0)) close(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 15:19:32 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) dup3(r2, r1, 0x0) [ 125.290308] 9pnet_virtio: no channels available for device /dev/rfkill 15:19:33 executing program 6: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) write$eventfd(r2, &(0x7f0000000040), 0x8) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x1c) tee(r1, r0, 0x8, 0x0) dup2(r1, r3) 15:19:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4020ae46, &(0x7f0000000000)) 15:19:33 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x0, 0x8011, r0, 0x0) 15:19:33 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000007ffc), 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000005ff0), 0x10) 15:19:33 executing program 5: fanotify_mark(0xffffffffffffffff, 0x0, 0x25f25595e3d3726, 0xffffffffffffffff, &(0x7f0000098000)='./file0\x00') 15:19:33 executing program 5: syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$int_out(r0, 0xc0884123, &(0x7f0000000040)) 15:19:33 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r0, 0x0) 15:19:33 executing program 7: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000480)=ANY=[]) mount(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='9p\x00', 0x0, &(0x7f0000001740)="ca") 15:19:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x19) [ 126.114257] ISOFS: Unable to identify CD-ROM format. [ 126.148415] 9pnet_virtio: no channels available for device ./file0 [ 126.203141] ISOFS: Unable to identify CD-ROM format. [ 126.388338] device bridge_slave_1 left promiscuous mode [ 126.393958] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.405585] device bridge_slave_0 left promiscuous mode [ 126.411438] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.758153] IPVS: ftp: loaded support on port[0] = 21 [ 127.143060] team0 (unregistering): Port device team_slave_1 removed [ 127.151831] team0 (unregistering): Port device team_slave_0 removed [ 127.160254] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 127.178140] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 127.199383] bond0 (unregistering): Released all slaves [ 127.668953] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.675386] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.682469] device bridge_slave_0 entered promiscuous mode [ 127.713677] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.720138] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.727492] device bridge_slave_1 entered promiscuous mode [ 127.758551] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 127.790516] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 127.971550] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 128.032340] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 128.302678] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 128.309924] team0: Port device team_slave_0 added [ 128.367815] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 128.375415] team0: Port device team_slave_1 added [ 128.381351] device bridge_slave_1 left promiscuous mode [ 128.386955] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.398932] device bridge_slave_0 left promiscuous mode [ 128.404614] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.100584] team0 (unregistering): Port device team_slave_1 removed [ 129.110230] team0 (unregistering): Port device team_slave_0 removed [ 129.118810] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 129.134304] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 129.155426] bond0 (unregistering): Released all slaves [ 129.174012] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 129.181353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.189653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.210322] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 129.217323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.225297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.258369] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 129.265619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.280515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.309701] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 129.317155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.332581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.655569] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.662097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.668803] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.675181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.682485] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 130.400143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.516944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.593658] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 130.671013] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 130.677358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.684569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.755296] 8021q: adding VLAN 0 to HW filter on device team0 15:19:38 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0xfff6) syz_fuse_mount(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x8000) dup2(r1, r2) 15:19:38 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000200)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}}) 15:19:38 executing program 4: syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0xb, 0x20040000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000002c0)="48b801000000000000000f23c00f21f835020004000f23f8b9c70200000f32f0460fc78868cc0000b8010000000f01c166b8f8000f00d866bad00466b8c26266efc441adfedcc4c19855a804000000460f1a7d046436640f07", 0x59}], 0x1, 0x0, &(0x7f0000000380), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close(r0) 15:19:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000003c0)) close(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 15:19:38 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0xfff6) syz_fuse_mount(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x8000) dup2(r1, r2) 15:19:38 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x30, &(0x7f0000c01f18)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6}}, {{@in=@rand_addr}, 0x0, @in6}}, 0x40fd) 15:19:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4000000000864, 0x1}, 0xfffffffffffffe03) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0x418, &(0x7f00001a7f05)=""/251}, 0x48) 15:19:38 executing program 5: r0 = memfd_create(&(0x7f0000000000)="72616d667314", 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$TCSETA(r0, 0x4030582a, &(0x7f00000000c0)) 15:19:38 executing program 5: r0 = memfd_create(&(0x7f0000001380)='bdev#cgroup@\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "71756575651966e0ca00000000000000000000000000000b00e3001b000000000000000400080000000001000000000000000000000000000000f3feffb20300"}) write$sndseq(r1, &(0x7f00000000c0), 0x24b) r2 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000e26000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000642fb4)={0x0, 0x0, 0x10001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) dup2(r3, r2) 15:19:38 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000200)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}}) 15:19:38 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x80ffffff], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) 15:19:38 executing program 2: r0 = open(&(0x7f0000fedff8)='./file0\x00', 0x141042, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x5) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000003c0)='4', 0x1}], 0x1) 15:19:38 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000200)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}}) 15:19:38 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x80000000000e800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000080)="eb3c906d6b66732e66617400020401000200007400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/.il..\x00') syz_fuseblk_mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0/.il..\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:19:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000003, 0x7) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) ftruncate(r1, 0x20) ftruncate(r1, 0xffff) 15:19:38 executing program 5: r0 = memfd_create(&(0x7f0000001380)='bdev#cgroup@\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "71756575651966e0ca00000000000000000000000000000b00e3001b000000000000000400080000000001000000000000000000000000000000f3feffb20300"}) write$sndseq(r1, &(0x7f00000000c0), 0x24b) r2 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000e26000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000642fb4)={0x0, 0x0, 0x10001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) dup2(r3, r2) [ 132.681269] device bridge_slave_1 left promiscuous mode [ 132.686868] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.707673] device bridge_slave_0 left promiscuous mode [ 132.713298] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.729333] IPVS: ftp: loaded support on port[0] = 21 [ 133.442925] team0 (unregistering): Port device team_slave_1 removed [ 133.451827] team0 (unregistering): Port device team_slave_0 removed [ 133.461284] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 133.476921] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 133.497136] bond0 (unregistering): Released all slaves [ 134.039369] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.046156] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.053601] device bridge_slave_0 entered promiscuous mode [ 134.082708] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.089164] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.096657] device bridge_slave_1 entered promiscuous mode [ 134.124170] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 134.150810] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 134.229524] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 134.260216] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 134.380779] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 134.388086] team0: Port device team_slave_0 added [ 134.413701] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 134.420865] team0: Port device team_slave_1 added [ 134.446530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.474162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.503907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.534303] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 134.541521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.549957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.797273] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.803714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.810433] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.816822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.824860] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 135.585333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.721665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.807995] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 135.894683] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 135.900911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.908461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.993394] 8021q: adding VLAN 0 to HW filter on device team0 15:19:44 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0xfff6) syz_fuse_mount(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x8000) dup2(r1, r2) 15:19:44 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000200)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}}) 15:19:44 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x34e, &(0x7f0000000100)=0x0) io_cancel(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x2}, &(0x7f0000000340)) 15:19:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000002e0007031dfffd946fa2830020200a000900000006000000000000000400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 15:19:44 executing program 5: r0 = memfd_create(&(0x7f0000001380)='bdev#cgroup@\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "71756575651966e0ca00000000000000000000000000000b00e3001b000000000000000400080000000001000000000000000000000000000000f3feffb20300"}) write$sndseq(r1, &(0x7f00000000c0), 0x24b) r2 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000e26000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000642fb4)={0x0, 0x0, 0x10001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) dup2(r3, r2) 15:19:44 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0xfff6) syz_fuse_mount(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x8000) dup2(r1, r2) 15:19:44 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000003c0)) close(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 15:19:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x80045432, &(0x7f0000000000)) 15:19:44 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x34000, @multicast1=0xe0000001}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback={0x0, 0x1}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x80}, 0x1}, 0x0) [ 137.410348] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. 15:19:44 executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x2, 0x0) 15:19:44 executing program 5: r0 = memfd_create(&(0x7f0000001380)='bdev#cgroup@\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "71756575651966e0ca00000000000000000000000000000b00e3001b000000000000000400080000000001000000000000000000000000000000f3feffb20300"}) write$sndseq(r1, &(0x7f00000000c0), 0x24b) r2 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000e26000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000642fb4)={0x0, 0x0, 0x10001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) dup2(r3, r2) 15:19:44 executing program 1: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x32031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8001, &(0x7f00000000c0)=0x1, 0x41, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 15:19:45 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000003b00000025000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 15:19:45 executing program 4: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r0 = socket(0x1, 0x200000002, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xb4, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) dup2(r0, r1) 15:19:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [0x40000021, 0x3]}) 15:19:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp6\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000340)=""/81, 0x51}], 0x2, 0x0) 15:19:45 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0xfff6) syz_fuse_mount(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x8000) dup2(r1, r2) [ 137.636615] device bridge_slave_1 left promiscuous mode [ 137.642343] bridge0: port 2(bridge_slave_1) entered disabled state 15:19:45 executing program 6: mknod$loop(&(0x7f0000000180)='./file0\x00', 0xc000, 0xffffffffffffffff) truncate(&(0x7f0000000100)='./file0\x00', 0x0) 15:19:45 executing program 4: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/146, 0x92}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0x4, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 15:19:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x4040ae9e, &(0x7f00000003c0)={"1c3e2303007d3aaa441d40c5735dddbe674ea4a2ddd63e0a35852114d61bdeb5b21f086000a839381b70ab2f8ada06b7848ee855dd3b5aa9167f60cd68a8a1b230165ed5e83b383ee7fd769eb8ce83830ffc1c908df3cecc2943ac0434db93b711d94b4114ec76be50dcde5b9babfe61106d9bab46b8af900d0936f1430b2360ba8ebbb834433949e85b2946fd1185f7f0d0c53d5a09113ac74129ae438817a119e2458bdc823b0dddd28a49007feaa726986e74d4c2744c3ad423c4310cb5bde10a845470c59e522db6a933f97c10a608b387d03016393640a80dda27442ffdb31fc21cd82cfbd550ddcfb84bf149d7fc359d3b5414c656643ae7f941599f47f742663634a8d10de76c3f9631a3d240d956bfd16c268204cc7be1e487994ce11da179f2e7af9e6ff8a52c0e764d2c25bdd6e6995f4748519a28b8300f847cb9bb40062786555a0824485d0cec34b051558540294722e785032b08ed96601977d3eb31fc45e702f363cd314ff57e9b924999f537035f5239bf9fa4c39bd131598a6b0431f8d0af3e2e33160365f1cff4adabf27c523b166ac4f8f3417f05d25614f9b7490c1625fed708f98391242388c74fc4cd0ba462ee07026398b80d650e1797d81656018932c1ed7988217172869d6ea22fbbe30ac2b26b8a042985363d1a5dc18ef576a325b67b71b84a73331f5ab6ed859f3acb2ae840947221e244ecf00de25c7dc24c79571f003172dd4b27fd9c1859eeca82e06418d2a051c7b95c5280f218fa9a9f408c52556c4ed3e02494ae0efd57a699eac0951a70026a60872f23ef4fcc3b82c777968e37b381bd3b1ae5e7b683a3ee17062f5196edf29ccd90798941a781cd2ca344f07c4b741f81c5788d0fd283f1377984e1086ad4344eb152f9f5df3d976daa6acf2e9ea189b6e873c1e26c5379c5be8f007fac06a4ff0a0c81dbb78a79fe683a96ab100388e152308a443ddae34e42830d2d5e24dc35611391d8ba8262b3cbe65dfe43b76f757bb2421ece0592963cf7dfbd9344d12c145827d672f52df21ddcb18716af7c270de09b1c9807b16a67df29b44062154d02a042c907da47a9fc738a94f20b896b855f82b61ef20e874e7ae3313d289b2c3282f1881e8d1caf970d4bcc1c626ec210d951232f33d1dfe89a2d7cb07dd1944357cbe729537ceac88f4d66614c425cbccd5e44639292e6025e90d09052c8b47e811c1b5f54b1d68446c6833ac03275234f4af567298699a78428781597553d223f6b74be71f3eadda693585596f9f12498eb583c278e3296629bdeb31a5b44f7ee9b4837c65c9e0d1b9cecb45c58f9854b35c8fe9f107d2970282d0c2a7a5ccc832dcf2b3fce461b73d203abfab725ce564a94380cbb22536fa9f9d07511f9e180e43bef7d44c1ca53fa45ae62397fd807d579118960f2eb111e318de90591"}) 15:19:45 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) recvmsg(r0, &(0x7f0000004640)={0x0, 0x0, &(0x7f00000045c0)}, 0x1) [ 137.692587] device bridge_slave_0 left promiscuous mode [ 137.698700] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.858561] team0 (unregistering): Port device team_slave_1 removed [ 137.880036] team0 (unregistering): Port device team_slave_0 removed [ 137.897754] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 137.912926] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 137.922810] IPVS: ftp: loaded support on port[0] = 21 [ 137.947719] bond0 (unregistering): Released all slaves [ 138.498698] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.505108] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.512160] device bridge_slave_0 entered promiscuous mode [ 138.540079] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.546542] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.553569] device bridge_slave_1 entered promiscuous mode [ 138.579295] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.605875] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 138.681644] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 138.709217] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 138.813958] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.821365] team0: Port device team_slave_0 added [ 138.844992] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.852239] team0: Port device team_slave_1 added [ 138.877488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.903500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.928804] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 138.935948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.944231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.964154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.078475] IPVS: ftp: loaded support on port[0] = 21 [ 139.257597] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.264110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.270779] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.277425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.523441] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.530844] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.537917] device bridge_slave_0 entered promiscuous mode [ 139.567601] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.574048] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.581100] device bridge_slave_1 entered promiscuous mode [ 139.608835] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 139.638421] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 139.723501] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 139.757361] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 139.887967] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 139.895428] team0: Port device team_slave_0 added [ 139.923214] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 139.930494] team0: Port device team_slave_1 added [ 139.958329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.986120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.017130] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 140.024462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.033305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.055198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.337577] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.344077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.350733] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.357310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.551806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.665946] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 140.782536] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 140.789330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.798010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.903561] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.399494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.500007] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 141.593397] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 141.599616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.607797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.676608] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.561249] device bridge_slave_1 left promiscuous mode [ 142.566811] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.578589] device bridge_slave_0 left promiscuous mode [ 142.584220] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.607481] team0 (unregistering): Port device team_slave_1 removed [ 142.617182] team0 (unregistering): Port device team_slave_0 removed [ 142.626187] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 142.639147] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 142.663681] bond0 (unregistering): Released all slaves 15:19:50 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0xfff6) syz_fuse_mount(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x8000) dup2(r1, r2) 15:19:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x6e0]}) 15:19:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [0x40000021, 0x3]}) 15:19:50 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = epoll_create(0x80000000000009) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x90000001}) epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:19:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f"], 0x1) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x1013, r1, 0x0) ioctl$int_in(r1, 0x800000c0045003, &(0x7f0000000040)=0x8000) 15:19:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 15:19:50 executing program 4: creat(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)=@known='security.capability\x00', &(0x7f00002b2fec)="00000002010b000000000001cc00000000000000", 0xfffffffffffffd55, 0x0) 15:19:50 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14}}}, 0x7) [ 142.988628] binder: 8802:8803 got reply transaction with no transaction stack [ 142.996147] binder: 8802:8803 transaction failed 29201/-71, size 0-0 line 2759 15:19:50 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup2(r0, r1) 15:19:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [0x40000021, 0x3]}) 15:19:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf32(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xffffffffffffffff, 0x0, 0x20}, [{}]}, 0x58) [ 143.083399] binder: 8802:8815 got reply transaction with no transaction stack [ 143.091056] binder: 8802:8815 transaction failed 29201/-71, size 0-0 line 2759 15:19:50 executing program 6: syslog(0x3, &(0x7f0000000000)=""/223, 0x3b725b843efbf21d) [ 143.164583] device bridge_slave_1 left promiscuous mode [ 143.170414] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.202606] binder: undelivered TRANSACTION_ERROR: 29201 [ 143.208528] binder: undelivered TRANSACTION_ERROR: 29201 15:19:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) 15:19:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [0x40000021, 0x3]}) 15:19:50 executing program 7: r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="2400000024007f0000001200000001000d0ff6ff010000000000f300f1ffffff1300ff10", 0x24) [ 143.215829] device bridge_slave_0 left promiscuous mode [ 143.221421] bridge0: port 1(bridge_slave_0) entered disabled state 15:19:50 executing program 2: unshare(0x60000000) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa}}}, 0x108) 15:19:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000), 0x4) [ 143.343493] team0 (unregistering): Port device team_slave_1 removed [ 143.371386] team0 (unregistering): Port device team_slave_0 removed [ 143.384112] IPVS: ftp: loaded support on port[0] = 21 15:19:50 executing program 6: r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000940)="130000001000ffdde2000200f60f050000230a009d000000119dc53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db75411543e1226408e88cac1f2cbefc6463d8a0c8efc28ceb4ec3ff429592e5de7e4f28bca763acd06f40ad03226af55e3129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c000000000000003400000000000000d5ba641663ac6847d35b8779c6903efd7800e86ccc2b5bbc156c4c90fadd0c2a1976a0f57350aeb0775fa06fb0c8e3a2a298c6d2c5d75a6d01fbabcb", 0xf8) [ 143.405187] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 143.439293] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 143.443701] IPVS: ftp: loaded support on port[0] = 21 15:19:50 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000000)) [ 143.489315] bond0 (unregistering): Released all slaves 15:19:51 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x60, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) 15:19:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000140)="baf80c66b89298b38c66efbafc0cb80001ef0f4acf0f175dfb0f0f9403000d0faeb3d74e885ce0b86b0c8ee066b9040b000066b82d50000066ba000000000f3066b9ab03000066b8167e000066ba000000000f302e0f01ca", 0x58}], 0x1, 0x10, &(0x7f0000000000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f20d86635080000000f22d866b98b0200000f3266b9aa09000066b80100000066ba000000000f300f00d80f01cb660f38df5f86ba2100b88f0aefb80d008ee8f364360f07360f01cb", 0x49}], 0x1, 0x10, &(0x7f0000000200), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:51 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x802, 0x0) ioctl$int_in(r0, 0x8000008010500c, &(0x7f00006e1000)) 15:19:51 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f0000000080)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/78, 0x26) [ 143.977124] kernel msg: ebtables bug: please report to author: Wrong size [ 144.273969] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.280415] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.287955] device bridge_slave_0 entered promiscuous mode [ 144.322409] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.328828] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.336468] device bridge_slave_1 entered promiscuous mode [ 144.370596] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 144.405702] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 144.504663] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.540320] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.671422] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 144.678879] team0: Port device team_slave_0 added [ 144.711606] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 144.718317] IPVS: ftp: loaded support on port[0] = 21 [ 144.724103] team0: Port device team_slave_1 added [ 144.755554] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 144.762517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.777400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.805994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 144.813112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.821805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.846602] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 144.853939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.866885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.901299] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 144.908471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.916913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.225249] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.231692] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.238715] device bridge_slave_0 entered promiscuous mode [ 145.246889] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.253306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.260021] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.266428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.274099] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 145.282615] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.289194] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.296831] device bridge_slave_1 entered promiscuous mode [ 145.325519] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 145.354633] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 145.437675] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 145.469573] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 145.597633] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.605009] team0: Port device team_slave_0 added [ 145.633131] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.640505] team0: Port device team_slave_1 added [ 145.668942] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.698856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.728167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.737639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.765978] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 145.773299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.781594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.055860] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.062307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.068978] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.076488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.083772] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 146.514972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.625685] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 146.751230] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 146.757801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.765624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.773532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.881454] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.153457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.256675] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 147.356875] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 147.363213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.370626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.486506] 8021q: adding VLAN 0 to HW filter on device team0 15:19:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000002c0)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_X86_SET_MCE(r3, 0x4048ae9b, &(0x7f0000000140)={0xfffffdfd}) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000180)) 15:19:55 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x6, 0x7, 0x9, 0x9}, 0x2c) unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x2, &(0x7f0000000080)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}], &(0x7f00000000c0)='GPL\x00', 0x2, 0xd4, &(0x7f00000001c0)=""/212}, 0x48) 15:19:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) rt_sigqueueinfo(r2, 0x2a, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffff71}) 15:19:55 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) getsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180), &(0x7f00000001c0)=0xffffffffffffff7a) 15:19:55 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup2(r0, r1) 15:19:55 executing program 5: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) read(r0, &(0x7f0000000140)=""/117, 0x75) 15:19:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x20, 0x18, 0xfffffffffffffffd, 0x0, 0x0, {0x1}, [@nested={0xc, 0x6, [@generic="cc01869a93"]}]}, 0x20}, 0x1}, 0x0) 15:19:55 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 15:19:55 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {0xffffffff, 0x0, "f40d4b", "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"}}, 0x110) 15:19:55 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000001c0)=0x3, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=""/239, 0xffffffffffffffe8}, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x200, 0x4) syz_emit_ethernet(0xfdef, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 15:19:55 executing program 2: prctl$seccomp(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x64, 0x0, 0x0, 0x80}]}) [ 148.024698] binder: 9407:9409 got transaction with invalid offset (0, min 24 max 24) or object. 15:19:55 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 15:19:55 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x8}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000040)="b8", &(0x7f0000000100)=""/230}, 0x18) [ 148.070517] binder: 9407:9409 transaction failed 29201/-22, size 24-16 line 3030 [ 148.104050] binder_alloc: binder_alloc_mmap_handler: 9407 20001000-20004000 already mapped failed -16 15:19:55 executing program 1: migrate_pages(0x0, 0x2, &(0x7f0000001a00)=0x51d, &(0x7f0000001a40)=0xffffffffffffffff) [ 148.132791] binder: BINDER_SET_CONTEXT_MGR already set 15:19:55 executing program 5: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="006400ecff0345") getdents64(r0, &(0x7f0000000480)=""/66, 0x269) getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 15:19:55 executing program 2: r0 = socket(0x1e, 0x1, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000a80)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="8b", 0x1}]) 15:19:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000100)="6465260f6f4f79440f20c0350b000000440f22c00f01df0f01ca0f01c9cbc4e33578a500000080000f0766baf80cb834386785ef66bafc0c66ed660f3880a195200000", 0x43}], 0x1, 0xffffff7ffffffffd, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 148.161441] binder: 9407:9409 ioctl 40046207 0 returned -16 [ 148.169929] binder_alloc: 9407: binder_alloc_buf, no vma [ 148.175583] binder: 9407:9438 transaction failed 29189/-3, size 24-16 line 2967 15:19:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r1, &(0x7f0000fbef6d)=""/185, 0xfffffffffffffe1f, 0x0, 0x0, 0x171c073b150b2817) bind$inet6(r1, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f00006d8fe4)=@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000) sendto$inet6(r2, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000)={0xa}, 0x1c) 15:19:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x800000000001d31, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0xffffffffffffff31, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x29a, 0x4) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) 15:19:55 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000200)="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", 0x200) [ 148.331455] binder: undelivered TRANSACTION_ERROR: 29189 [ 148.337692] binder: undelivered TRANSACTION_ERROR: 29201 15:19:56 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup2(r0, r1) 15:19:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)={0x1c, 0x28, 0x1, 0x0, 0x0, {0x1}, [@generic="7b6c6e6605"]}, 0x1c}, 0x1}, 0x0) 15:19:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 15:19:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x802, 0x0) ioctl$int_in(r1, 0x80000000005008, &(0x7f00006e1000)) 15:19:56 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2a8, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, [], [], 'teql0\x00', 'ifb0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @rand_addr}, @ipv4={[], [0xff, 0xff], @rand_addr}, [], [], 'lo\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x308) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) 15:19:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000180)={{0x0, 0x1}}) close(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 15:19:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f0000000000)=r1, 0x10060) sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000040)=@in6={0x2, 0x4e24}, 0x80, &(0x7f0000000300), 0xe0, &(0x7f0000000380)}, 0x0) 15:19:56 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 15:19:56 executing program 7: syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000280)="0001000000ff000000000000c9030000ec000000010008000000000000000000002000000020000000010000000000006e5fbe5c0000ffff53ef0100010000006e5fbe5a0000c9ca68e30d69e5000000000000010000000000800000002c0000000000008893", 0x66, 0x400}], 0x0, &(0x7f00000001c0)) 15:19:56 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2a8, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, [], [], 'teql0\x00', 'ifb0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @rand_addr}, @ipv4={[], [0xff, 0xff], @rand_addr}, [], [], 'lo\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x308) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) 15:19:56 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2a8, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, [], [], 'teql0\x00', 'ifb0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @rand_addr}, @ipv4={[], [0xff, 0xff], @rand_addr}, [], [], 'lo\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x308) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) 15:19:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="66b9e70200000f3266b80500000066b94c8d71280f01c164f5b848000f00d0baa00066b87b00000066efb8bc000f00d80f01d1b8e8000f00d83ed952d73e0f08", 0x40}], 0x1, 0x0, &(0x7f00000000c0), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000001c0)="64650f01d10f21c13e0fc71ee4e564260533092e0f083e3636650f1811650f01cf0f20d86635200000000f22d80f0138baf80c66b8d0ffdb8566efbafc0c66b80900000066ef", 0x46}], 0x1, 0x0, &(0x7f0000000300)=[@cr4={0x1, 0x40220}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:56 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2a8, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, [], [], 'teql0\x00', 'ifb0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @rand_addr}, @ipv4={[], [0xff, 0xff], @rand_addr}, [], [], 'lo\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x308) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) [ 149.119086] EXT4-fs (loop7): filesystem is read-only [ 149.124351] EXT4-fs (loop7): invalid first ino: 0 15:19:56 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2a8, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, [], [], 'teql0\x00', 'ifb0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @rand_addr}, @ipv4={[], [0xff, 0xff], @rand_addr}, [], [], 'lo\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x308) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) [ 149.162010] EXT4-fs (loop7): filesystem is read-only [ 149.167271] EXT4-fs (loop7): invalid first ino: 0 15:19:56 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'ip6gre0\x00'}) 15:19:56 executing program 7: futex(&(0x7f0000000000), 0x85, 0x0, &(0x7f00005d0000), &(0x7f0000000000), 0x3ffffffe) 15:19:57 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup2(r0, r1) 15:19:57 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2a8, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, [], [], 'teql0\x00', 'ifb0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @rand_addr}, @ipv4={[], [0xff, 0xff], @rand_addr}, [], [], 'lo\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x308) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) 15:19:57 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x6e0}]}) 15:19:57 executing program 1: syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x6558, 0x8}}}}}, 0x0) 15:19:57 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'ip6gre0\x00'}) 15:19:57 executing program 0: semop(0x0, &(0x7f0000000140)=[{0x2, 0x38}, {0x2}], 0x2) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000040)=""/253) 15:19:57 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2a8, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, [], [], 'teql0\x00', 'ifb0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @rand_addr}, @ipv4={[], [0xff, 0xff], @rand_addr}, [], [], 'lo\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x308) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) 15:19:57 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 15:19:57 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'ip6gre0\x00'}) 15:19:57 executing program 1: syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='errors=']) 15:19:57 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000540)='./file0\x00', 0x27e, 0x0) 15:19:57 executing program 7: r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 15:19:57 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f0000000040)="0000000201000000000000010400000000000000", 0x14, 0x0) 15:19:57 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$KVM_IOEVENTFD(r1, 0x40086607, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) 15:19:57 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'ip6gre0\x00'}) 15:19:57 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x37, &(0x7f0000000100)='hj', 0x2) [ 150.075657] ntfs: (device loop1): parse_options(): The errors option requires an argument. 15:19:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x84e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x0) [ 150.133530] ntfs: (device loop1): parse_options(): The errors option requires an argument. 15:19:58 executing program 5: r0 = open(&(0x7f0000fedff8)='./file0\x00', 0x141042, 0x0) utime(&(0x7f0000ff1000)='./file0\x00', &(0x7f000067bff0)={0x8000000000000000, 0xffff}) fstat(r0, &(0x7f0000000fbc)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000140)) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000000)="7750feb49853a17a07", 0x9}], 0x1) sigaltstack(&(0x7f0000000000/0x1000)=nil, &(0x7f00005d6000)) 15:19:58 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f}, 0x3) 15:19:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp6\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x10400003) 15:19:58 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xc, &(0x7f0000000000), 0x2) 15:19:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[]}, 0x1}, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000040)) 15:19:58 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000d51eed)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x8, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x0, 0x21}}}}}}, 0x0) 15:19:58 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 15:19:58 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffff, 0xfffffffffffffffe}, 0xc) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) semtimedop(0x0, &(0x7f0000000040), 0x148, &(0x7f0000000000)) 15:19:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f070000004500010700000014190004400000000000000000000a00005d14a4e91ee438d2fd", 0x39}], 0x1) 15:19:58 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x80000) keyctl$search(0xa, r0, &(0x7f0000000080)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, r1) 15:19:58 executing program 4: sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, 0x0, 0x0, {0x11}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipddp0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9}]}]}, 0x50}, 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000300)={0x10, 0x36200}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)={0xffce, 0x2e, 0x6fd, 0x0, 0x0, {0x2004}, [@nested={0xc, 0x0, [@typed={0x62, 0x0, @ipv4}]}]}, 0xffce}, 0x1}, 0x0) 15:19:58 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000000)='./file0/file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) 15:19:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x800007) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$fiemap(r2, 0xc020660b, &(0x7f0000000300)={0x0, 0x10000000000008, 0x0, 0x0, 0x1, [{}]}) 15:19:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000021, 0x101, 0xc1]}) [ 151.027532] netlink: 65342 bytes leftover after parsing attributes in process `syz-executor4'. [ 151.036421] openvswitch: netlink: Duplicate key (type 9). [ 151.044507] netlink: 'syz-executor0': attribute type 4 has an invalid length. [ 151.051977] ip6_vti0: Invalid MTU 0 requested, hw min 68 15:19:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffff, 0x4) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 15:19:58 executing program 5: syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl(0x5, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000180)) 15:19:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="00e5ff000000000000000000000000000cda85230fb346a2"], 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f00000000c0)) 15:19:58 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x800000000000048, &(0x7f0000000040), 0x4) [ 151.075888] kvm [9649]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 [ 151.098173] netlink: 65342 bytes leftover after parsing attributes in process `syz-executor4'. [ 151.107060] openvswitch: netlink: Duplicate key (type 9). 15:19:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2}]}, 0x2c}, 0x1}, 0x0) 15:19:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:19:58 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="0a0775b005abcee381e5b3b60ced5c54dbb7295df0df821707dffcd60000000020e6", 0x22) 15:19:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/wireless\x00') sendfile(r1, r2, &(0x7f0000000040), 0x80000003) [ 151.583333] syz-executor1 (9655) used greatest stack depth: 14976 bytes left 15:19:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="0f3266b9800000c00f326635000100000f3066b90008000066b83f00000066ba000000000f30dfc40ffbff0fc76a00baf80c66b831c06c8a66efbafc0cb01beebaa100ecba4200b00feedf32", 0x4c}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:19:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rt6_stats\x00') bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000a2effc), 0x1000006) 15:19:59 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000180)=""/211, 0xd3) 15:19:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x0) 15:19:59 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000feb000)=0xf37c, 0x4) recvfrom$inet6(r0, &(0x7f0000000000)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000)={0xa}, 0x1c) 15:19:59 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = eventfd2(0x0, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/42, 0x2a}], 0x1) r1 = socket$key(0xf, 0x3, 0x2) io_setup(0x200, &(0x7f0000000480)=0x0) io_submit(r2, 0x1, &(0x7f0000001800)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x1, r0}]) 15:19:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000240)) 15:19:59 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1}], {0x95}}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) [ 151.963313] device bridge_slave_1 left promiscuous mode [ 151.968903] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.987588] device bridge_slave_0 left promiscuous mode [ 151.993176] bridge0: port 1(bridge_slave_0) entered disabled state 15:19:59 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000180)=""/211, 0xd3) 15:19:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f00000001c0)='./file0/file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) read(r1, &(0x7f0000003380)=""/4096, 0x30) 15:19:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getpid() 15:19:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000320007031dfffd946f61830020200a00090003fcff1c85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 15:19:59 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000180)=""/211, 0xd3) 15:19:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x7, &(0x7f0000000040), 0x4) 15:19:59 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000180)=""/211, 0xd3) 15:19:59 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x7fff}, 0x8) [ 152.236775] IPVS: ftp: loaded support on port[0] = 21 15:19:59 executing program 2: mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x20000000, 0x0, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)}}) 15:19:59 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e26, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, &(0x7f0000317000)=ANY=[], &(0x7f0000123000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x0, 0x20}, &(0x7f0000000340)=0x18) [ 152.276538] sctp: [Deprecated]: syz-executor1 (pid 9766) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.276538] Use struct sctp_sack_info instead 15:19:59 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f00004aaffc)=0xfffffffffffffa1c, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000080)=0xffffffee) 15:20:00 executing program 4: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4029, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) 15:20:00 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = eventfd2(0x0, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/42, 0x2a}], 0x1) r1 = socket$key(0xf, 0x3, 0x2) io_setup(0x200, &(0x7f0000000480)=0x0) io_submit(r2, 0x1, &(0x7f0000001800)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x1, r0}]) 15:20:00 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}], 0x20) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xc810}}}, 0x1c) [ 153.147471] team0 (unregistering): Port device team_slave_1 removed [ 153.156485] team0 (unregistering): Port device team_slave_0 removed [ 153.165550] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 153.178149] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 153.201648] bond0 (unregistering): Released all slaves [ 153.225289] tc_dump_action: action bad kind [ 153.235502] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 153.764970] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.771422] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.778627] device bridge_slave_0 entered promiscuous mode [ 153.803713] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.810178] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.817406] device bridge_slave_1 entered promiscuous mode [ 153.842215] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 153.872280] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 153.945203] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 153.970544] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 154.074424] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 154.081696] team0: Port device team_slave_0 added [ 154.105349] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 154.112650] team0: Port device team_slave_1 added [ 154.137663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.161588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.186422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.211395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.427734] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.434167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.440858] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.447244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.454559] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.204271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.234356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.282636] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.355988] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 155.362606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.369836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.437921] 8021q: adding VLAN 0 to HW filter on device team0 15:20:03 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r1, 0x280080) sendfile(r1, r1, &(0x7f0000d83ff8), 0x2008000fffffffe) 15:20:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r2, &(0x7f0000000480)={&(0x7f0000000200)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f00000003c0)=""/140, 0x8b}, {&(0x7f0000000500)=""/85, 0x55}, {&(0x7f0000000580)=""/215, 0xd7}, {&(0x7f0000000680)=""/137, 0x89}, {&(0x7f0000000300)=""/38, 0x26}, {&(0x7f0000000740)=""/130, 0x82}], 0x7, &(0x7f00000008c0)=""/233, 0xe9}, 0x0) 15:20:03 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x4000) 15:20:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") recvfrom(r0, &(0x7f0000000100)=""/105, 0x69, 0x0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x709000) 15:20:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xbb}}, 0xb1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) 15:20:03 executing program 2: futex(&(0x7f0000000000), 0x400000085, 0x0, &(0x7f00008b5000)={0x0, 0x989680}, &(0x7f0000000080), 0x90020001) 15:20:03 executing program 1: request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000001ffb)={0x73, 0x79, 0x7a}, &(0x7f0000001fee)="3a74670000000000008000000265783a30f1", 0x0) 15:20:03 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = eventfd2(0x0, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/42, 0x2a}], 0x1) r1 = socket$key(0xf, 0x3, 0x2) io_setup(0x200, &(0x7f0000000480)=0x0) io_submit(r2, 0x1, &(0x7f0000001800)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x1, r0}]) 15:20:03 executing program 3: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff}) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) [ 155.920736] futex_wake_op: syz-executor2 tries to shift op by 32; fix this program 15:20:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0xd, &(0x7f0000000100)={0x0, @rand_addr, 0x0, 0x0, 'wrr\x00'}, 0x2c) 15:20:03 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080), &(0x7f0000000d00)=0x8) 15:20:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = memfd_create(&(0x7f00000002c0)="000080a8", 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x5, 0xa) ftruncate(r1, 0x40001) sendfile(r0, r1, &(0x7f00000000c0), 0x7ffff) 15:20:03 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="ed") ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000240)=""/174) [ 155.970238] futex_wake_op: syz-executor2 tries to shift op by 32; fix this program 15:20:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000280)) 15:20:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000080)={0x0, 0x1, 0x1, &(0x7f00000000c0)=0xffffffffffffffff}) 15:20:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f}, 0xa) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060"}], 0xaaaaaaaaaaaa84c, 0x0, &(0x7f0000000140), 0x10000000000000c5) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) utimensat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) rt_sigtimedwait(&(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000080)={0x77359400}, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:20:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@gettfilter={0x23, 0x2e, 0x401}, 0x24}, 0x1}, 0x0) 15:20:04 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x17}]}, 0x18}, 0x1}, 0x0) 15:20:04 executing program 1: add_key(&(0x7f0000000640)='.request_key_auth\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a}, &(0x7f0000002580), 0x0, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)) close(r1) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 15:20:04 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) 15:20:04 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00005c5ff3)='/dev/net/tun\x00', 0x0) write$sndseq(r0, &(0x7f0000000040), 0x0) 15:20:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@gettfilter={0x23, 0x2e, 0x401}, 0x24}, 0x1}, 0x0) 15:20:04 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="021000000a000000000000ebffffff000800120000000000000061e64dfa44f468783342f00200000000000800000000000000000000000000000000000e00105b000000000020000000000000000000"], 0x50}, 0x1}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x33ab0eaa68c8dfc, 0x0) 15:20:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f}, 0xa) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060"}], 0xaaaaaaaaaaaa84c, 0x0, &(0x7f0000000140), 0x10000000000000c5) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) utimensat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) rt_sigtimedwait(&(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000080)={0x77359400}, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:20:04 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = eventfd2(0x0, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/42, 0x2a}], 0x1) r1 = socket$key(0xf, 0x3, 0x2) io_setup(0x200, &(0x7f0000000480)=0x0) io_submit(r2, 0x1, &(0x7f0000001800)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x1, r0}]) 15:20:04 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000240000006a0a00fe000000008500000001000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 15:20:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@gettfilter={0x23, 0x2e, 0x401}, 0x24}, 0x1}, 0x0) 15:20:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0x47) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) write$binfmt_aout(r0, &(0x7f0000000380), 0x20) 15:20:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000003300), &(0x7f00000022c0), &(0x7f0000004340), &(0x7f0000001200)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') clone(0x0, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000002c0)) pread64(r1, &(0x7f0000000140)=""/114, 0x72, 0x5) 15:20:04 executing program 4: mlock2(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, &(0x7f000000cff8), 0x9, 0x2) 15:20:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@gettfilter={0x23, 0x2e, 0x401}, 0x24}, 0x1}, 0x0) 15:20:04 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000002240)={0x1, [0x0]}, &(0x7f0000003a40)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x76, &(0x7f0000000000)={r1}, &(0x7f00000000c0)=0x14) 15:20:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001680)='net/ip6_mr_vif\x00') sendfile(r1, r2, &(0x7f00000000c0), 0x80000002) 15:20:04 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_targets\x00') bind$alg(r0, &(0x7f0000466000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000a2effc), 0x400) 15:20:05 executing program 1: r0 = socket(0x10, 0x20000000000003, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000000c0)="220000005e000721044f2cc849261574a45855b7d88bd38c7e7fb5221d091a1dba11", 0x22) 15:20:05 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") symlink(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0/.il..\x00') creat(&(0x7f0000000140)='./file0/.il..\x00', 0x0) 15:20:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005940)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="48107936edbbc8470fd3bd7d3faf24211f88c05f85353b1bcef5de3280f2687c2620032770501ef8a908213c16f3b17383193cefab9cd87a0e4958fa53ac2576bdf6e4aa2b73a8ae9ddad19092065a07a0df23aa43a96ad5163f8c10c3516fff9e65261d4d15fc36fc66a9b264b3bed5", 0x70}], 0x1, &(0x7f00000000c0)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000000)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f0000005a80)=""/4096, 0x20005e83}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 15:20:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x100000000000046, &(0x7f0000000040), 0x4) getsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000000000), &(0x7f0000000100)=0xf48c16dd2d2bffd) 15:20:05 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x800004000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r1, 0x8000000001009375, &(0x7f0000006f80)="010000000000000018") 15:20:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f}, 0xa) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060"}], 0xaaaaaaaaaaaa84c, 0x0, &(0x7f0000000140), 0x10000000000000c5) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) utimensat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) rt_sigtimedwait(&(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000080)={0x77359400}, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:20:05 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r2, 0x3, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 15:20:05 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x800) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0xdb}], 0x1) [ 157.943580] FAT-fs (loop0): Unrecognized mount option "uid=" or missing value [ 157.970466] device syz_tun entered promiscuous mode [ 158.012908] device syz_tun left promiscuous mode 15:20:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00', 0x3) write(r1, &(0x7f0000000040)="16", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) fcntl$addseals(r1, 0x409, 0xc) clone(0xc0384000, &(0x7f00000002c0), &(0x7f0000000180), &(0x7f0000000240), &(0x7f00000001c0)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") 15:20:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x9, &(0x7f0000000000), 0x4) close(r3) dup3(r1, r2, 0x0) 15:20:05 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x800) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0xdb}], 0x1) [ 158.054179] device syz_tun entered promiscuous mode 15:20:05 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000007b40)=[{{0x0, 0x0, &(0x7f0000007a00), 0x0, &(0x7f0000007a40)=""/212, 0xd4}}], 0x1, 0x0, &(0x7f0000007d00)={0x77359400}) 15:20:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f0000000540)=""/101, 0x65}], 0x3a) recvmsg(r0, &(0x7f0000001c00)={&(0x7f00000019c0)=@hci, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001a80)=""/80, 0x50}], 0x1, &(0x7f0000001b40)=""/150, 0x96}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000980)='highspeed\x00', 0xa) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="17", 0x1}], 0x1) [ 158.106184] device syz_tun left promiscuous mode 15:20:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x3, 0x39) sendto$unix(r1, &(0x7f0000000cc0), 0xe0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000340)=@vsock={0x0, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000940)=""/242, 0xf2}, 0x0) ioctl$sock_bt(r1, 0x8907, &(0x7f0000000040)) 15:20:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:20:05 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x800) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0xdb}], 0x1) 15:20:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f}, 0xa) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060"}], 0xaaaaaaaaaaaa84c, 0x0, &(0x7f0000000140), 0x10000000000000c5) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) utimensat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) rt_sigtimedwait(&(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000080)={0x77359400}, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:20:05 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001600)={0x0, 0x7}) 15:20:05 executing program 3: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 15:20:05 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x800) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0xdb}], 0x1) 15:20:05 executing program 7: pipe(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [], 0xa, "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"}, 0x1001) 15:20:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xe, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4b}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 15:20:05 executing program 3: r0 = memfd_create(&(0x7f0000000140)='/dev/rfkill\x00', 0x0) setrlimit(0x1, &(0x7f0000011000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}) 15:20:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") set_tid_address(&(0x7f0000000040)) [ 158.964553] IPVS: ftp: loaded support on port[0] = 21 [ 159.112550] IPVS: ftp: loaded support on port[0] = 21 15:20:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00', 0x3) write(r1, &(0x7f0000000040)="16", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) fcntl$addseals(r1, 0x409, 0xc) clone(0xc0384000, &(0x7f00000002c0), &(0x7f0000000180), &(0x7f0000000240), &(0x7f00000001c0)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") 15:20:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000080)}}, {{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000540)}}], 0x2, 0x0) 15:20:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="23000000240007031dfffd946fa2830020200a00090000000600000000ffffffff00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 15:20:06 executing program 7: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000000c0)={[0x37]}, 0x1) 15:20:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000299f3e)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8f70000000000008000f0fffeffff090000dc2abbeabdcb95090001000b0c0900fcff0000040e05a5", 0x58}], 0x1) 15:20:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newaddr={0x34, 0x14, 0x101, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x14, 0x1, @loopback={0x0, 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}, 0x1}, 0x0) 15:20:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0xfffffffffffffffe, {0x2, 0x0, @rand_addr}, "00000000000010000000000000000004"}) 15:20:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="f20fbcbd0080000066b81f008ec8c4e205bcab27000000b8d13200000f23d80f21f835000000900f23f8c4e2fdb80d0b00000066baf80cb8bc068586ef66bafc0cec660f38820265f2af0fd2c9b8000001000f23c80f21f8350000b0000f23f8", 0x60}], 0x1, 0x80000037, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{}, {0x0, 0x0, 0x0, 0x347, 0x5}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:20:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x41, &(0x7f00000002c0)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x1c8, 0x410, 0xffffffff, 0x520, 0x520, 0x660, 0x660, 0xffffffff, 0x660, 0x660, 0x5, &(0x7f0000000040), {[{{@ipv6={@remote={0xfe, 0x80, [], 0xbb}, @loopback={0x0, 0x1}, [], [], 'eql\x00', 'ip6gretap0\x00'}, 0x0, 0xc8, 0x110}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@multicast1=0xe0000001, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}, @gre_key, @gre_key}}}, {{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, [], [], 'bond_slave_1\x00', 'bond_slave_0\x00'}, 0x0, 0xc8, 0x110}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv6=@loopback={0x0, 0x1}, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xc8, 0x110}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@dev={0xfe, 0x80}, @ipv4, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, [], [], 'gretap0\x00', 'team_slave_1\x00'}, 0x0, 0xc8, 0x110}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@rand_addr, @ipv4=@dev={0xac, 0x14, 0x14}, @port, @gre_key}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x570) close(r2) close(r1) [ 159.249158] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 15:20:06 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r4 = dup3(r3, r2, 0x0) write$cgroup_pid(r4, &(0x7f0000000140)={[0x30]}, 0x1) [ 159.323097] *** Guest State *** [ 159.326486] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 159.335504] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 159.344398] CR3 = 0x0000000000000000 [ 159.348193] RSP = 0x0000000000000f80 RIP = 0x0000000000008006 [ 159.354243] RFLAGS=0x00010046 DR7 = 0x0000000000000400 [ 159.360279] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 15:20:06 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="0a5ee13b1f16f477671070") vmsplice(r0, &(0x7f0000002480)=[{&(0x7f0000002400)="b9", 0x1}], 0x1, 0x0) close(r0) close(r1) [ 159.367547] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 159.375604] DS: sel=0x0000, attr=0x00087, limit=0x00000000, base=0x0000000000000000 [ 159.383647] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 159.391681] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 159.399705] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 159.407881] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 15:20:06 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000200)=[{0x18, 0x29, 0x4, "f1"}], 0x18}, 0x0) 15:20:06 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x80000000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000012000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x30) fallocate(r1, 0x3, 0x0, 0x3) fcntl$getflags(r1, 0x409) close(r0) [ 159.416460] GDTR: limit=0x00000000, base=0x0000000000000000 [ 159.424516] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 159.432545] IDTR: limit=0x00000000, base=0x0000000000000000 [ 159.440589] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 159.448595] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 159.455233] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 159.462718] Interruptibility = 00000008 ActivityState = 00000000 [ 159.469000] *** Host State *** 15:20:06 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x1, 0x218, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000240], 0x0, &(0x7f0000000080), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xb0, 0x158, 0x188, [@devgroup={'devgroup\x00', 0x18}]}, [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "ec8cc359096155b1335806765bdf9d8dc3024724ca1b9427f5aba6e40e93c3a7b39e151d82922586038dd34e1ef7b1410ac3d9ce09d5e7d02336f77e3d76c919"}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x4}}}}]}]}, 0x290) [ 159.472350] RIP = 0xffffffff811f4fb4 RSP = 0xffff8801b4247350 [ 159.478388] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 159.484839] FSBase=00007fd681690700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 159.492706] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 159.498817] CR0=0000000080050033 CR3=00000001ad164000 CR4=00000000001426e0 [ 159.505889] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87a01380 [ 159.512699] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 159.518806] *** Control State *** 15:20:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000080)="2957e1311f16f477671070") msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000ac0)=""/139) [ 159.522304] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 159.529049] EntryControls=0000d1ff ExitControls=0023efff [ 159.534562] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 159.541587] VMEntry: intr_info=8000030d errcode=00000000 ilen=00000000 [ 159.548287] VMExit: intr_info=00000000 errcode=00000000 ilen=00000002 [ 159.554923] reason=80000021 qualification=0000000000000000 [ 159.561302] IDTVectoring: info=00000000 errcode=00000000 [ 159.566793] TSC Offset = 0xffffffa6b0f5c1f6 15:20:07 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000140)={0xc3, 0x1, 0x0, 0x0, &(0x7f0000000000)=[{}]}) [ 159.571164] EPT pointer = 0x000000019d3ac01e [ 159.617688] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 159.664523] PANIC: double fault, error_code: 0x0 [ 159.669404] CPU: 0 PID: 10325 Comm: syz-executor5 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 159.677813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.687196] RIP: 0010:vmx_vcpu_run+0x1244/0x2600 [ 159.691954] Code: 60 03 00 00 4c 8b a9 68 03 00 00 4c 8b b1 70 03 00 00 4c 8b b9 78 03 00 00 48 8b 89 08 03 00 00 75 05 0f 01 c2 eb 03 0f 01 c3 <48> 89 4c 24 08 59 0f 96 81 88 56 00 00 48 89 81 00 03 00 00 48 89 [ 159.711252] RSP: 0018:00000000b4247350 EFLAGS: 00010002 [ 159.716630] RAX: dffffc0000000000 RBX: 1ffff10036848d2c RCX: ffffffff8110d4ab [ 159.723904] RDX: 1ffff10033a75800 RSI: ffffffff8110d58b RDI: 0000000000000007 [ 159.731215] RBP: ffff8801b4246a08 R08: ffff880191eb0180 R09: fffff5200032cd3a [ 159.738691] R10: fffff5200032cd3a R11: ffffc900019669d3 R12: 1ffff10036848d28 [ 159.745985] R13: ffff88019d3ac000 R14: ffff8801b42469e0 R15: 0000000000000000 [ 159.753265] FS: 00007fd681690700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 159.761496] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.767379] CR2: 00000000b4247348 CR3: 00000001ad164000 CR4: 00000000001426f0 [ 159.774657] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 159.781929] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 159.789197] Call Trace: [ 159.791786] Kernel panic - not syncing: Machine halted. [ 159.797250] CPU: 0 PID: 10325 Comm: syz-executor5 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 159.805675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.815063] Call Trace: [ 159.817644] <#DF> [ 159.819808] dump_stack+0x1c9/0x2b4 [ 159.823540] ? dump_stack_print_info.cold.2+0x52/0x52 [ 159.828736] panic+0x238/0x4e7 [ 159.831942] ? add_taint.cold.5+0x16/0x16 [ 159.836099] ? get_cpu_entry_area+0xc/0x30 [ 159.840335] df_debug+0x2d/0x2e [ 159.843621] do_double_fault+0x113/0x200 [ 159.847693] double_fault+0x23/0x30 [ 159.851320] RIP: 0010:vmx_vcpu_run+0x1244/0x2600 [ 159.856080] Code: 60 03 00 00 4c 8b a9 68 03 00 00 4c 8b b1 70 03 00 00 4c 8b b9 78 03 00 00 48 8b 89 08 03 00 00 75 05 0f 01 c2 eb 03 0f 01 c3 <48> 89 4c 24 08 59 0f 96 81 88 56 00 00 48 89 81 00 03 00 00 48 89 [ 159.875373] RSP: 0018:00000000b4247350 EFLAGS: 00010002 [ 159.880759] RAX: dffffc0000000000 RBX: 1ffff10036848d2c RCX: ffffffff8110d4ab [ 159.888388] RDX: 1ffff10033a75800 RSI: ffffffff8110d58b RDI: 0000000000000007 [ 159.896454] RBP: ffff8801b4246a08 R08: ffff880191eb0180 R09: fffff5200032cd3a [ 159.903734] R10: fffff5200032cd3a R11: ffffc900019669d3 R12: 1ffff10036848d28 [ 159.911110] R13: ffff88019d3ac000 R14: ffff8801b42469e0 R15: 0000000000000000 [ 159.918432] ? pte_list_remove+0x6b/0x420 [ 159.922612] ? pte_list_remove+0x14b/0x420 [ 159.926864] WARNING: kernel stack regs at 000000003f4f9e9a in syz-executor5:10325 has bad 'bp' value 00000000f6cd4d1e [ 159.926874] unwind stack type:0 next_sp:000000002ed6e1e7 mask:0x20 graph_idx:0 [ 159.926889] 00000000513a19b7: fffffe0000008d78 (0xfffffe0000008d78) [ 159.926910] 00000000350714ee: ffffffff812a9a55 (show_trace_log_lvl+0x1f6/0x28c) [ 159.926927] 00000000445370b8: ffffffff811f4fb4 (vmx_vcpu_run+0x1244/0x2600) [ 159.926937] 0000000012b83664: fffffe0000008fd8 (0xfffffe0000008fd8) [ 159.926945] 00000000f64a7bdc: 0000000000000020 (0x20) [ 159.926953] 00000000a004196a: 0000000000000005 (0x5) [ 159.926963] 00000000b126bd87: fffffe0000007000 (0xfffffe0000007000) [ 159.926972] 00000000c5604541: fffffe0000009000 (0xfffffe0000009000) [ 159.926981] 000000006940fb88: 00000000b4247350 (0xb4247350) [ 159.926986] 000000008657a4c8: 0000000000000000 ... [ 159.926995] 00000000d3996b03: fffffe0000007000 (0xfffffe0000007000) [ 159.927004] 00000000fc252312: fffffe0000009000 (0xfffffe0000009000) [ 159.927013] 00000000e858a251: 00000000b4247350 (0xb4247350) [ 159.927021] 00000000347b44c7: 0000000000000020 (0x20) [ 159.927031] 00000000d0a5cc43: ffff880191eb0180 (0xffff880191eb0180) [ 159.927040] 000000006b0dd15f: 0000010100000000 (0x10100000000) [ 159.927045] 00000000e3fe0c89: 0000000000000000 ... [ 159.927055] 00000000a12fd5c6: fffffe0000008ca8 (0xfffffe0000008ca8) [ 159.927068] 0000000098c14c5b: ffffffff811f4fb4 (vmx_vcpu_run+0x1244/0x2600) [ 159.927077] 000000004e4300b8: fffffe0000008f58 (0xfffffe0000008f58) [ 159.927087] 00000000164f90ba: 0ccea890daea5e00 (0xccea890daea5e00) [ 159.927095] 0000000064d3b63d: 0000000000000093 (0x93) [ 159.927100] 000000001ea1ba8b: 0000000000000000 ... [ 159.927120] 00000000712461b1: ffffffff88f1b260 (pv_cpu_ops+0x120/0x120) [ 159.927128] 00000000c9df28ab: 00000000ffffffff (0xffffffff) [ 159.927138] 000000005362f21a: fffffe0000008d88 (0xfffffe0000008d88) [ 159.927151] 0000000031fd59ee: ffffffff812a9b23 (show_stack+0x38/0x3a) [ 159.927161] 00000000f8bbcc77: fffffe0000008e38 (0xfffffe0000008e38) [ 159.927180] 000000001a6b965d: ffffffff87950115 (dump_stack+0x1c9/0x2b4) [ 159.927190] 0000000035a27825: fffffbfff11e364c (0xfffffbfff11e364c) [ 159.927199] 0000000046caccae: dffffc0000000000 (0xdffffc0000000000) [ 159.927208] 0000000044e222b7: 1fffffc0000011b6 (0x1fffffc0000011b6) [ 159.927217] 0000000038794a10: 0000000041b58ab3 (0x41b58ab3) [ 159.927233] 000000003d1faf11: ffffffff88bdf674 (regoff.33745+0x36ac14/0x37d810) [ 159.927250] 0000000057f38d07: ffffffff8794ff4c (dump_stack_print_info.cold.2+0x52/0x52) [ 159.927259] 00000000881a38b6: fffffe0000008df8 (0xfffffe0000008df8) [ 159.927265] 0000000050eb0c9d: 0000000000000000 ... [ 159.927274] 000000006bbd2783: fffffe0000008e40 (0xfffffe0000008e40) [ 159.927283] 0000000088706b87: 00000000b4248000 (0xb4248000) [ 159.927293] 00000000c111f767: fffffe0000008e18 (0xfffffe0000008e18) [ 159.927302] 0000000023989960: 0ccea890daea5e00 (0xccea890daea5e00) [ 159.927311] 000000003bc32ed5: 00000000b4248000 (0xb4248000) [ 159.927328] 0000000092c11658: ffffffff89e78d20 (buf.37679+0x40/0x40) [ 159.927337] 00000000cb82091e: 0ccea890daea5e00 (0xccea890daea5e00) [ 159.927348] 000000008261cb62: 0000000000000000 ... [ 159.927365] 0000000070518bc7: ffffffff87e744c0 (hpet_msi_domain_info+0xe40/0x1a80) [ 159.927370] 000000008b649243: 0000000000000000 ... [ 159.927379] 00000000ee332fef: fffffe0000008f00 (0xfffffe0000008f00) [ 159.927397] 000000005a5c5c1a: ffffffff814750a9 (panic+0x238/0x4e7) [ 159.927405] 00000000c688b931: 0000000041b58ab3 (0x41b58ab3) [ 159.927419] 0000000072e279d6: ffffffff88bf57b4 (K512_4+0x1334/0x122434) [ 159.927435] 00000000c3b988a0: ffffffff81474e71 (add_taint.cold.5+0x16/0x16) [ 159.927440] 00000000d2bab26f: 0000000000000000 ... [ 159.927449] 00000000cc440cb1: ffff880100000008 (0xffff880100000008) [ 159.927459] 00000000c369b45c: fffffe0000008f10 (0xfffffe0000008f10) [ 159.927468] 000000003a8a461e: fffffe0000008ea8 (0xfffffe0000008ea8) [ 159.927477] 000000006c5bc945: 0000000000000002 (0x2) [ 159.927486] 000000002c158db1: ffff880191eb0180 (0xffff880191eb0180) [ 159.927495] 00000000ff7112aa: 0000010000000000 (0x10000000000) [ 159.927500] 00000000ca9dbdb9: 0000000000000000 ... [ 159.927509] 00000000a2539538: 0ccea890daea5e00 (0xccea890daea5e00) [ 159.927514] 00000000f9c258ff: 0000000000000000 ... [ 159.927530] 00000000d9dec1f8: ffffffff8137d27c (get_cpu_entry_area+0xc/0x30) [ 159.927540] 00000000792da13a: fffffe0000002000 (0xfffffe0000002000) [ 159.927547] 0000000049f1ce85: 0000000000000004 (0x4) [ 159.927556] 00000000cc482e2b: 000000000001ede0 (0x1ede0) [ 159.927565] 00000000a73b4fee: ffff880191eb0180 (0xffff880191eb0180) [ 159.927574] 00000000ab1228c3: fffffe0000008f58 (0xfffffe0000008f58) [ 159.927579] 000000004c96f4b3: 0000000000000000 ... [ 159.927596] 0000000021c8ee6a: ffffffff87e4a540 (__func__.44670+0x40/0x40) [ 159.927605] 00000000fe16d32c: 00000000b4247350 (0xb4247350) [ 159.927610] 000000006633955f: 0000000000000000 ... [ 159.927619] 00000000375e4c32: fffffe0000008f18 (0xfffffe0000008f18) [ 159.927632] 00000000f8de07d8: ffffffff813480df (df_debug+0x2d/0x2e) [ 159.927641] 0000000074fd02a7: fffffe0000008f58 (0xfffffe0000008f58) [ 159.927651] 000000007f37e2b6: fffffe0000008f48 (0xfffffe0000008f48) [ 159.927665] 00000000f3022424: ffffffff8129cb43 (do_double_fault+0x113/0x200) [ 159.927673] 0000000038593c3a: 0000000000000001 (0x1) [ 159.927678] 00000000318c51ca: 0000000000000000 ... [ 159.927687] 00000000b08a57cb: fffffe0000008f59 (0xfffffe0000008f59) [ 159.927701] 00000000790ad4e9: ffffffff87a00bd3 (double_fault+0x23/0x30) [ 159.927706] 000000003f4f9e9a: 0000000000000000 ... [ 159.927715] 000000002f7d1134: ffff8801b42469e0 (0xffff8801b42469e0) [ 159.927725] 00000000078107c3: ffff88019d3ac000 (0xffff88019d3ac000) [ 159.927734] 00000000ad6bd8b7: 1ffff10036848d28 (0x1ffff10036848d28) [ 159.927744] 00000000bb1f07c4: ffff8801b4246a08 (0xffff8801b4246a08) [ 159.927753] 00000000c1592d0e: 1ffff10036848d2c (0x1ffff10036848d2c) [ 159.927763] 00000000eae2df48: ffffc900019669d3 (0xffffc900019669d3) [ 159.927772] 000000005b2fdbee: fffff5200032cd3a (0xfffff5200032cd3a) [ 159.927781] 00000000060da140: fffff5200032cd3a (0xfffff5200032cd3a) [ 159.927790] 00000000e61aeb63: ffff880191eb0180 (0xffff880191eb0180) [ 159.927799] 00000000a9609b4e: dffffc0000000000 (0xdffffc0000000000) [ 159.927814] 0000000013a4f40b: ffffffff8110d4ab (pte_list_remove+0x6b/0x420) [ 159.927822] 0000000056b2d5b5: 1ffff10033a75800 (0x1ffff10033a75800) [ 159.927836] 000000001b5ef153: ffffffff8110d58b (pte_list_remove+0x14b/0x420) [ 159.927843] 00000000ce0f352d: 0000000000000007 (0x7) [ 159.927852] 00000000e1311e62: ffffffffffffffff (0xffffffffffffffff) [ 159.927865] 00000000a0f0ccec: ffffffff811f4fb4 (vmx_vcpu_run+0x1244/0x2600) [ 159.927873] 000000000506b4a2: 0000000000000010 (0x10) [ 159.927881] 00000000aa5f9ace: 0000000000010002 (0x10002) [ 159.927890] 00000000a9a88fbf: 00000000b4247350 (0xb4247350) [ 159.927897] 00000000b4265942: 0000000000000018 (0x18) [ 159.927903] [ 160.153972] IPVS: ftp: loaded support on port[0] = 21 [ 160.157684] Dumping ftrace buffer: [ 160.157691] (ftrace buffer empty) [ 160.157696] Kernel Offset: disabled [ 160.590408] Rebooting in 86400 seconds..