[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 20.799740] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 21.982319] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.272264] random: sshd: uninitialized urandom read (32 bytes read) [ 23.289997] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.13' (ECDSA) to the list of known hosts. [ 28.762112] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/18 03:39:20 fuzzer started [ 30.268233] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/18 03:39:23 dialing manager at 10.128.0.26:40185 2018/07/18 03:39:27 syscalls: 1808 2018/07/18 03:39:27 code coverage: enabled 2018/07/18 03:39:27 comparison tracing: enabled 2018/07/18 03:39:27 setuid sandbox: enabled 2018/07/18 03:39:27 namespace sandbox: enabled 2018/07/18 03:39:27 fault injection: enabled 2018/07/18 03:39:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/18 03:39:27 net packed injection: enabled 2018/07/18 03:39:27 net device setup: enabled [ 36.841634] random: crng init done 03:40:47 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x6, 0xab, 0x8000, 0x5, 0x20, 0xa47f, 0x6, 0x8, r3}, &(0x7f0000000100)=0x20) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000140)={'icmp6\x00'}, &(0x7f0000000180)=0x1e) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000001c0)) fcntl$addseals(r0, 0x409, 0x8) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x2, 0x0) fallocate(r1, 0x20, 0x1000, 0x1) r5 = getuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) mount$fuseblk(&(0x7f0000000240)='/dev/loop0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='fuseblk\x00', 0x800000, &(0x7f0000000380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r8}, 0x2c}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000400)=0xff, 0x4) write$P9_RMKDIR(r1, &(0x7f0000000440)={0x14, 0x49, 0x2, {0x13, 0x1, 0x8}}, 0x14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000480)={0x5, 0x4, 0x3, 0x0, 0x3}) sendto$inet6(r1, &(0x7f0000000500)="7edb1e4e669996aa88ab8e34e14a80ff35fc3e85c5e1ba448cb3a279365872d309de8fe7635408882be1713f26dbf062a7ef59d2a3b9dfc2bd2008f73e4cb0d47d6200034d7470b8f9f0050a25af02d0e4c765df47f196253015c82486ff4e5ca88ae5e6e7ad28c15c6e847ecf251f439148131b20997b6f81e067b7fd56f2761aa53945e29e7ea8c9dbac3f20c1d8b0cd2e566d371c16024dff53277be11c434c46959a0338543dbb3a3e7ac2914532dabd", 0xb2, 0x0, &(0x7f00000005c0)={0xa, 0x4e24, 0xffffffffffffffff, @mcast1={0xff, 0x1, [], 0x1}, 0x81000000}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000600)={0x0, 0x9, 0x2, 0xffffffff, 0x7ff, 0x4, 0x90, 0x1, r2}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0x1e0, 0x0, 0x1e0, 0x1e0, 0xf0, 0x300, 0x300, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000640), {[{{@ipv6={@remote={0xfe, 0x80, [], 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, [0x0, 0xffffff00, 0xff000000], [0xffffffff, 0xffffff00, 0xff, 0xffffffff], 'veth0_to_bridge\x00', 'ifb0\x00', {0xff}, {0xff}, 0x87, 0x19, 0x2, 0x12}, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xc8, 0xf0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x9, 0x7f, 0x3}, {0x9, 0xbe7, 0x2}}}}, {{@ipv6={@loopback={0x0, 0x1}, @loopback={0x0, 0x1}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xff000000, 0xff000000, 0xffffffff, 0xff000000], 'tunl0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x16, 0x7f, 0x4, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d4, 0x4d6, 0x3, 0xf2, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x430) setsockopt$inet_mreq(r4, 0x0, 0x0, &(0x7f0000000ac0)={@broadcast=0xffffffff, @local={0xac, 0x14, 0x14, 0xaa}}, 0x8) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) ioprio_get$pid(0x1, r6) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vsock\x00', 0x400000, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000b40)={0x8001, 0x1f}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000b80)={@broadcast, @multicast2, 0x0}, &(0x7f0000000bc0)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000c00)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in, 0x4e23, 0x8000, 0x4e20, 0x42, 0xa, 0xa0, 0xa0, 0x6c, r10, r7}, {0xffffffffeafb855c, 0x4, 0x0, 0xfffffffffffffffe, 0x401, 0x80000001, 0x8, 0x101}, {0x800, 0x6, 0x7ff, 0x7f}, 0x4, 0x6e6bbf, 0x1, 0x0, 0x3, 0x3}, {{@in=@multicast1=0xe0000001, 0x4d2, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3500, 0x2, 0x3, 0x8000, 0x9, 0x7, 0xe53}}, 0xe8) fcntl$lock(r9, 0x5, &(0x7f0000000d00)={0x1, 0xdedd1a125dbb1e6c, 0x3, 0x2e1, r6}) ioctl$SG_GET_ACCESS_COUNT(r9, 0x2289, &(0x7f0000000d40)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000d80)=0x1, 0x4) socketpair(0x5, 0x80000, 0x3f, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_CLOCK(r11, 0x4030ae7b, &(0x7f0000000e00)={0x9, 0x1}) 03:40:47 executing program 7: syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000001200)=[{&(0x7f0000000080)="d0c76efa3ec504c0c5cf04a363b02ac8056823ad98d8967dd6cff477d83cc69b631ca9ddc7f6c48dbff4f7ce3721d62d4eaac677ab8be3cd4fb03842d54418af6bd9b5803bc891a737968c56f14638d0c9a6b3078eb077126f8637b43a6708c8e2417659d6de2a2b540e2a8473f604e5ee38a434d4130ad081b52f8682095e83af2db4b7d02977f7c0ab49fb02c0f33c4de8d05f87aa90ec41878832f4812b816780f8f4ee7fdbe8b8c872d3c6661898d38a577ed0cc9b10d525967970e9c351d0f81fe0cc51328d866c95b7", 0xcc, 0xffffffffffff0001}, {&(0x7f0000000180)="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", 0x1000, 0x6}, {&(0x7f0000001180)="9ef14e7a5ee8c8b4ec5d03e73e96fa8aa9274ec11fad1a296329053e0888266b0686a022f84371ac4556bab40f0f7e650001125eaa02f214c55d5ca6479e19c7cf6d42b87004e2578f", 0x49}], 0x2000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = memfd_create(&(0x7f0000001280)='\x00', 0x2) r3 = accept4$bt_l2cap(r2, &(0x7f00000012c0), &(0x7f0000001300)=0xe, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001340)={{{@in=@multicast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000001440)=0xe8) r6 = getuid() setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001480)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4e22, 0x0, 0x4e22, 0x0, 0x2, 0x20, 0xa0, 0xc, r4, r6}, {0x101, 0xf, 0x5, 0xfff, 0x9, 0x5, 0x8, 0xff}, {0xa9da, 0x97d4, 0x0, 0x8001}, 0xffff, 0x6e6bbe, 0x3, 0x1, 0x1, 0x1}, {{@in=@loopback=0x7f000001, 0x4d5, 0xff}, 0xa, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x4, 0x3, 0x2, 0x68d7aaaa0, 0x4, 0x1000}}, 0xe8) r7 = add_key$keyring(&(0x7f0000001580)='keyring\x00', &(0x7f00000015c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) r8 = getegid() keyctl$chown(0x4, r7, r5, r8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001640)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001600)={0xffffffffffffffff}, 0x2, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000001680)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0xcc, @empty, 0x7}, r9}}, 0x30) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0) getgroups(0x6, &(0x7f00000016c0)=[r8, r8, r8, r8, r8, r8]) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001e40)=0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001e80)={{{@in6=@mcast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000001f80)=0xe8) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001fc0)=0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000002280)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000022c0)={0x0}, &(0x7f0000002300)=0xc) sendmmsg$unix(r2, &(0x7f0000002400)=[{&(0x7f0000001700)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001780)="a1b3c3f70f1e350c5ae09891ae2cf389d8e8d4e4456d2e2cceebd83a8299696e68dc6fd99df8c6ad130046c500c29b7f917cda6af685492a11903fe538485728b5b8a0d4749bc84924c9e0e67ed26264f451fc2cb4101af4abc3d9514e", 0x5d}, {&(0x7f0000001800)="d3f3404f83bfb3447fb3e861752f2e7d2d9f6410688fe2eeb8be591e7aaa11492d9e903bfb5c55a135e52fcddd9f4d05111abd35245fc104c8b66309386c368047f84c5ae651d4985bf672122f272bc9c9b4cde322cb0f6cfea7709a4b220b05a7439de2d646ce5673cf9e97562e5217d2b5003216f71b944f9f3a52e61d8e96457757079dc220788a9f329f14e8caa277302bdb458d2aef60d63b73ea94b9a15402b8ce4dd38dabcc2417c07bf05d9a80f9a92e6084331dfd402b8358c868f282968cac8f38b4e37f14dc6015350b419898b67f57c41dbccacfa4b980c18ebb023ea17b218e57f476", 0xe9}, {&(0x7f0000001900)="60d48a09bd05ca02ef025b34cdb36c632b7202b1002ef63dc35a379eb0723fab8a49e10a04993bd2", 0x28}, {&(0x7f0000001940)="c2cf1584cf3b8c59144e999fb77f5f9551be15873fc0b126f58a27107ff8a6eefbf28d0d13e46f094579982fbf855298242a099f9cc9a9f7fbd3233af75913cab924422a01b792302eefca2cc7bfb1c31e6f0868c07bd30d7b88da289f858a3394242347a99828a5e4d823ff9ee4270c9da2689ced6245d22fd5a9c6aede638372a0b270163c1da0c16d2444f7ab298638fd2ddc478087c17b785f8d59af94340db063bb65f2c00f016102bc7ed8c0f2af7acabf7f251623fe14c049b7ef4e2b0bf837d04f859149798cc6", 0xcb}, {&(0x7f0000001a40)="b5b65bda867ca35311247af3f300f94e0a3c0a0a7335b314b16ed9fc17665fb8", 0x20}, {&(0x7f0000001a80)="fe209041279305f4d99ef53ad816ca2209c766cb7f5e17e60de24b786d76aaac9ac4887c298416008c1bb0ce2a1b91ea561b9ae826177fa6e96f4db3ddc920cd1b8ac33cb2d7f3cbeddba8de8c80bcb107a93e1fb563761bf86ee4a7177a46dcd37efea4f612622cc15fab1c6990d72840a50d28c6c1dff57e1ec5b678b8db80e689365a08777776c7f2eaea3dbcd30887cda26a1e00f79bb109b01da11209c5b4580afba8e3286b45cc8b36d811dbcdf595a4fcd44de1ccaacc811fa22a3b85da0263233259fc48ee611834b8bcb0efb70e43c969f9d20b34b2945938a0be8d114c8482d703ef9a7a141b03f69ffcfa4486c9e753dec6fbb9", 0xf9}, {&(0x7f0000001b80)="4802b21c571097b54059cad42d5e3797975f08e6ee7e313e8e8153175dbc429177d165c3595bbdabe5df5cbf2d1c1824e41123f50270b880524ccd3e97c11ad7b30ccc96b279ae0f11dc4f775331f32c527ddfb822284f5776a8150366cd9fdbd6d4ca4317e9a559b15e60edc0fc02737ee2e977129fa2948374319ebb4010f94ad3e9f06d79ffba9468877205eb0846d636715f", 0x94}, {&(0x7f0000001c40)="d817436dede781bc418a19aac20f6c2cb1d74107e8aaef97852dea14fa26d47fd99a34fd5f75589a3496b7fd98c39eec659e0cbc4f21ef4833a7a9bf28b46f1aff26abcdcb81a22dc78518d29ce4bc8c5976e0b7cc3ea43b095b5a0816034200b1fef4981320905be73860fba2c8823341b3a62ed3658877319322", 0x7b}, {&(0x7f0000001cc0)="465164c0fb71a54b8be32ec03a531638c9d99df8fbfd0ea66a3a5cd103da2fc1b4ee6454f47b3565ed08a7a8de9704c6da50dcf73423a65df1b98ab51ad0011708a0bdece3c2258ebd514f485a8c0b0ad8b643b9907f0aad0add05c3dab4ed9fec4ddf4f70d80f7647faa2477be0f48d9611d6271fbd078a312bd7f0de246565d3478813e7e1ace72e5c7539bb239f563e7a533f14c91a61b8d55c64201799667416156bd18ca47d03a25d7c2c44655bd7", 0xb1}], 0x9, &(0x7f0000002000)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0, r2]}, @cred={0x20, 0x1, 0x2, r13, r14, r10}, @cred={0x20, 0x1, 0x2, r15, r5, r12}, @rights={0x18, 0x1, 0x1, [r1]}], 0x78, 0x801}, {&(0x7f0000002080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000002100)="821e6e1938732c3c8df9bb1c89e6dfba94f2f856e8814712d3220bc6", 0x1c}, {&(0x7f0000002140)="3aac1ab0f9480a8a355034cea36312c62c8d03e98f06c9577a6c8a4622f345aea3ebf0fc184df59724c431233a5f50a18c3802577966caaab6bdde1ec88674383bf4e1dd7e5dbc6f1c2fed913d00a5d0fa0f2edc6d769de701f2c2e61bcc48b19024e938423902ff8ef5ec40a131a853e31f91c16325741093c71c09c5fe8b1f305c85e413d21d6171cb7d8a9dff76dad63cf894e65b", 0x96}, {&(0x7f0000002200)="3faa074d19199af39e1caa35755c23b6e5fad715ffe743fca2105e014d511f7973b1f94c44c141ca5ec78ff483b5da5dc179323584", 0x35}], 0x3, &(0x7f0000002340)=[@rights={0x30, 0x1, 0x1, [r2, r1, r0, r0, r0, r3, r3]}, @rights={0x18, 0x1, 0x1, [r2]}, @cred={0x20, 0x1, 0x2, r16, r5, r11}, @cred={0x20, 0x1, 0x2, r17, r5, r8}, @rights={0x28, 0x1, 0x1, [r0, r0, r3, r2, r1]}], 0xb0, 0x800}], 0x2, 0x40040) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002480)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002540)={r2, &(0x7f00000024c0)="fb7ba21f3b98d08e39d90fc6860a9285d25febf3e5f16a38b955b01bb3961db60df42d1c04ab089d46a279a895", &(0x7f0000002500)="96d9d8f48d336e35600de49ef2a1279a2632d9d046b9452e37ca5a24e0b5305f0512426d68957ee7be9bcd9e12401efa774ac92eb68e7d05eac29c", 0x1}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000002580)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xffffffffffff7fff, @loopback={0x0, 0x1}, 0x81}, r9}}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000025c0)={{{@in=@local, @in=@loopback}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000026c0)=0xe8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000002700)={0x0, 0x4, 0x3ff, 0x2}, &(0x7f0000002740)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000002780)={r18, 0x6, 0x5b9f, 0x3}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002880)={r2, &(0x7f00000027c0), &(0x7f0000002800)="2b21da01886c255ecd83f00fdc1e33a33bb8e4a608f4384e5f60d84dadc60f2d11573640c59fbb3921f80850121881077e6f556a702cc5999c0daf0d3e4d2c89c8ff99cee70249"}, 0x20) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000028c0)={0x0, 0x10001}, 0x8) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000002900)) 03:40:47 executing program 3: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/244, &(0x7f0000000200)=0xf4) r2 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x3, 0x2000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000400)=0xe8) getgroups(0x5, &(0x7f0000000440)=[0xee01, 0xee00, 0xee00, 0xee01, 0xee01]) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='fuse\x00', 0x4400, &(0x7f0000000480)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions='default_permissions', 0x2c}, {@default_permissions='default_permissions', 0x2c}, {@max_read={'max_read', 0x3d, 0x9}, 0x2c}, {@default_permissions='default_permissions', 0x2c}, {@allow_other='allow_other', 0x2c}, {@max_read={'max_read', 0x3d, 0x9}, 0x2c}, {@allow_other='allow_other', 0x2c}, {@max_read={'max_read', 0x3d, 0x432}, 0x2c}]}}) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000005c0)={0xffffffffffffffff}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rtc0\x00', 0x501100, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000640)={0x0, 0x4, 0x80000000}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000006c0)={r7, 0x26ce, 0x400, 0xfffffffffffffffa, 0x9}, &(0x7f0000000700)=0x14) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000740)=0x0) fcntl$setown(r0, 0x8, r9) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000780)=""/93) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x7fff) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000800)=@req3={0x1, 0x81, 0x7, 0x47, 0x80000000, 0x101, 0xe6}, 0x1c) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000840)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000880)={r8, @in6={{0xa, 0x4e20, 0xa, @mcast1={0xff, 0x1, [], 0x1}, 0x6}}}, &(0x7f0000000940)=0x84) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000a00)=@get={0x1, &(0x7f0000000980)=""/75, 0x1}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000a40)={0x57, 0x2, 0x2, {0x7, 0x9}, {0x8001}, @const={0x0, {0x8, 0x1, 0xd68, 0xffff}}}) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000ac0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a80)={0xffffffffffffffff}, 0x2, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000b00)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x2, @loopback={0x0, 0x1}, 0xffffffffffffff2f}, {0xa, 0x4e21, 0x8001, @remote={0xfe, 0x80, [], 0xbb}, 0x5e}, r10, 0x6e}}, 0x48) lseek(r1, 0x0, 0x3) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000b80)={{0x37, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e21, 0x0, 'sed\x00', 0x34, 0x7, 0x12}, {@loopback=0x7f000001, 0x4e20, 0x10000, 0x5, 0x4fb, 0x101}}, 0x44) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000c00)={{{@in6, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000d00)=0xe8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000d40)={r7, 0x5b, "003e1e2a9476a156af16a6f5e7fe0c43afafbbce54e65d0964d091c41af3c680bf6dea8a51dadec9e3e8916017bd0ae52df9eb3d196857d8663ceff5a1cff32610ef1d326ce1248d7f86cce3d823479425f5822b21db52ed5f60cc"}, &(0x7f0000000dc0)=0x63) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000e00)={0xff, 0x7fff, 0x1f, 0x4}, 0x8) ioctl$SCSI_IOCTL_GET_IDLUN(r6, 0x5382, &(0x7f0000000e40)) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000e80)=""/45) r11 = dup2(r5, r1) ioctl$TIOCGPGRP(r11, 0x540f, &(0x7f0000000ec0)) 03:40:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000040)) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x120) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3002000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x134, r1, 0x200, 0x70bd27, 0x25dfdbfd, {0x1}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipddp0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x2b}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x20}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x16}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x122}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x134}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) write$P9_RMKNOD(r0, &(0x7f0000000340)={0x14, 0x13, 0x2, {0x21, 0x1, 0x6}}, 0x14) getsockname(r0, &(0x7f0000000500)=@xdp={0x0, 0x0, 0x0}, &(0x7f0000000580)=0x80) sendto$packet(r0, &(0x7f0000000380)="6d1c69a554d09b5cac4599de514c86da5a859328865cb72160ba00c4d577fbb4cfbebe", 0x23, 0x44004, &(0x7f00000005c0)={0x11, 0x9, r2, 0x1, 0x7, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc}}, 0x14) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000600)=@generic={0x2, 0x7, 0x7d}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000640)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r3 = syz_open_dev$vcsa(&(0x7f0000000680)='/dev/vcsa#\x00', 0x10000, 0x800) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000006c0)={0x0, 0x1, 0x7}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000740)={r4, @in6={{0xa, 0x4e20, 0x93, @mcast1={0xff, 0x1, [], 0x1}, 0x7}}, 0x1a, 0x401}, &(0x7f0000000800)=0x90) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000840), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_aout(r6, &(0x7f0000000880)={{0x1cf, 0xffffffff, 0xffff, 0x2f9, 0x3e3, 0x0, 0x3c4, 0x4}, "cff210b36668698ef5ad8cacfc70b4870c8560a99b1896ad552e6d14521ac428c70ed036891d607011d8df05bc0923c433c71e9e85d374f1ea6f7f90a4e989dc74264d2ed235e1f5e82c71cf194d0c522ff0b0bd0201168df75f0035eac5855f74d31c5e92e0f3802bdd790a7bf037a7d352cf53cc2ca4081343d0aebebd13523c3e3ba15ee7ab8b694a150cdcfc4f466be96ba7501b584fc1d808cfe5b92d6c17f004425d23b07e6df083306c08", [[], [], [], [], []]}, 0x5ce) r7 = userfaultfd(0x800) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000e80)=""/14) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000ec0)={0x0}, &(0x7f0000000f00)=0xc) ptrace$setopts(0x4206, r8, 0x32f7, 0x100030) sendfile(r3, r7, &(0x7f0000000f40), 0x1094) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000fc0)={r3, 0x28, &(0x7f0000000f80)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001000)={r9, 0x6, 0x8}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001080)={&(0x7f0000001040)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f00000010c0)={0xdd, 0xffffffff80000000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000001100)={{0x2, 0x4}, 0x1, 0x1000, 0x2, {0x7, 0x10000}, 0x1, 0xeea}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000001180)={r5, 0x5, 0x4, 0x5, 0x80000001, 0x6}, &(0x7f00000011c0)=0x14) syz_genetlink_get_family_id$ipvs(&(0x7f0000001200)='IPVS\x00') 03:40:47 executing program 5: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='keyring\x00', 0xffffffffffffff9c}, 0x10) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x80000001, 0x1, 0x5, 0x1}, {0x200, 0x4, 0x2, 0x1ff}]}) ioctl$RTC_AIE_ON(r0, 0x7001) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x1000, &(0x7f0000000240)={'trans=unix,', {[{@cache_loose='cache=loose', 0x2c}, {@afid={'afid', 0x3d, 0x100000001}, 0x2c}, {@cache_mmap='cache=mmap', 0x2c}, {@version_u='version=9p2000.u', 0x2c}, {@noextend='noextend', 0x2c}, {@debug={'debug', 0x3d, 0x5}, 0x2c}, {@afid={'afid', 0x3d, 0xf2f0}, 0x2c}, {@cache_fscache='cache=fscache', 0x2c}]}}) r1 = getpid() write$cgroup_pid(r0, &(0x7f0000000300)=r1, 0x12) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e22, 0x7f, @mcast2={0xff, 0x2, [], 0x1}, 0x3}}, 0x9, 0x540, 0x7801, "b472ea849f9b2c60102d83cb8409b1492a0b3cf628987ed192e99869cb28bfe6f2d83ac070724feab913f0b51124ef0ca9660eaeabb252f59e788e610e6ae4a10714fa80ac9da83cc31b6d1875f6cd5f"}, 0xd8) sched_yield() umount2(&(0x7f0000000440)='./file0\x00', 0x9) read(r0, &(0x7f0000000480)=""/239, 0xef) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=@known='system.posix_acl_default\x00') read(r0, &(0x7f0000000600)=""/194, 0xc2) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000007c0)={0x6, &(0x7f0000000700)=[{}, {}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}, {}, {0x0, 0x0, 0x0, @dev}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000840)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000008c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000800), 0x3, {0xa, 0x4e22, 0x0, @empty, 0x72d}, r2}}, 0x38) keyctl$session_to_parent(0x12) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000900)=""/146) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000009c0), 0x111, 0xa}}, 0x20) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000a40)) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000a80)) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000ac0)={0x100, 0x1, 0x63, 0x1, 0x3ff}) getsockopt$packet_int(r0, 0x107, 0x1f, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) r3 = semget(0x2, 0x3, 0x3) semctl$IPC_RMID(r3, 0x0, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000b80)={[{0x2, 0x1, 0x100000001, 0x4, 0x100000000, 0x3ff, 0xfffffffffffffffe, 0x9, 0x9, 0x6, 0x3541, 0x64a, 0x2}, {0x7, 0x0, 0x0, 0x81, 0x7, 0x85e6, 0x4ce, 0x83, 0x80, 0x1, 0x686f7391, 0x1, 0x8000}, {0x9, 0x0, 0x7, 0x800, 0x8, 0x3f, 0x100, 0x4, 0x1, 0x80000001, 0x2, 0xc, 0x9}], 0x1}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000c00)={0x4}, 0x4) 03:40:47 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x200, 0x40}, {0x7fffffff, 0xffff}, 0x5, 0x2, 0x7}) clock_nanosleep(0x7, 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000140)={0x3f, 0x3f, 0x2, 0x3ff}, 0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000780)={0x0, 0x7}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000800)={0x0, 0xffffffffffffff01, 0x7ff}, &(0x7f0000000840)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000000980)=[{&(0x7f0000000180)=@in6={0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffff}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000001c0)="4ab1bad713f0b500370462c759812cb8c172891152917e71e3ffd4b6c0ba294160698fc7", 0x24}, {&(0x7f0000000200)="10484c7128d773a41ee1338ce787761e871307ab83dd29d79f79ba1b5e5e9105287136a3de776332c7f120d7c89c24282887881293fefd81b687200977e654dbf4fe4ca761e0e1cd7ff415674e9bf3fe62201df2d7523bc352e2d5b87c5d6c5366ae0692a29b11bbde0f306647dae5f2c79d42483ffa74b839653b1ac7ce", 0x7e}], 0x2}, {&(0x7f00000002c0)=@in={0x2, 0x4e23, @loopback=0x7f000001}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000300)="6aa6ac4964b91981ee2d8a6c32bfa18a3bde820416fe1a43ff64f01cf8977e8a9361e28922db24a34f035ebeed3d95f85cb780f84fd1489df36b4d7d7a0eeb1d1635a7655f199c92b64c44c3ec835c0f19a283a3a81090db7da22ad7f36b2a310012d8c4c135b193fc4541e7ecdd529965778be3bf8f270d57eed01bc7c597caa0a89488999a1a0008e305182c1f1948e3ecc84bfcf2c15a49b4b1f01aa83d166d399683a4f2cdbd42b385fbf843b03fa0b0ad08453847e6a9804d552a9f3d30da42d0de064ab8d69f171b113d79dbae421a1cd1a3b2c6f120225b7582bd1113abb4387aa041c8c504", 0xe9}, {&(0x7f0000000400)="bac167d30ac0d0f40bd0fc1abd5369c43f1ee021ddf20cc5c5a72049255b481d28cfa86d6d02b35b2a90981be5b6fabcab12972bc838203eb88674bf0bc997759e98f4db59b8b1bd0671ef1463ff693e1f58bb3b8f8477cac8a3897c9d7fc6e673b2464898a3d37432725f470272b8695da9c157beb2741facc84ca6d9359ea44969a567dce21bb8613b0e706bfbd943b1cbdc8dd1b7be2ad78b811736aedf664cf8c3fdf3ddc452597d25cb78703b91e6aaf0e79e736cdc7ad365b8ce7f94666cc72d98f217a43ef94afd74fa7504260e0c4ad42eb184b082be06f270", 0xdd}, {&(0x7f0000000500)="eadd1d8a1e4d7927b4", 0x9}, {&(0x7f0000000540)="7aeed7b8d3a30299b49762c149c6a0aecc8a666ada3db9d414c23a85e15716f204748fb625e9a557e58ffc9249e38809ce7dd04574733b2573bb16db3fb326a589eec91a71af6bc4c2a7d08e20a5327ccb5b6dc78cb238097eeb91763eb2e15498309e1af9fdbd787ee6a2f7fbfafc00e5a84dc83a8305eeaa17b9d8a762e0fcc3b48d3d97ef6b26222fb33f501cd8eb8be13530fd249c1c4a4b929c347836aae38fa63d26ba9de1e82ffb3ec5a5da3c5fb1bf6f5a97", 0xb6}, {&(0x7f0000000600)="60d5e98837b67aa8d41f0ba1fc5ce05ae3e014288529b17219b782c4b4ff7e6a07ff0140f70f858a64403671a96b5ad8f25f9805ef68002ffc90703fb7ec12eb5fe43aa63d676f12e6134a5ef824b1a3b455bef50eb04d93d17bf7babeebcf22b2fc7a4f8995c2937027d41a1ccb5861122b2f741b65fc09c0c1b7433c20e1e907252fac3f5129c050b5265093ca9ddb63a49659ac1eb9705d608de03682ede49f70e9eaaaf148e543bc7c8f220235f61b929646afb953231c5d34aff7b4bf244c89a673eb06cbf91aa3fbb78d7aa2e610870ac59e6c090146e910d55abfbf14939032679a7aad7107709830eca8", 0xee}], 0x5, &(0x7f0000000880)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x100000000}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [0xff, 0xff], @rand_addr=0xff}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x10001, 0x2, 0x800, 0x400, 0x3, 0x80000000, 0x400, r1}}, @dstaddrv4={0x18, 0x84, 0x7, @remote={0xac, 0x14, 0x14, 0xbb}}, @prinfo={0x18, 0x84, 0x5, {0x20}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x80, 0x200, 0x6, 0x58, 0x84, 0x5, 0x7, r2}}, @init={0x18, 0x84, 0x0, {0x0, 0x7ff, 0x0, 0x9}}], 0xe0, 0x488c0}], 0x2, 0x4) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000a00)=""/171) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000ac0)=""/165, &(0x7f0000000b80)=0xa5) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) readahead(r0, 0x401, 0x9) clock_gettime(0x0, &(0x7f0000000c00)={0x0, 0x0}) utimes(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c40)={{r3, r4/1000+30000}}) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000c80)=0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000cc0)={r1, 0x101, 0x0, 0x0, 0x6}, &(0x7f0000000d00)=0x18) ioctl$KIOCSOUND(r0, 0x4b2f, 0x9) r5 = getpid() capget(&(0x7f0000000d40)={0x39980732, r5}, &(0x7f0000000d80)={0x4, 0x3, 0x5, 0x7, 0x10001, 0x200}) r6 = syz_open_dev$sndpcmp(&(0x7f0000000dc0)='/dev/snd/pcmC#D#p\x00', 0x80000001, 0x400) fdatasync(r6) r7 = semget(0x3, 0x0, 0x0) semctl$IPC_RMID(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000e00)={r2, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}, 0x8, 0x3, 0x5, 0x5}, &(0x7f0000000ec0)=0x98) accept4$packet(r0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000f40)=0x14, 0x800) sigaltstack(&(0x7f0000fff000/0x1000)=nil, &(0x7f0000000f80)) ioctl$EVIOCGID(r6, 0x80084502, &(0x7f0000000fc0)=""/239) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r8, 0x300, 0x70bd2b, 0x25dfdbfd, {0x8}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) 03:40:47 executing program 6: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xac8, 0x2400) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x80, 0x2, 0xff}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0x2, [{}, {}]}, 0x48) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000100)={'broute\x00'}, &(0x7f0000000180)=0x78) getsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f00000001c0)=""/96, &(0x7f0000000240)=0x60) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000280)=0x3, 0x2) r1 = request_key(&(0x7f00000002c0)='syzkaller\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000340)='security\x00', 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r1, 0x2) r2 = syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000900)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000a00)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003840)={{{@in, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000003940)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003980)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@local}}, &(0x7f0000003a80)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003ac0)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000003bc0)=0xe8) r8 = accept4$packet(r0, &(0x7f0000003c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000003c40)=0x14, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003c80)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000003d80)=0xe8) getsockname$packet(r0, &(0x7f0000003dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000003e00)=0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000041c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004180)={&(0x7f0000003e40)={0x308, r2, 0x8, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0xb0, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3810800000000}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x74, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xffffffffffffff0d}}}]}}, {{0x8, 0x1, r7}, {0xb8, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r10}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r11}, {0xf8, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}}]}}]}, 0x308}, 0x1, 0x0, 0x0, 0x40845}, 0x8000) connect$can_bcm(r0, &(0x7f0000004200)={0x1d, r9}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000004240)={{{@in=@local, @in6=@mcast1}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@mcast1}}, &(0x7f0000004340)=0xe8) r12 = getgid() mount$9p_fd(0x0, &(0x7f0000004380)='./file0\x00', &(0x7f00000043c0)='9p\x00', 0x20860, &(0x7f0000004400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}, {@version_u='version=9p2000.u', 0x2c}, {@version_u='version=9p2000.u', 0x2c}, {@access_uid={'access', 0x3d, r4}, 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, '@'}, 0x2c}, {@dfltgid={'dfltgid', 0x3d, r12}, 0x2c}, {@msize={'msize', 0x3d, 0xe7f8}, 0x2c}, {@noextend='noextend', 0x2c}, {@posixacl='posixacl', 0x2c}]}}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000004500)=@sack_info={0x0, 0xfffffffffffffffe, 0x6}, &(0x7f0000004540)=0xc) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000004580)={0x0, 0x1, 0x3f, 0x0, 0x5, 0x1, 0x7f, 0xb5, {0x0, @in={{0x2, 0x4e24, @multicast1=0xe0000001}}, 0x6, 0x6, 0x2, 0x4, 0xffffffffffffffc6}}, &(0x7f0000004640)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000004680)={r13, 0x3, 0xffffffffffffff56, 0x100000000, 0x7, 0xfffffffffffffff8, 0xffffffff, 0x4, {r14, @in={{0x2, 0x4e21}}, 0x12, 0x6, 0x8, 0x8, 0x1}}, &(0x7f0000004740)=0xb0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000004780)={&(0x7f0000fe9000/0x14000)=nil, 0x14000}, &(0x7f00000047c0)=0x10) close(r8) mknodat(r0, &(0x7f0000004800)='./file0\x00', 0x8020, 0x8) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000004840)={0x7b, 0x0, [0x80, 0x5ede, 0xd2, 0x800]}) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000048c0)={'filter\x00'}, &(0x7f0000004940)=0x78) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000004980)={r15, 0x0, 0x7, 0x401, 0x3, 0x2, 0x8, 0xffffffff, {r15, @in6={{0xa, 0x4e22, 0x7ff, @mcast2={0xff, 0x2, [], 0x1}, 0x3}}, 0x1, 0x1, 0x4, 0xfffffffff2978e32}}, &(0x7f0000004a40)=0xb0) 03:40:47 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x100) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@broadcast=0xffffffff, @dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x3, [@loopback=0x7f000001, @rand_addr=0x2, @multicast1=0xe0000001]}, 0x1c) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xaa, 0x10001, 0x9, 0x7fffffff, 0x101}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={r2, 0x84, &(0x7f0000000140)=[@in={0x2, 0x4e22, @broadcast=0xffffffff}, @in6={0xa, 0x4e20, 0x5, @loopback={0x0, 0x1}, 0x2}, @in6={0xa, 0x4e20, 0x212, @empty, 0x20}, @in6={0xa, 0x4e24, 0x80000000, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, @in={0x2, 0x4e20, @broadcast=0xffffffff}, @in={0x2, 0x4e24, @broadcast=0xffffffff}]}, &(0x7f0000000240)=0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000280)=0x0) process_vm_writev(r3, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/1, 0x1}, {&(0x7f0000000300)=""/174, 0xae}, {&(0x7f00000003c0)=""/79, 0x4f}], 0x3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000500)={r2, 0x1}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f00000006c0)=0xe8) r5 = getgid() mount$fuse(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='fuse\x00', 0x201004, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions='default_permissions', 0x2c}, {@default_permissions='default_permissions', 0x2c}, {@allow_other='allow_other', 0x2c}, {@allow_other='allow_other', 0x2c}]}}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000007c0)=0x7, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000800), &(0x7f0000000840)=0x4) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000880)={0x6000, 0x10f000, 0xfffffffffffffffd, 0x4, 0x6}) bind$bt_rfcomm(r0, &(0x7f00000008c0)={0x1f, {0x5, 0x9, 0x3ff, 0x100000001, 0x1, 0x4}, 0x1000}, 0xa) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) fcntl$setstatus(r0, 0x4, 0x40c00) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000900)={"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"}) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000d40)={0x5, &(0x7f0000000d00)=[{0x200, 0xff, 0x4, 0x6}, {0x9, 0xfffffffffffffffd, 0x1, 0xfba}, {0x7, 0xffff, 0x7fffffff, 0x9}, {0x7, 0x7, 0x4, 0x3f}, {0x8000, 0x1f, 0xff, 0x8}]}) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000d80)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000dc0)={@mcast1={0xff, 0x1, [], 0x1}, 0x401, 0x3, 0x2, 0x1, 0x3, 0x9, 0x4}, &(0x7f0000000e00)=0x20) write$P9_RLOCK(r0, &(0x7f0000000e40)={0x8, 0x35, 0x1, 0x2}, 0x8) get_mempolicy(&(0x7f0000000e80), &(0x7f0000000ec0), 0x69fa, &(0x7f0000ffb000/0x4000)=nil, 0x4) ioctl$EVIOCGPHYS(r6, 0x80404507, &(0x7f0000000f00)=""/49) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000f40)={0x3, 0x1, {0xffffffffffffffff, 0x3, 0x6, 0x0, 0x2}}) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000fc0)) getpeername$packet(r0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001040)=0x14) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000010c0)={0x7, &(0x7f0000001080)=[{0x100, 0x7, 0xff, 0xd8f6}, {0x8, 0x60000000000000, 0x100, 0x20}, {0x8, 0x10001, 0x0, 0x6}, {0x5, 0x9, 0x20, 0x100}, {0x1f, 0x5, 0x4, 0x5c}, {0x1, 0x8, 0x7ff, 0x7c37}, {0x1, 0x3f, 0x1, 0xeadd}]}, 0x10) [ 115.520888] IPVS: ftp: loaded support on port[0] = 21 [ 115.545661] IPVS: ftp: loaded support on port[0] = 21 [ 115.568307] IPVS: ftp: loaded support on port[0] = 21 [ 115.568889] IPVS: ftp: loaded support on port[0] = 21 [ 115.604328] IPVS: ftp: loaded support on port[0] = 21 [ 115.610454] IPVS: ftp: loaded support on port[0] = 21 [ 115.613842] IPVS: ftp: loaded support on port[0] = 21 [ 115.639489] IPVS: ftp: loaded support on port[0] = 21 [ 117.662215] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.668831] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.714317] device bridge_slave_0 entered promiscuous mode [ 117.863642] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.870110] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.886879] device bridge_slave_0 entered promiscuous mode [ 117.896158] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.902600] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.911487] device bridge_slave_1 entered promiscuous mode [ 117.928182] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.934589] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.943838] device bridge_slave_0 entered promiscuous mode [ 117.953654] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.960075] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.969601] device bridge_slave_0 entered promiscuous mode [ 117.979906] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.987908] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.014294] device bridge_slave_0 entered promiscuous mode [ 118.029449] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.035855] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.043739] device bridge_slave_1 entered promiscuous mode [ 118.052349] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.058827] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.068280] device bridge_slave_0 entered promiscuous mode [ 118.077914] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 118.085690] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.092095] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.119956] device bridge_slave_0 entered promiscuous mode [ 118.135513] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.141984] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.163478] device bridge_slave_1 entered promiscuous mode [ 118.171900] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.179058] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.186438] device bridge_slave_1 entered promiscuous mode [ 118.193566] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.199978] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.209343] device bridge_slave_0 entered promiscuous mode [ 118.218616] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 118.226552] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.232961] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.255239] device bridge_slave_1 entered promiscuous mode [ 118.271788] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 118.280515] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 118.289131] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.295537] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.320961] device bridge_slave_1 entered promiscuous mode [ 118.334985] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.341432] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.361266] device bridge_slave_1 entered promiscuous mode [ 118.368102] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 118.388581] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 118.399790] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 118.407728] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.414147] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.439559] device bridge_slave_1 entered promiscuous mode [ 118.467485] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 118.483550] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 118.502712] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 118.510407] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 118.551375] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 118.571206] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 118.598519] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 118.617993] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 118.635796] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 118.763296] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 118.799630] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 118.815961] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 118.923835] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 118.937429] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 118.975074] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 118.987760] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 119.068879] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 119.078510] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 119.100249] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 119.116834] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 119.143054] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 119.212092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 119.219136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.237193] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 119.252814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 119.259794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.281414] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 119.290499] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 119.299596] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 119.307330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.335488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.362363] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 119.371933] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 119.380090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.394401] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 119.403197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.418804] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 119.426238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.474641] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 119.484490] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 119.491416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.517012] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 119.540845] team0: Port device team_slave_0 added [ 119.551590] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 119.559658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.569706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 119.579295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.635567] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 119.642706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.663781] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 119.683819] team0: Port device team_slave_1 added [ 119.727701] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 119.734924] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 119.743615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.753731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.789091] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 119.807284] team0: Port device team_slave_0 added [ 119.873468] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 119.896751] team0: Port device team_slave_0 added [ 119.915807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.947723] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 119.968454] team0: Port device team_slave_0 added [ 119.982606] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 119.996488] team0: Port device team_slave_0 added [ 120.005439] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 120.017599] team0: Port device team_slave_1 added [ 120.036458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.047657] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 120.060966] team0: Port device team_slave_0 added [ 120.080896] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 120.100884] team0: Port device team_slave_1 added [ 120.122655] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 120.139260] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 120.164219] team0: Port device team_slave_1 added [ 120.173274] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 120.189501] team0: Port device team_slave_0 added [ 120.196339] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 120.207627] team0: Port device team_slave_1 added [ 120.216081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.228987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.238496] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 120.251601] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 120.260643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 120.268271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.278211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.287960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.305804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.321522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.331494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.341520] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 120.348954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.359259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.369578] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 120.378683] team0: Port device team_slave_1 added [ 120.385730] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 120.394574] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 120.401720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.409794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.425278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.433851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.443748] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 120.450686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.459313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.476853] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 120.488750] team0: Port device team_slave_0 added [ 120.495741] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 120.503711] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 120.512563] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 120.521135] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 120.542005] team0: Port device team_slave_1 added [ 120.556242] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 120.564909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.590937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.620829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.633448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.644754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.652589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.660720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.668638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.678264] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 120.686948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.695918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.705895] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 120.719772] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 120.730284] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 120.742105] team0: Port device team_slave_1 added [ 120.754213] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 120.761397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.781631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.809608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.828701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.836806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.845362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.858835] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 120.870540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.879357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.890154] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 120.897479] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 120.916927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 120.926912] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 120.950908] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 120.958386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.972750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.013261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.041638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.056527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.066257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.073764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.081640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.089397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.097301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.110889] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 121.121588] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 121.142979] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 121.152241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.162392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.180831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.200979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.213687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.226475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.240571] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 121.255887] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 121.265835] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 121.281848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.312128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.345549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.377598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.390095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.397974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.414267] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 121.432860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.457523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.490758] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 121.498706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.532944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.217628] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.224373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.233092] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.239517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.247925] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 122.287339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.381915] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.388340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.395081] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.401460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.409115] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 122.418941] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.425347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.432115] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.438615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.447568] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 122.576476] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.582906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.589645] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.596153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.608122] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 122.754510] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.760954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.767692] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.774116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.820472] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 122.961764] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.968195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.974882] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.981287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.995884] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 123.012355] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.018768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.025460] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.031868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.074748] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 123.084162] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.090592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.097289] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.103697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.122174] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 123.295470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.307701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.344633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.363617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.375796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.383011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.390552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.736959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.829186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.851661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.991638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.105202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.138490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.205537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.232689] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 128.294226] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 128.350379] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 128.397230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.543657] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 128.614350] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 128.634099] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 128.690830] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 128.697801] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 128.704148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.722198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.755574] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 128.762956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.777199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.834847] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 128.935284] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 128.942736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.951567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.084833] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 129.091324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.099887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.133419] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 129.142092] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 129.150156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.167610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.207782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.232360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.249812] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.266592] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.289575] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 129.296117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.305769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.421426] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 129.427678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.439648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.536155] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.643455] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.683359] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.714455] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.774167] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.963143] 8021q: adding VLAN 0 to HW filter on device team0 03:41:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x20000003, &(0x7f0000000140)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bridge\x00', 0x10) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f0000000180), 0xa00004000000002) 03:41:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1, &(0x7f0000000040)="025cc83d6d345f8f762070") inotify_init1(0x7fffe) fcntl$getownex(r0, 0x40b, &(0x7f000045fff8)) [ 132.401314] Unknown ioctl 1079006226 [ 132.439739] Unknown ioctl 45313 03:41:04 executing program 3: ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000040)={0x346, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000d00)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000d40)=0x10) [ 132.515842] Unknown ioctl 1079006226 [ 132.525911] Unknown ioctl 45313 03:41:04 executing program 5: r0 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000f95000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x3ffffd, 0x0) r2 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) inotify_rm_watch(r1, r2) recvmsg(r0, &(0x7f0000f95fd7)={&(0x7f0000f98ff0)=@ax25, 0x10, &(0x7f0000f98000), 0x0, &(0x7f0000f91000)}, 0x0) 03:41:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000140)=ANY=[@ANYBLOB="0479f566635d1b5d05556a010f3d4f8138ca2f629f22d1ecc0865d241d76155a307c361f5f5e6a36d995e43eaa08492a6cfd5daf2aba890f145809d038d5ac59d433f4613d38feb3b9efad4f4826c3dda8b154c3229408916c588a52aa66330601dbe998f525ada78cde00000000000000"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = dup3(r2, r2, 0x80000) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000040)) mkdirat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x1ff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:41:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xb0, 0xb0, 0xe0, [@quota={'quota\x00', 0x18, {{0x30}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1e8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r1) r2 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f00000002c0)={0x3, 0x8000, 0x0, 0x6b8, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000340)={r3, 0x3}, &(0x7f0000000380)=0x8) 03:41:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000280)="00010000002f000066000002c9030000ec000000010000000200000000000000002000000020000004000000090000006e5fbe5a0000ffff53efc2359ee4339490438f80a81451999f8943335ebba66aac0165b3fe468037aebc", 0x5a, 0x400}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00']) r0 = socket$kcm(0x29, 0x7, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1, r2}) 03:41:04 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/105, 0x69) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000100)='cpu.weight\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x6, 0x4, 0x4, 0x8000000000009, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) 03:41:04 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet(0x2, 0x3, 0x800000800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x6}, 0x2c) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000080)={@dev, @local, @broadcast}, &(0x7f0000000140)=0xc) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x10000, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000180)=""/190) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) pread64(r0, &(0x7f00000002c0)=""/3, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x8, 0x4) [ 132.843628] EXT4-fs (loop2): Can't read superblock on 2nd try [ 132.908418] EXT4-fs (loop2): Can't read superblock on 2nd try 03:41:05 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fremovexattr(r0, &(0x7f0000000000)=@random={'security.', 'vmnet1.@(GPL+system{#\x00'}) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000380)=""/4096) 03:41:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345e8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="0a0775b0d5e36eddaa1e6ea64aa8e1c9", 0x10) r2 = accept4(r1, 0x0, &(0x7f00000000c0), 0x0) sendmmsg(r2, &(0x7f0000009500)=[{{0x0, 0x0, &(0x7f0000007180)=[{&(0x7f0000006f00)="4f1bbd63c7164e8d79024e4f7c7f1fe8d429c321c57d93d4babf9f0f42ff73f12e", 0x21}], 0x1, &(0x7f00000071c0)}}, {{&(0x7f0000007400)=@ethernet={0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80, &(0x7f0000008980), 0x0, &(0x7f0000000240)}}], 0x2, 0x0) r3 = memfd_create(&(0x7f0000000100)='xcbc(aes-asm)\x00', 0x1) write$P9_RMKDIR(r3, &(0x7f0000000180)={0x14, 0x49, 0x1, {0x20, 0x3, 0x7}}, 0x14) 03:41:05 executing program 7: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x200) mmap(&(0x7f0000812000/0x3000)=nil, 0x3000, 0x1, 0x1010, r0, 0x0) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f0000000100)) r1 = shmget$private(0x0, 0x2000, 0x1800, &(0x7f000093c000/0x2000)=nil) getrandom(&(0x7f0000000140)=""/50, 0x32, 0x1) shmctl$SHM_INFO(r1, 0xe, &(0x7f00000003c0)=""/136) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000480)) remap_file_pages(&(0x7f00001a8000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffff7ffffffffa) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000100)}}, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'lo\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4028050}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="70010000", @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf250000000008000100ae9f09d95bcdbf33229b", @ANYRES32=r3, @ANYBLOB="540102003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r4, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x4}, 0x4048004) read(r0, &(0x7f0000000340)=""/15, 0xf) 03:41:05 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs(r0, &(0x7f0000000180)='net\x00') r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000440)={{0x0, 0x3000, 0xf, 0x1f, 0x8, 0xffffffff, 0x1f, 0x1, 0x5, 0x8, 0xffffffff, 0x8}, {0x6000, 0xd000, 0xd, 0x1, 0x8, 0x0, 0x5, 0x101, 0xffffffffffffff7f, 0x4, 0x7, 0x3}, {0x0, 0xf004, 0x19, 0xfa, 0x6, 0x7, 0x10000, 0x3ff, 0x3, 0x1, 0x9, 0x5}, {0x100000, 0x6000, 0x4, 0x3, 0x4, 0x6bcfda0000000000, 0xc1, 0x1, 0x6, 0x81, 0xfffffffffffffff9, 0x5}, {0xf000, 0x5000, 0xe, 0x1, 0x1, 0x2, 0x0, 0x7fff, 0x5, 0x0, 0xd7d, 0xeecf}, {0x4000, 0x4, 0xf, 0x1, 0x2, 0x3, 0x1, 0x9, 0x3, 0x8, 0xf2, 0x200}, {0x7005, 0x100000, 0xb, 0x200, 0x9, 0xfffffffffffffffa, 0x2, 0x7b5, 0x1f, 0x1, 0xde, 0x400}, {0x7000, 0x0, 0x9, 0x7, 0xf3f7, 0xfd4, 0x7, 0xfffffffffffffeff, 0xd2e, 0x3ff, 0x4, 0xec12}, {0x105000, 0xf000}, {0x0, 0x3000}, 0x10000, 0x0, 0x5000, 0x91, 0x1, 0x3000, 0x11d000, [0x7, 0xb7, 0x7ff, 0x5]}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) ftruncate(r2, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a00)}}, 0x20) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000002c0)="80", 0x1}]) [ 133.216306] FAT-fs (loop3): Directory bread(block 128) failed [ 133.228780] FAT-fs (loop3): Directory bread(block 129) failed [ 133.241686] FAT-fs (loop3): Directory bread(block 130) failed [ 133.248420] FAT-fs (loop3): Directory bread(block 131) failed [ 133.254657] FAT-fs (loop3): Directory bread(block 132) failed [ 133.261516] FAT-fs (loop3): Directory bread(block 133) failed [ 133.267567] FAT-fs (loop3): Directory bread(block 134) failed [ 133.273737] FAT-fs (loop3): Directory bread(block 135) failed [ 133.280398] FAT-fs (loop3): Directory bread(block 136) failed [ 133.286414] FAT-fs (loop3): Directory bread(block 137) failed [ 133.306652] attempt to access beyond end of device [ 133.311963] loop3: rw=2049, want=310, limit=128 [ 133.316872] Buffer I/O error on dev loop3, logical block 309, lost async page write [ 133.324789] attempt to access beyond end of device [ 133.331047] loop3: rw=2049, want=311, limit=128 [ 133.335814] Buffer I/O error on dev loop3, logical block 310, lost async page write [ 133.344680] attempt to access beyond end of device [ 133.349712] loop3: rw=2049, want=312, limit=128 [ 133.354435] Buffer I/O error on dev loop3, logical block 311, lost async page write [ 133.362375] attempt to access beyond end of device [ 133.367415] loop3: rw=2049, want=313, limit=128 [ 133.372188] Buffer I/O error on dev loop3, logical block 312, lost async page write [ 133.380158] attempt to access beyond end of device [ 133.385178] loop3: rw=2049, want=326, limit=128 [ 133.389908] Buffer I/O error on dev loop3, logical block 325, lost async page write [ 133.400933] attempt to access beyond end of device [ 133.405986] loop3: rw=0, want=310, limit=128 [ 133.410465] Buffer I/O error on dev loop3, logical block 309, async page read [ 133.417813] attempt to access beyond end of device [ 133.422814] loop3: rw=0, want=311, limit=128 [ 133.427278] Buffer I/O error on dev loop3, logical block 310, async page read [ 133.434632] attempt to access beyond end of device [ 133.439600] loop3: rw=0, want=312, limit=128 [ 133.444227] Buffer I/O error on dev loop3, logical block 311, async page read [ 133.451601] attempt to access beyond end of device [ 133.456592] loop3: rw=0, want=313, limit=128 [ 133.461114] Buffer I/O error on dev loop3, logical block 312, async page read [ 133.468515] attempt to access beyond end of device [ 133.473682] loop3: rw=0, want=326, limit=128 [ 133.478140] Buffer I/O error on dev loop3, logical block 325, async page read [ 133.495673] attempt to access beyond end of device [ 133.500744] loop3: rw=2049, want=330, limit=128 [ 134.008256] mmap: syz-executor7 (6754) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 03:41:06 executing program 1: r0 = semget$private(0x0, 0x5, 0x100) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x8, 0x4) semctl$GETPID(r0, 0x4aba7d9c88074f97, 0xb, &(0x7f00000000c0)=""/6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)={r2, 0xe2, "4691ff17e807d27161dfc771888560d2a282061ec30bd30a4ee238b006472e95cc417dda9c6c6f480b9464541b3bb3da09d0637181f20bcf83c00bdf57c743a8dba1532848c883e1c1e31516387d585f6bb0bcacf1ac280ebdfe130426e51a7262b444b13bee949cce99ef9b8a3b7ce314651f0fdd7dbf309c2a50e2ac46ceb4ad38eeb7bd7c478c934b25500a599ba7a64548a198511d51afe6202cce77ed20f19eb3d8f68eb63c6696a50bde75732014272525d7ff15e46b21e55ca0d236fe63d5225f2dbdfe280f770b0969519e129f4ad3780e2998f90c69d289dc80e105653b"}, &(0x7f0000000240)=0xea) 03:41:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clock_nanosleep(0x8, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000003c00)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000040)={[0x0, 0x2000], 0xffffffff, 0x4, 0x2236}) tkill(r1, 0x1000000000016) 03:41:06 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fremovexattr(r0, &(0x7f0000000000)=@random={'security.', 'vmnet1.@(GPL+system{#\x00'}) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000380)=""/4096) 03:41:06 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) read(r0, &(0x7f0000000600)=""/109, 0x6d) socketpair(0x2, 0x804, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000740)={'nat\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) fsync(r0) r2 = eventfd2(0xfffffeffffffff43, 0xfffffffffffffffe) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000100)={0x0, 0xffffffffffffff9c}) connect$nfc_llcp(r1, &(0x7f0000000840)={0x27, 0x0, 0x2, 0x0, 0x2, 0xfffffffffffffffd, "03c0b7fd38c2958c482002735162c70a3b450d31896f232f33939f125064db11521ed4c44af0b6289bdfb1ad7c4ebcdab36957f24d2a68317ebd74434bc696", 0xc}, 0x60) close(r2) pwritev(r0, &(0x7f0000000500), 0x0, 0x0) 03:41:06 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs(r0, &(0x7f0000000180)='net\x00') r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000440)={{0x0, 0x3000, 0xf, 0x1f, 0x8, 0xffffffff, 0x1f, 0x1, 0x5, 0x8, 0xffffffff, 0x8}, {0x6000, 0xd000, 0xd, 0x1, 0x8, 0x0, 0x5, 0x101, 0xffffffffffffff7f, 0x4, 0x7, 0x3}, {0x0, 0xf004, 0x19, 0xfa, 0x6, 0x7, 0x10000, 0x3ff, 0x3, 0x1, 0x9, 0x5}, {0x100000, 0x6000, 0x4, 0x3, 0x4, 0x6bcfda0000000000, 0xc1, 0x1, 0x6, 0x81, 0xfffffffffffffff9, 0x5}, {0xf000, 0x5000, 0xe, 0x1, 0x1, 0x2, 0x0, 0x7fff, 0x5, 0x0, 0xd7d, 0xeecf}, {0x4000, 0x4, 0xf, 0x1, 0x2, 0x3, 0x1, 0x9, 0x3, 0x8, 0xf2, 0x200}, {0x7005, 0x100000, 0xb, 0x200, 0x9, 0xfffffffffffffffa, 0x2, 0x7b5, 0x1f, 0x1, 0xde, 0x400}, {0x7000, 0x0, 0x9, 0x7, 0xf3f7, 0xfd4, 0x7, 0xfffffffffffffeff, 0xd2e, 0x3ff, 0x4, 0xec12}, {0x105000, 0xf000}, {0x0, 0x3000}, 0x10000, 0x0, 0x5000, 0x91, 0x1, 0x3000, 0x11d000, [0x7, 0xb7, 0x7ff, 0x5]}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) ftruncate(r2, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a00)}}, 0x20) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000002c0)="80", 0x1}]) 03:41:06 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/219) 03:41:06 executing program 6: ioctl$TCSETAF(0xffffffffffffffff, 0x5433, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffa8a}) 03:41:06 executing program 6: r0 = socket(0x10, 0x3, 0x0) socketpair(0x1b, 0x800, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000080)=0xec19) sendmsg$nl_route(r0, &(0x7f0000002f00)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002dc0)=@ipv6_newroute={0x30, 0x18, 0x401, 0x0, 0x0, {0xa}, [@RTA_MULTIPATH={0xc, 0x9, {0xd48}}, @RTA_OIF={0x8, 0x4}]}, 0x30}, 0x1}, 0x0) getpeername$packet(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000980)=0x14) sendto$packet(r1, &(0x7f00000001c0)="e4d6c44d7abeaff9f4bd638db37c1798b3eb2a7c24e5dc519e1fb086be5a1da725d249c1b0c2c3b9ed3e8352eed5ee53b4cd93c9c9dffcbe5bc3f6c7ae08c9483c0f4dd2476279c238b78e07df90824d87fc3a6dd8e30ea4e65ee3759b0fdc928acb94e1d1817479d9e15bb775e033bdeff0a154575fb11daaa25076fb307608b3a4399dd6a6ccb6ccacdd9dff0b409902c53bcb4fae4d1f326da1fe2cb69e2a1fd5d4efcfb4b127d6207390d429f6ae371eb66ad8d275de155d5a6cab0169d2435c7c7c18895c9e9b57d6c5c2e2a3f23a68440a427792e6d74c11b6da420424edaaa6bdcdca54f5a76c7ddfdbd240ba950621", 0xf3, 0x44000, &(0x7f00000009c0)={0x11, 0x1d, r3, 0x1, 0x8000, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f00000000c0)=""/217) 03:41:06 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000ffe)='$\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x26, "ff5924275633d5948cafa4893ce952e5367e6761c8919322a03c01c13a75effe93c72a11cf97"}, &(0x7f00000000c0)=0x2e) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={r2, 0xb35, 0x2, [0xb6e, 0x7fff]}, 0xc) r3 = dup2(r0, r1) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000c86000), &(0x7f0000000040)=0x74) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000000)={0x3, 0x27dac14a, 0x737, 0x8}) 03:41:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) arch_prctl(0x1003, &(0x7f0000001640)="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") ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000016000/0x3000)=nil, 0x3000, 0x0, 0x8032, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x4044040, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000100)={0x1f, {0x65, 0x7, 0x0, 0xffffffffffffff1d, 0x9, 0x3}, 0x4}, 0xa) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) sendmmsg(r1, &(0x7f0000001180)=[{{&(0x7f00000001c0)=@sco={0x1f}, 0x80, &(0x7f0000000840)=[{&(0x7f0000001600)="da", 0x1}], 0x1, &(0x7f0000003040)}}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f00000000c0)={0x2}, 0x6) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast2=0xe0000002}, 0xfe1d) close(r1) [ 134.246789] FAT-fs (loop3): Directory bread(block 128) failed [ 134.279251] FAT-fs (loop3): Directory bread(block 129) failed 03:41:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0x8208ae63) [ 134.308935] FAT-fs (loop3): Directory bread(block 130) failed [ 134.334566] FAT-fs (loop3): Directory bread(block 131) failed 03:41:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffe, 0x3) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x10, 0x6) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000240)=0x10002) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001580)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)=@getqdisc={0x30, 0x26, 0xc02, 0x70bd26, 0x25dfdbfb, {0x0, r1, {0xfff3, 0xfff2}, {0xffef, 0x1f}, {0x8}}, [{0x4, 0xa}, {0x4, 0xa}, {0x4, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c000}, 0x90) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 134.357175] FAT-fs (loop3): Directory bread(block 132) failed [ 134.379185] FAT-fs (loop3): Directory bread(block 133) failed 03:41:06 executing program 2: capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0xfc, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 03:41:06 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in=@multicast1=0xe0000001, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@multicast2=0xe0000002}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}, 0x1}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="0212000002f7ffffff00e8000000006a"], 0x10}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000f00), 0x400000000000308, 0x10000, &(0x7f0000001000)={0x77359400}) [ 134.412634] FAT-fs (loop3): Directory bread(block 134) failed [ 134.436145] FAT-fs (loop3): Directory bread(block 135) failed [ 134.476823] FAT-fs (loop3): Directory bread(block 136) failed [ 134.501202] capability: warning: `syz-executor2' uses deprecated v2 capabilities in a way that may be insecure [ 134.510786] FAT-fs (loop3): Directory bread(block 137) failed [ 134.584144] ucma_write: process 269 (syz-executor2) changed security contexts after opening file descriptor, this is not allowed. [ 134.617651] attempt to access beyond end of device [ 134.622716] loop3: rw=2049, want=310, limit=128 [ 134.639213] attempt to access beyond end of device [ 134.644346] loop3: rw=2049, want=311, limit=128 [ 134.649678] attempt to access beyond end of device [ 134.654824] loop3: rw=2049, want=312, limit=128 [ 134.660299] attempt to access beyond end of device [ 134.665360] loop3: rw=2049, want=313, limit=128 [ 134.674724] attempt to access beyond end of device [ 134.679773] loop3: rw=2049, want=326, limit=128 03:41:06 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x32871b77405a664e) getpeername(r0, &(0x7f0000000500)=@hci, &(0x7f0000000580)=0x80) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c, 0x80800) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xfffffffffffffff7, 0x2000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000480)={0x3ff, 0x0, 0x6, 0x800000000, 0xcc, 0x6}) getsockopt$inet6_dccp_buf(r2, 0x21, 0xcf, &(0x7f0000000300)=""/254, &(0x7f0000000400)=0xfe) r4 = syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x401) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x3, 0x1, &(0x7f0000000100)=""/54, &(0x7f0000000140)=""/178, &(0x7f0000000200)=""/40, 0x6000}) ptrace$getenv(0x4201, r1, 0x4, &(0x7f0000000080)) 03:41:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0xa) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000040)={0x2001, 0x12000, 0x5, 0x6, 0x2}) r2 = socket$inet6(0xa, 0x3, 0x6) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x7, &(0x7f0000000300)={@local={0xfe, 0x80, [], 0xaa}}, &(0x7f0000000340)=0x20) 03:41:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x48f, @loopback={0x0, 0x1}, 0x9}, 0x1c) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000140)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {}, 0x0, {0x2, 0x0, @multicast2=0xe0000002}, 'ip6tnl0\x00'}) close(r3) dup3(r1, r2, 0x0) [ 134.695614] attempt to access beyond end of device [ 134.700678] loop3: rw=0, want=310, limit=128 [ 134.707965] attempt to access beyond end of device [ 134.712999] loop3: rw=0, want=311, limit=128 [ 134.718081] attempt to access beyond end of device [ 134.723107] loop3: rw=0, want=312, limit=128 [ 134.728410] attempt to access beyond end of device [ 134.733433] loop3: rw=0, want=313, limit=128 [ 134.738435] attempt to access beyond end of device [ 134.743470] loop3: rw=0, want=326, limit=128 03:41:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'ns\x00'}, {0x20, 'ns\x00'}, {0x20, 'ns\x00'}, {0x20}], 0xa, "134e8fddc18b0a847a679f1c9d6cb76ce92c28086e1b4e7d16040610877a6f5ab6d331fa362d24525944aaa893ba02305b97856420b042d96d7789356d1b094816947141eaab0045a0ebb5cbc0d06e116ece547616f7deeac2cd42a83a4ed807cc7713a6c730d19b163cb550a790ec264afd30bbc1788490f1c2f8835109836973dc061511030df611699938554ac29c051498"}, 0xab) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') exit(0x5) getdents64(r1, &(0x7f0000000000)=""/121, 0x79) getdents64(r1, &(0x7f0000000340)=""/57, 0x39) 03:41:07 executing program 1: r0 = socket$inet6(0xa, 0x7, 0xfffffffffffffffc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000240)={0xbf, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40505331, &(0x7f0000000140)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) 03:41:07 executing program 6: socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x808000000400000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f00000003c0)={0x8, 0x6, 0x5}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'bridge_slave_0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}}) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0xf5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl(r2, 0x739, &(0x7f0000000100)="c619262c8523bf0128f66f0e6b921e9c90e52eeff9d9615481e6d5914e27d95e14e2848db50000000000000000000000000000") bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000000000000950000000000000000000000000000000000000000"], &(0x7f00000002c0)="4750510064b83ac17203ce473b85bcc4fd8b53c5cb09ebf900aaa966a6acd9a580c175599e1953aca6e6911b8a2d68da9280125247592cf30b26047800e27f8729be99437a2b871ae7696cd9178d5e5e411475b7dd9221ef86dafa022fae1c4cb4216db9b33211c0eee2f66c3c329cc7b927469af4da7a69757594053a064b39610593de6de0f711d288", 0x1, 0xfb, &(0x7f0000000140)=""/251}, 0x48) 03:41:07 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='/dev/input/event#\x00', 0x1) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) r2 = add_key(&(0x7f0000000340)='ceph\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff9) request_key(&(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000300)='\x00', r2) syz_emit_ethernet(0xb6, &(0x7f0000000080)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipx={0x8137, {0xffff, 0xa8, 0x53cf, 0x1, {@current, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x4}, {@random=0xf8d, @random="b25a43ec0578", 0x2}, "2f3d728f0075f631f6c9370eec0a308505733229bc3d4d56f66b5f89c6935050b5134ea87a1ae1770eaa47c28f4417d6b835b8bff2a7df532f03f4615239f7e63334e9235fec12d4127aefffe8198aee182aa016e8d792baa516d30f9a10fc7c09e0a9cd55aff65fa24adbd3c9e2e02b54a3972ba31d51591d940874a475ac1180ca464c7e697b112943"}}}}, &(0x7f0000000000)={0x0, 0x4, [0xa25, 0xd0a, 0xe67, 0xe90]}) r3 = dup(r0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000040)) ioctl$TIOCSBRK(r3, 0x40044590) flock(r1, 0x0) 03:41:07 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000000)=0x181) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket(0x10, 0x803, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x3, r3}) sendto(r2, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000780)=""/199, 0xc7, 0x0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) recvmmsg(r2, &(0x7f00000005c0)=[{{&(0x7f0000000480)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002680)=""/4096, 0x1000}], 0x1, &(0x7f0000000300)=""/109, 0x6d}}], 0x1, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002e00)=ANY=[@ANYRES64=r0, @ANYPTR64=&(0x7f0000000000)=ANY=[]]) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[@ANYBLOB="6cf3b68e411467a77f26cf266ca100000000000000002f95ed9c41a8f2abd90a0cad1b1af4"]) 03:41:07 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs(r0, &(0x7f0000000180)='net\x00') r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000440)={{0x0, 0x3000, 0xf, 0x1f, 0x8, 0xffffffff, 0x1f, 0x1, 0x5, 0x8, 0xffffffff, 0x8}, {0x6000, 0xd000, 0xd, 0x1, 0x8, 0x0, 0x5, 0x101, 0xffffffffffffff7f, 0x4, 0x7, 0x3}, {0x0, 0xf004, 0x19, 0xfa, 0x6, 0x7, 0x10000, 0x3ff, 0x3, 0x1, 0x9, 0x5}, {0x100000, 0x6000, 0x4, 0x3, 0x4, 0x6bcfda0000000000, 0xc1, 0x1, 0x6, 0x81, 0xfffffffffffffff9, 0x5}, {0xf000, 0x5000, 0xe, 0x1, 0x1, 0x2, 0x0, 0x7fff, 0x5, 0x0, 0xd7d, 0xeecf}, {0x4000, 0x4, 0xf, 0x1, 0x2, 0x3, 0x1, 0x9, 0x3, 0x8, 0xf2, 0x200}, {0x7005, 0x100000, 0xb, 0x200, 0x9, 0xfffffffffffffffa, 0x2, 0x7b5, 0x1f, 0x1, 0xde, 0x400}, {0x7000, 0x0, 0x9, 0x7, 0xf3f7, 0xfd4, 0x7, 0xfffffffffffffeff, 0xd2e, 0x3ff, 0x4, 0xec12}, {0x105000, 0xf000}, {0x0, 0x3000}, 0x10000, 0x0, 0x5000, 0x91, 0x1, 0x3000, 0x11d000, [0x7, 0xb7, 0x7ff, 0x5]}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) ftruncate(r2, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a00)}}, 0x20) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000002c0)="80", 0x1}]) 03:41:07 executing program 7: r0 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x13) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000080)=0x9fb) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$inet(0x2, 0x807, 0x100000001, &(0x7f0000000140)) setsockopt$inet_mreqsrc(r2, 0x0, 0x80000000027, &(0x7f000001b000)={@multicast1=0xe0000001, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000200)={0x100000001, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x6, 0x200040) 03:41:07 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1ff, 0x0) write$P9_RLOCK(r0, &(0x7f0000000040)={0x8, 0x35, 0x2}, 0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85512, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000040), 0xfd1e}) [ 135.102380] FAT-fs (loop3): Directory bread(block 128) failed [ 135.118149] FAT-fs (loop3): Directory bread(block 129) failed [ 135.124591] FAT-fs (loop3): Directory bread(block 130) failed [ 135.139402] FAT-fs (loop3): Directory bread(block 131) failed [ 135.146194] FAT-fs (loop3): Directory bread(block 132) failed 03:41:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001b40)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@rand_addr}}, &(0x7f0000001c40)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001c80)={'vcan0\x00', 0x0}) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f00000002c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001d80)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0}, &(0x7f0000001f80)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003cc0)={'team_slave_0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000003d00)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@local}}, &(0x7f0000003e00)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000003e40)={@broadcast, @dev, 0x0}, &(0x7f0000003e80)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000004680)={@empty, 0x0}, &(0x7f00000046c0)=0x14) getsockname$packet(0xffffffffffffff9c, &(0x7f0000004700)={0x0, 0x0, 0x0}, &(0x7f0000004740)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000004d00)={@local, 0x0}, &(0x7f0000004d40)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004d80)={{{@in=@remote, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000004e80)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000004ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000004f00)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000004f40)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000005040)=0xe8) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000005800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f00000057c0)={&(0x7f0000005080)={0x730, r3, 0x605, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x1c8, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x1c, 0x4, [{0x6, 0x100000, 0x8, 0x7}, {0x3, 0x3f, 0x8, 0x3}, {0x0, 0x3, 0x7fffffff, 0xf7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r6}}, {0x8, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3800000000}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x8}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r7}, {0x7c, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x168, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x2}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r11}, {0x1d0, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r12}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xffffffffffff3adc}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0xc, 0x4, [{0x5, 0x4, 0x7, 0x7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x100}}}]}}, {{0x8, 0x1, r13}, {0x178, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r14}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r15}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x3c, 0x4, [{0x4529, 0x5, 0x8, 0x4}, {0xe2, 0x98, 0x2}, {0x5, 0x1, 0x80000000, 0x7}, {0x10001, 0x0, 0x1, 0x3}, {0x4, 0xff, 0x5, 0x100000000}, {0x8, 0x8, 0x1, 0x8000}, {0x8, 0x0, 0x7fff}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r16}}}]}}]}, 0x730}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000000)) r17 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0xfd, 0x80) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000009c0)=0x14) ioctl$TUNSETIFINDEX(r17, 0x400454da, &(0x7f0000000a00)=r18) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="0a35cdbb345efbf18e2a03815ff68d070775b0908602dfc55fa2a2c9d548b2e5b3be0ced5c54db3dada3e83306e6fd1d6b8badab01da91ca7c00afa5384970abe6c8f5e61dcd3595a3f855360964f7086801704a2bb75bab2706b78bbef27a3605fb743d914d0e356fbbc762e1285aa8c9a369006eba9512550d8bdfa6878a7bbe85d504b03e36af6de4cdc7a9eca812cd5926dc2acb92ffe8", 0xffffffffffffffe3) r19 = accept$alg(r1, 0x0, 0x0) sendmmsg(r19, &(0x7f00000031c0)=[{{&(0x7f0000000140)=@can={0x1d}, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="1436430d48d97d3a32f6d8a3b38a641d2645315dde43a6bd599b18781b751695b1a8e759c119cf225c14fa707eba93bedb51b627eabdca612b078440427bed079dcfcc5fb24e11f19e50a4f3e3e2db8a3e9a1cebc4811c20f1e9425968cfa6a30aa224e202ee3bbea69d6a2611bad64f", 0x70}], 0x1, &(0x7f0000003640)=ANY=[]}}], 0x1, 0x0) recvmsg(r19, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/112, 0x200034b0}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0) 03:41:07 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={0x0, r0, 0x9, 0x1}, 0x14) mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f00000000c0)={&(0x7f000000a000)={0x1d}, 0x10, &(0x7f0000000ff0)={&(0x7f0000000040)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b55d00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0x1, 0x0, 0x0, 0x3}, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0xafb, 0x10001}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={r3, 0x51, 0x8}, 0x8) [ 135.155148] FAT-fs (loop3): Directory bread(block 133) failed [ 135.175639] FAT-fs (loop3): Directory bread(block 134) failed 03:41:07 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000400)='net/ip_tables_matches\x00') r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r2) 03:41:07 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x6, 0x800, 0x6, 0x4, 0x1, @random="f8bf88df5b1b", @remote={0xac, 0x14, 0x14, 0xbb}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @rand_addr=0xac1414bb}}}}, &(0x7f0000000100)) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x100, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000140)=0x4000) [ 135.214808] FAT-fs (loop3): Directory bread(block 135) failed [ 135.252709] FAT-fs (loop3): Directory bread(block 136) failed 03:41:07 executing program 6: syz_mount_image$reiserfs(&(0x7f0000000100)='reiserfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000012c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="626c6f636b2d616c6c6f6361746f723d6e6f626f726465722c626c6f616c6c6f6361746f723d626f726465722c646174613dbb3732f474e277726974656261636b2c6a6465763d2e2f55ee3b66696c65302c7265706c61796f6e6c792c726573697a657153f1de4eacc80100b547a09fed47bf8a2a9126a9c4d89456c089abd1681eb2e1f3ced896d41b561be7cf0155187974984b3c385ee11c52521e69decf9db135137894e37cf0782b893aeffe345e2f0dee40fc5f801d7020e61c7830b3dcee93531651ea3c55b01ec65f4826969f07ab996a16873a3c0661b70d6be405319f8fd02345dc845bdcdfb763196a818ef70bc0a772"]) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x40c02, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0x60) [ 135.277477] FAT-fs (loop3): Directory bread(block 137) failed 03:41:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = dup(r0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000280)={0x100000001, 0x1d2200000000000, 0x3}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x40, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x94fa) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) fcntl$setown(r3, 0x8, r4) sendfile(r3, r3, &(0x7f0000000080), 0xfffffffffffffff7) tkill(r4, 0x2b) ptrace$pokeuser(0x6, r4, 0x358, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000100)={{0x2, 0x3f}, {0x8, 0x10000}, 0x94d, 0x2, 0xfffffffffffffffe}) mq_timedsend(r5, &(0x7f0000000180)="ec08d04ac95d269ce00481e0f7574d3caaacfc619c36803aa14ae86afffcb5073b36e278941e", 0x26, 0xf67, &(0x7f00000001c0)={0x77359400}) sendfile(r0, r2, &(0x7f0000000240), 0x9) 03:41:07 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2}}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x98) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xa, 0x14, 0x14}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000500)="18", 0x1}], 0x1, &(0x7f0000000640)}, 0x20048845) [ 135.394445] REISERFS warning (device loop6): super-6502 reiserfs_getopt: unknown mount option "bloallocator=border" [ 135.419802] attempt to access beyond end of device [ 135.424868] loop3: rw=2049, want=310, limit=128 [ 135.433335] attempt to access beyond end of device [ 135.438400] loop3: rw=2049, want=311, limit=128 [ 135.445692] attempt to access beyond end of device [ 135.450859] loop3: rw=2049, want=312, limit=128 [ 135.459808] REISERFS warning (device loop6): super-6502 reiserfs_getopt: unknown mount option "bloallocator=border" [ 135.484273] attempt to access beyond end of device [ 135.489414] loop3: rw=2049, want=313, limit=128 [ 135.502590] attempt to access beyond end of device [ 135.507767] loop3: rw=2049, want=326, limit=128 [ 135.534296] attempt to access beyond end of device [ 135.539364] loop3: rw=0, want=310, limit=128 [ 135.551493] attempt to access beyond end of device [ 135.556606] loop3: rw=0, want=311, limit=128 [ 135.561643] attempt to access beyond end of device [ 135.566757] loop3: rw=0, want=312, limit=128 [ 135.571764] attempt to access beyond end of device [ 135.576923] loop3: rw=0, want=313, limit=128 [ 135.582071] attempt to access beyond end of device [ 135.587139] loop3: rw=0, want=326, limit=128 03:41:07 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x121000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f00000000c0)="0a5bf4a5dbc0b4125dcf00037264e7a6e677acd01a26d0c31c"}, 0x10) ioctl(r0, 0x4, &(0x7f0000000140)="295ea0301f16f477673ede24ccbb06dd47e7fdc51356532c9310701903b90b120e714f50d36b301bd61776e7026ba15483aaa71c4e6d4992acb15f7af2b3b43b151e2f53bf108e97a6ea39db1021e58e90a29a018047481aa0692637123ca4589deea6be45a43fbc15bad7ad59ed30fbe66643125c7666bf69ee7bd7ea4531e52cfafd92a782bb8081d4ef34cc3bee047273c5fe8b2d5959181cdb553d1667addc22a77f044bc05d589307a7c02ef0882fec545a0b34ea08f6c456dbd5f0c57d88720c5c3279b4094a4ec62c775c65e88e200034222967dee129") r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) 03:41:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x7, &(0x7f0000000140)="025c26153c02e1981fc170") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x4a, &(0x7f0000000580), 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x4100, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="8fe9788146002e0f53ff0fc7a8000001006564f3a58fc9380122ea8c000000e000660f2015660f388205062dd0c166b8cc008ee0660f38807208", 0x3a}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:41:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x4b564d04]}) r3 = openat(r2, &(0x7f0000000380)='./file0\x00', 0x8000, 0xa8) recvfrom$llc(r3, &(0x7f00000003c0)=""/185, 0xb9, 0x2000, &(0x7f0000000480)={0x1a, 0x306, 0xfffffffffffffff9, 0x80, 0x4, 0x4f}, 0x10) fstat(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000100)='/dev/kvm\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x800000, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=virtio,access=any,dfltuid=', @ANYRESHEX=r4, @ANYBLOB=',dfltuid=', @ANYRESHEX=r5, @ANYBLOB="2c10e4f1662b209e59d6c83ac14808f6282334b2ef0ff8cd219cb713fc5eca97546b3b5d9624f96044bf02f2e8b06936d491c0b8a494826ca9ca87488dd576564d9e413b85247aa8460c68ea9ab0391e577f2f2f5d41cf2b0646fbf050e4b1400eafc1508825b72d5a2f6bc5bbc0b409e4ca088db7898135d5a967ca8230ec4bb7b18014d0dede03ba920b6af4d8f9368b570f25622fd138861b1d21892d16ed680e416ec3dc952527b427033d75cf6abdf75544f27474f630e44eaf9d9fe84831b17e7db8d3e7875320bd7db522797e34f06909d46c3376d14bcde258acca24fa02491ce3ebcfa7a01b08a8fada"]) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x8) ioctl$SCSI_IOCTL_SYNC(r6, 0x4) 03:41:08 executing program 5: pause() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000001c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000480)) mount(&(0x7f00000008c0)='.', &(0x7f00000000c0)='.', &(0x7f0000753000)='mslos\x00', 0x500d, &(0x7f0000000c80)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000000e40)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 03:41:08 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x0) lseek(r0, 0xfffdfffffbfffff8, 0x4) 03:41:08 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070801ddc6bb3e85f1f1fd7ac503ebe17ee3d42a71f5f096ab489928c7a1a9c728301a22b49f46bb32424514747a03e230aef418b08f43cef4d2057ca0b18f549f8b134") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x400, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000280), 0x4) r2 = dup3(r0, r0, 0x80000) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x6, 0x8000) accept4(r0, &(0x7f00000001c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, &(0x7f0000000240)=0x80, 0x80800) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000080)) socket$inet6(0xa, 0x5, 0x100000001) r3 = socket(0x10, 0x7, 0x800000000) write(r3, &(0x7f0000360000)="2400000052001f0014f9f407002c04000a00071008000100ffffffff0800000000000000", 0x24) 03:41:08 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs(r0, &(0x7f0000000180)='net\x00') r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000440)={{0x0, 0x3000, 0xf, 0x1f, 0x8, 0xffffffff, 0x1f, 0x1, 0x5, 0x8, 0xffffffff, 0x8}, {0x6000, 0xd000, 0xd, 0x1, 0x8, 0x0, 0x5, 0x101, 0xffffffffffffff7f, 0x4, 0x7, 0x3}, {0x0, 0xf004, 0x19, 0xfa, 0x6, 0x7, 0x10000, 0x3ff, 0x3, 0x1, 0x9, 0x5}, {0x100000, 0x6000, 0x4, 0x3, 0x4, 0x6bcfda0000000000, 0xc1, 0x1, 0x6, 0x81, 0xfffffffffffffff9, 0x5}, {0xf000, 0x5000, 0xe, 0x1, 0x1, 0x2, 0x0, 0x7fff, 0x5, 0x0, 0xd7d, 0xeecf}, {0x4000, 0x4, 0xf, 0x1, 0x2, 0x3, 0x1, 0x9, 0x3, 0x8, 0xf2, 0x200}, {0x7005, 0x100000, 0xb, 0x200, 0x9, 0xfffffffffffffffa, 0x2, 0x7b5, 0x1f, 0x1, 0xde, 0x400}, {0x7000, 0x0, 0x9, 0x7, 0xf3f7, 0xfd4, 0x7, 0xfffffffffffffeff, 0xd2e, 0x3ff, 0x4, 0xec12}, {0x105000, 0xf000}, {0x0, 0x3000}, 0x10000, 0x0, 0x5000, 0x91, 0x1, 0x3000, 0x11d000, [0x7, 0xb7, 0x7ff, 0x5]}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) ftruncate(r2, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a00)}}, 0x20) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000002c0)="80", 0x1}]) 03:41:08 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ppoll(&(0x7f0000013000)=[{r0}], 0x1, &(0x7f0000001000)={0x77359400}, &(0x7f000000d000), 0x8) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000000)=0x7f) read$eventfd(r0, &(0x7f0000000040), 0x8) 03:41:08 executing program 1: r0 = socket$inet6(0xa, 0x7, 0xfffffffffffffffc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000240)={0xbf, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40505331, &(0x7f0000000140)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) 03:41:08 executing program 6: r0 = socket(0xa, 0x3, 0x7) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a1, &(0x7f0000000140)={'bridge0\x00'}) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) [ 136.205685] FAT-fs (loop3): Directory bread(block 128) failed [ 136.226626] FAT-fs (loop3): Directory bread(block 129) failed [ 136.248817] FAT-fs (loop3): Directory bread(block 130) failed 03:41:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x390, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000071c0)=[{{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000006000)=""/103, 0x67}, {&(0x7f0000006080)=""/160, 0xa0}], 0x2, &(0x7f00000061c0)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000007380)={0x0, 0x1c9c380}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r1}) bind$bt_sco(r3, &(0x7f0000000040)={0x1f, {0x7067, 0x6c9, 0xc3f, 0x9, 0x9, 0x3f}}, 0x8) [ 136.264330] FAT-fs (loop3): Directory bread(block 131) failed [ 136.276143] FAT-fs (loop3): Directory bread(block 132) failed [ 136.283330] FAT-fs (loop3): Directory bread(block 133) failed [ 136.309760] FAT-fs (loop3): Directory bread(block 134) failed 03:41:08 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x400000) write$P9_RSETATTR(r0, &(0x7f0000000080)={0x7, 0x1b, 0x1}, 0x7) r1 = socket(0x15, 0x80005, 0x0) read(r1, &(0x7f0000000180)=""/194, 0xc2) getsockopt(r1, 0x100000114, 0x2711, &(0x7f00000000c0)=""/40, &(0x7f0000000140)=0x28) 03:41:08 executing program 6: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) [ 136.357893] FAT-fs (loop3): Directory bread(block 135) failed [ 136.394512] FAT-fs (loop3): Directory bread(block 136) failed 03:41:08 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300000900000000000000000000000200080008000000a700000000000000020001000000000005000000000002000000e00000010000000000000000000000000000000000000fca010c839f49eab246ff5384e6336e6e0134b5ecfa40af2daab0b3e79d1e"], 0x48}, 0x1}, 0x0) [ 136.409949] FAT-fs (loop3): Directory bread(block 137) failed 03:41:08 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000080)) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x42) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) 03:41:08 executing program 2: rt_sigaction(0x8400000000000007, &(0x7f0000000000)={0x4004cf, {0xffffffbfffbff273}}, &(0x7f0000000040), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x8, 0x44031, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x9, 0x18400) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000380)=0x4) r2 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x20, 0x4d949cc73bb7bbd3) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f00000001c0)=""/239) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000340)) syz_open_procfs(r0, &(0x7f0000000140)="5d72897369f7") [ 136.509996] program syz-executor2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.519359] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 136.526308] attempt to access beyond end of device [ 136.532143] loop3: rw=2049, want=310, limit=128 [ 136.537735] attempt to access beyond end of device [ 136.542779] loop3: rw=2049, want=311, limit=128 [ 136.547712] attempt to access beyond end of device [ 136.552750] loop3: rw=2049, want=312, limit=128 03:41:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)="917ffa5c5f422da7bc49b84684c78526b9229a269c49b611572abda198d9c29f57dca1d1a164195c37195c7aa2c4d50b3920da53901c0635d20daf7a170761e5801fcdb092355b0f203000eb9bac74c32cfaa7a84407b5f98f4eadcf25bbe03e10046be0c57b81920740d5c6a6d71354c3544ef681198abebb9a35a75cef0b9327362b46056a8fc831d452b32895278e3f5d3d49cb3bec40", 0x98, 0xfffffffffffffff9) r2 = add_key(&(0x7f00000002c0)='syzkaller\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000003c0)="a062d66aa5045b4f906922378e438a1f0b695de43a8c6a91e2535524f29dd841d9719d460d6f0b6342a9bc5fd39ffe1655f178ef163e3123070550d5c387033839ae749fbedc645e8835e463426f8dbf800c95f10796355c979de197a928d3916dc1cf10e9cf07268a23d4d5dda704c97fedc51660e9f98351086f91c23fbbe151d46d68f72caac7f71d05ac484f73d93c78c04888ef62fb161e95668577e9862f542a019012e2522a3719c0ffcd08d6a33b634638119115b3cd7f67954eb6993ad8fccec497267881bf72a71db33f", 0xcf, 0xfffffffffffffffd) keyctl$reject(0x13, r1, 0x2, 0x80000000, r2) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x40047211, &(0x7f0000000040)={0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'veth1_to_bridge\x00'}) [ 136.557591] attempt to access beyond end of device [ 136.562618] loop3: rw=2049, want=313, limit=128 [ 136.581894] attempt to access beyond end of device [ 136.586956] loop3: rw=2049, want=326, limit=128 03:41:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000040)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) write$cgroup_type(r1, &(0x7f00000002c0)='threaded\x00', 0x9) [ 136.619647] attempt to access beyond end of device [ 136.624718] loop3: rw=0, want=310, limit=128 [ 136.631428] attempt to access beyond end of device [ 136.636473] loop3: rw=0, want=311, limit=128 [ 136.647770] attempt to access beyond end of device [ 136.652857] loop3: rw=0, want=312, limit=128 [ 136.666242] attempt to access beyond end of device [ 136.672481] loop3: rw=0, want=313, limit=128 [ 136.677914] attempt to access beyond end of device [ 136.682997] loop3: rw=0, want=326, limit=128 [ 136.694510] FAT-fs (loop4): error, invalid access to FAT (entry 0x000006c0) [ 136.702057] FAT-fs (loop4): Filesystem has been set read-only 03:41:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(morus640)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)='\n', 0x1) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x280600) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10200, 0x0, &(0x7f0000ffc000/0x2000)=nil}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)='e', 0x1) [ 136.722921] FAT-fs (loop4): error, invalid access to FAT (entry 0x000006c0) 03:41:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40003f, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r2, &(0x7f0000001380), r1, &(0x7f00000013c0), 0x2, 0x0) mknodat(r0, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) fanotify_init(0x0, 0x0) 03:41:16 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs(r0, &(0x7f0000000180)='net\x00') r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000440)={{0x0, 0x3000, 0xf, 0x1f, 0x8, 0xffffffff, 0x1f, 0x1, 0x5, 0x8, 0xffffffff, 0x8}, {0x6000, 0xd000, 0xd, 0x1, 0x8, 0x0, 0x5, 0x101, 0xffffffffffffff7f, 0x4, 0x7, 0x3}, {0x0, 0xf004, 0x19, 0xfa, 0x6, 0x7, 0x10000, 0x3ff, 0x3, 0x1, 0x9, 0x5}, {0x100000, 0x6000, 0x4, 0x3, 0x4, 0x6bcfda0000000000, 0xc1, 0x1, 0x6, 0x81, 0xfffffffffffffff9, 0x5}, {0xf000, 0x5000, 0xe, 0x1, 0x1, 0x2, 0x0, 0x7fff, 0x5, 0x0, 0xd7d, 0xeecf}, {0x4000, 0x4, 0xf, 0x1, 0x2, 0x3, 0x1, 0x9, 0x3, 0x8, 0xf2, 0x200}, {0x7005, 0x100000, 0xb, 0x200, 0x9, 0xfffffffffffffffa, 0x2, 0x7b5, 0x1f, 0x1, 0xde, 0x400}, {0x7000, 0x0, 0x9, 0x7, 0xf3f7, 0xfd4, 0x7, 0xfffffffffffffeff, 0xd2e, 0x3ff, 0x4, 0xec12}, {0x105000, 0xf000}, {0x0, 0x3000}, 0x10000, 0x0, 0x5000, 0x91, 0x1, 0x3000, 0x11d000, [0x7, 0xb7, 0x7ff, 0x5]}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) ftruncate(r2, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a00)}}, 0x20) socket$inet6(0xa, 0x1000000000002, 0x0) io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000002c0)="80", 0x1}]) 03:41:16 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400000, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x6) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x4800000, &(0x7f0000000200)=0x0) fcntl$setflags(r0, 0x2, 0x1) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) ftruncate(r1, 0x800) io_submit(r2, 0x9, &(0x7f0000000980)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x10000, r1, &(0x7f0000000300)="3d84dd9c10ca328208f6ad9806ab19f3fa078001692988b13d20eab1047fa5e548dc9a9274859305f4097173a635fa8ed6e9b19f40c9276515f2c7ab04cea91be9fb5a6ce36d24578b41f0c3490e811feca336c0c393aee1b2b1a85afd3ace034d74cb6dfd653d5c4957e911bc8ae916f18c30587527fb89b0b25c3417959fe67e91b89d3b72f3a37e7052061be8175c0ef64d7bea3c0788ebfd584c735ed131550406b2fe16f7e4e38f9758a94c5c9b98affe9ee6b8f0a3fd3f851a58903b4eb64ba74207ec2a576adb3d152afcb183f2238448b357d31accb02acd25fd063c89285200205aed2e1a709bf0ed928c403116c657bd", 0xf5, 0x5, 0x0, 0x0, r1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x3ff, r1, &(0x7f0000000240)="a7a9f5bce45cf0f1d31e8078890f3757c1464e9b56f68b94905fb4f7438b7a793654f8987172c121b3e3d14ebf445eb45725c65ff0a8a0c8280c59024428bdeff3f61df5", 0x44, 0x36e8, 0x0, 0x0, r1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xf, 0xe36, r1, &(0x7f0000000480)="cde79ef781c8ed2cc0aeeb03f7733d507a29a2727348", 0x16, 0x5, 0x0, 0x0, r1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x2000000000, r1, &(0x7f0000000500)="9480ee60e2a9ba69ce379cafdbd2a865a6b3a08027b072e6bf6d85dc46eb827091c255e50452138d5725dd6a82c3ce7c2cd8433442d5c3a8a1f8d0cd98273010928cf9b3bd87f81d5b1f8fd8780ae11d8245712b03d0e5b7774ad6c625c635daaf013925a1420638b92f38df7793f81f30bd59c4bf6b1f2ab52e8b79a3304c3e8f3f793a30e5d1", 0x87, 0x438a, 0x0, 0x0, r1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0xbda, r1, &(0x7f0000000600)="94f237d054a88ff781b409d2dda9f6c8260fe834a1d21625dd674e46ba67fab241e1995818091145ee8cfff0d936c09a628c4d158cf1350c439edb9b203f5b452d7b56c416714d2ccd1ed9524242d5a6401c64a2a1463b4be94896366d42b6591f639f3444c8b31d23985aae393ddaec9ab0ad08dd9aa49915192ef2bd8fc55d0b11c76373efc6fa0441743223edf66c7ba338911e10c219dd75664cec7ede5e1d5a32d29eee", 0x56, 0x0, 0x0, 0x1, r1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x7, r1, &(0x7f0000000700)="9d1b775f6c7e6676e8bd7f1669321a341c92b5dd90bc84617140", 0x1a, 0x3, 0x0, 0x0, r1}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x2, 0x6, r1, &(0x7f0000000780)="0c9e3736225a80ec3bb22b472414adb67c0e9062faade5d9d3290136604684a3b928981adee6a19ed26c56660cca5dddd13b6fcf04a518fec207f9fbe7c7cfca9f5174873034af0f95a6d64d40f63364b13ad1b684e586feb256c027702a5a659d0f9c5341b6b5be121555da77db976bffc49a3739591bb6597017270d509819d87eff7d742843208db76bd652a5bece20c154666104ab7557af6fbc30fbda5b874625f83d88115ef2bd6d4291ef5bc55f69b5344a2560868be7", 0xba, 0x3, 0x0, 0x0, r1}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff9, r1, &(0x7f0000000880)="ccf88785be10ae6097d594784d9bc4cbea462becec52", 0x16, 0x11a, 0x0, 0x0, r1}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0xf, 0xb557, r1, &(0x7f0000000900)="660187dea5e86dca262f537d790f", 0xe, 0x100000001, 0x0, 0x0, r1}]) 03:41:16 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000001000), 0xfffffe53) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='com.apple.system.Security\x00', &(0x7f0000000080), 0x0) mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000003, 0x2012, r0, 0x0) 03:41:16 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0xa01, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000900)={"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"}) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000340)={0x303, 0x33}, 0x4) connect$bt_sco(r3, &(0x7f0000000200)={0x1f, {0xc55, 0x100, 0x1000, 0xffffffffffff63ed, 0x8, 0x3}}, 0x8) chown(&(0x7f00000000c0)='./file0\x00', r1, r2) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") accept$inet6(r3, &(0x7f0000000240), &(0x7f0000000880)=0x1c) openat$uinput(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/uinput\x00', 0x10000, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000000)='ip6gre0\x00', 0x69}) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000480)='./file0\x00', 0xfffffffffffffffd, 0xb81, &(0x7f0000000500), 0x20000, &(0x7f00000004c0)=ANY=[]) 03:41:16 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ppoll(&(0x7f0000013000)=[{r0}], 0x1, &(0x7f0000001000)={0x77359400}, &(0x7f000000d000), 0x8) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000000)=0x7f) read$eventfd(r0, &(0x7f0000000040), 0x8) 03:41:16 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2000, 0x0) r2 = dup(r0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0505510, &(0x7f0000001000)) 03:41:16 executing program 7: r0 = socket$pptp(0x18, 0x1, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0x6, 0x2) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) dup2(r2, r0) [ 144.493851] FAT-fs (loop4): Directory bread(block 128) failed [ 144.500258] FAT-fs (loop4): Directory bread(block 129) failed [ 144.551585] FAT-fs (loop4): Directory bread(block 130) failed [ 144.560522] FAT-fs (loop4): Directory bread(block 131) failed [ 144.566974] FAT-fs (loop4): Directory bread(block 132) failed [ 144.601426] FAT-fs (loop4): Directory bread(block 133) failed [ 144.610225] FAT-fs (loop4): Directory bread(block 134) failed [ 144.627276] FAT-fs (loop4): Directory bread(block 135) failed [ 144.635046] FAT-fs (loop4): Directory bread(block 136) failed [ 144.641400] FAT-fs (loop4): Directory bread(block 137) failed [ 144.684329] FAT-fs (loop3): Directory bread(block 128) failed [ 144.701257] FAT-fs (loop3): Directory bread(block 129) failed [ 144.726449] FAT-fs (loop3): Directory bread(block 130) failed [ 144.752600] FAT-fs (loop3): Directory bread(block 131) failed [ 144.774100] FAT-fs (loop3): Directory bread(block 132) failed [ 144.791764] FAT-fs (loop3): Directory bread(block 133) failed [ 144.806168] FAT-fs (loop3): Directory bread(block 134) failed [ 144.820424] FAT-fs (loop3): Directory bread(block 135) failed [ 144.836759] FAT-fs (loop3): Directory bread(block 136) failed [ 144.862460] FAT-fs (loop3): Directory bread(block 137) failed [ 144.887970] attempt to access beyond end of device [ 144.893199] loop4: rw=2049, want=310, limit=128 [ 144.897956] buffer_io_error: 31 callbacks suppressed [ 144.897966] Buffer I/O error on dev loop4, logical block 309, lost async page write [ 144.937166] attempt to access beyond end of device [ 144.942520] loop3: rw=2049, want=310, limit=128 [ 144.947254] Buffer I/O error on dev loop3, logical block 309, lost async page write [ 144.969341] attempt to access beyond end of device [ 144.974474] loop4: rw=2049, want=311, limit=128 [ 144.979233] Buffer I/O error on dev loop4, logical block 310, lost async page write 03:41:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)="2e2f66696c65302f662e2e2e30f0ff00", 0x0, 0x1c6, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[]) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10001, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000300)=""/186) creat(&(0x7f00000001c0)="2e2f66696c65302f662e2e2e30f0ff00", 0x0) creat(&(0x7f0000000140)="2e2f66696c65302f2e2e2e2e30f0ff00", 0x0) [ 144.989339] attempt to access beyond end of device [ 144.994464] loop3: rw=2049, want=311, limit=128 [ 144.999199] Buffer I/O error on dev loop3, logical block 310, lost async page write [ 145.006614] attempt to access beyond end of device [ 145.011999] loop4: rw=2049, want=312, limit=128 [ 145.016772] Buffer I/O error on dev loop4, logical block 311, lost async page write 03:41:17 executing program 7: r0 = socket$pptp(0x18, 0x1, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0x6, 0x2) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) dup2(r2, r0) [ 145.047169] attempt to access beyond end of device [ 145.052269] loop4: rw=2049, want=313, limit=128 [ 145.057023] Buffer I/O error on dev loop4, logical block 312, lost async page write [ 145.076947] attempt to access beyond end of device [ 145.082150] loop3: rw=2049, want=312, limit=128 [ 145.086930] Buffer I/O error on dev loop3, logical block 311, lost async page write [ 145.132278] attempt to access beyond end of device [ 145.136902] attempt to access beyond end of device [ 145.137432] loop4: rw=2049, want=326, limit=128 [ 145.142475] loop3: rw=2049, want=313, limit=128 [ 145.147142] Buffer I/O error on dev loop4, logical block 325, lost async page write [ 145.151831] Buffer I/O error on dev loop3, logical block 312, lost async page write 03:41:17 executing program 7: r0 = socket$pptp(0x18, 0x1, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0x6, 0x2) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) dup2(r2, r0) [ 145.210159] attempt to access beyond end of device [ 145.215235] loop4: rw=2049, want=327, limit=128 [ 145.218911] attempt to access beyond end of device [ 145.220043] Buffer I/O error on dev loop4, logical block 326, lost async page write [ 145.233122] loop3: rw=2049, want=326, limit=128 [ 145.244145] attempt to access beyond end of device [ 145.249431] loop4: rw=2049, want=328, limit=128 03:41:17 executing program 6: ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000000c0)={@my=0x1}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x20000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000140)=r2) [ 145.262471] attempt to access beyond end of device [ 145.267547] loop4: rw=2049, want=329, limit=128 03:41:17 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227c, &(0x7f0000000000)) [ 145.323453] attempt to access beyond end of device [ 145.328491] loop3: rw=0, want=310, limit=128 [ 145.367149] attempt to access beyond end of device [ 145.372233] loop3: rw=0, want=311, limit=128 [ 145.406216] attempt to access beyond end of device [ 145.411306] loop3: rw=0, want=312, limit=128 03:41:17 executing program 6: [ 145.421976] FAT-fs (loop5): bogus number of reserved sectors [ 145.428070] FAT-fs (loop5): Can't find a valid FAT filesystem [ 145.449180] attempt to access beyond end of device [ 145.454291] loop3: rw=0, want=313, limit=128 03:41:17 executing program 7: 03:41:17 executing program 0: [ 145.480435] attempt to access beyond end of device [ 145.485518] loop3: rw=0, want=326, limit=128 [ 145.568410] FAT-fs (loop5): bogus number of reserved sectors [ 145.574582] FAT-fs (loop5): Can't find a valid FAT filesystem 03:41:17 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs(r0, &(0x7f0000000180)='net\x00') r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000440)={{0x0, 0x3000, 0xf, 0x1f, 0x8, 0xffffffff, 0x1f, 0x1, 0x5, 0x8, 0xffffffff, 0x8}, {0x6000, 0xd000, 0xd, 0x1, 0x8, 0x0, 0x5, 0x101, 0xffffffffffffff7f, 0x4, 0x7, 0x3}, {0x0, 0xf004, 0x19, 0xfa, 0x6, 0x7, 0x10000, 0x3ff, 0x3, 0x1, 0x9, 0x5}, {0x100000, 0x6000, 0x4, 0x3, 0x4, 0x6bcfda0000000000, 0xc1, 0x1, 0x6, 0x81, 0xfffffffffffffff9, 0x5}, {0xf000, 0x5000, 0xe, 0x1, 0x1, 0x2, 0x0, 0x7fff, 0x5, 0x0, 0xd7d, 0xeecf}, {0x4000, 0x4, 0xf, 0x1, 0x2, 0x3, 0x1, 0x9, 0x3, 0x8, 0xf2, 0x200}, {0x7005, 0x100000, 0xb, 0x200, 0x9, 0xfffffffffffffffa, 0x2, 0x7b5, 0x1f, 0x1, 0xde, 0x400}, {0x7000, 0x0, 0x9, 0x7, 0xf3f7, 0xfd4, 0x7, 0xfffffffffffffeff, 0xd2e, 0x3ff, 0x4, 0xec12}, {0x105000, 0xf000}, {0x0, 0x3000}, 0x10000, 0x0, 0x5000, 0x91, 0x1, 0x3000, 0x11d000, [0x7, 0xb7, 0x7ff, 0x5]}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) ftruncate(r2, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a00)}}, 0x20) socket$inet6(0xa, 0x1000000000002, 0x0) io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000002c0)="80", 0x1}]) 03:41:17 executing program 2: 03:41:17 executing program 6: 03:41:17 executing program 4: 03:41:17 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) process_vm_writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)=""/145, 0x91}], 0x1d, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/172, 0xac}], 0x262, 0x0) 03:41:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfd87) fallocate(r1, 0x0, 0x0, 0xffff) fallocate(r1, 0x3, 0x5e00, 0x2cbd) lseek(r1, 0x0, 0x4) 03:41:17 executing program 7: r0 = socket(0x10, 0x3, 0x0) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT], 0xfffffeae) 03:41:17 executing program 5: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380)) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000540), &(0x7f0000000680)) open$dir(&(0x7f00000001c0)='./file0\x00', 0x802, 0x0) 03:41:17 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x800004, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x402) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) write$evdev(r1, &(0x7f0000000040), 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000001c0)=""/185) close(r0) 03:41:17 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x6e}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) read(r0, &(0x7f0000009f9c)=""/100, 0x64) 03:41:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000100)={0x8ac7}) 03:41:17 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@remote={0xfe, 0x80, [], 0xbb}, @loopback={0x0, 0x1}, @mcast1={0xff, 0x1, [], 0x1}}) [ 145.911076] FAT-fs (loop3): Directory bread(block 128) failed [ 145.949712] FAT-fs (loop3): Directory bread(block 129) failed 03:41:18 executing program 1: r0 = socket$inet(0x2, 0x803, 0x82) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {}, 0xff7ffffffffffffb, {0x2}, 'lo\x00'}) 03:41:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfd87) fallocate(r1, 0x0, 0x0, 0xffff) fallocate(r1, 0x3, 0x5e00, 0x2cbd) lseek(r1, 0x0, 0x4) [ 145.980724] FAT-fs (loop3): Directory bread(block 130) failed 03:41:18 executing program 4: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @empty, 0x0}, &(0x7f0000000280)=0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000013000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x13000000, 0x90, 0xfffffffffffffdf7, &(0x7f0000000100)="7a64f6bfff3db6650000000000ff1a6098d68d3255657b446ac72ca0dc7e69824ea27beef5e1829b4e4b57503b35a0b4c17cbd53fa5e8bc0", &(0x7f0000000600)=""/248, 0xfffffffffffffffe}, 0x28) 03:41:18 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x100) write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60, 0xffffffffffffffda, 0x8, {{0x9, 0x0, 0x7fffffff, 0x1ff, 0x6, 0x0, 0x401, 0x1}}}, 0x60) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)="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", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe66, &(0x7f0000000840), 0x0, &(0x7f0000001580)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) [ 146.020970] FAT-fs (loop3): Directory bread(block 131) failed [ 146.043317] FAT-fs (loop3): Directory bread(block 132) failed [ 146.074000] FAT-fs (loop3): Directory bread(block 133) failed [ 146.101618] FAT-fs (loop3): Directory bread(block 134) failed [ 146.120247] FAT-fs (loop3): Directory bread(block 135) failed [ 146.130637] FAT-fs (loop3): Directory bread(block 136) failed [ 146.138878] FAT-fs (loop3): Directory bread(block 137) failed [ 146.173829] attempt to access beyond end of device [ 146.178970] loop3: rw=2049, want=310, limit=128 [ 146.206907] attempt to access beyond end of device [ 146.212147] loop3: rw=2049, want=311, limit=128 [ 146.229550] attempt to access beyond end of device [ 146.234653] loop3: rw=2049, want=312, limit=128 [ 146.253430] attempt to access beyond end of device [ 146.258697] loop3: rw=2049, want=313, limit=128 [ 146.266799] attempt to access beyond end of device [ 146.271961] loop3: rw=2049, want=326, limit=128 [ 146.281675] attempt to access beyond end of device [ 146.286783] loop3: rw=0, want=310, limit=128 [ 146.291900] attempt to access beyond end of device [ 146.297048] loop3: rw=0, want=311, limit=128 [ 146.302218] attempt to access beyond end of device [ 146.307316] loop3: rw=0, want=312, limit=128 [ 146.312488] attempt to access beyond end of device [ 146.317558] loop3: rw=0, want=313, limit=128 [ 146.322713] attempt to access beyond end of device [ 146.327798] loop3: rw=0, want=326, limit=128 03:41:18 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs(r0, &(0x7f0000000180)='net\x00') r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000440)={{0x0, 0x3000, 0xf, 0x1f, 0x8, 0xffffffff, 0x1f, 0x1, 0x5, 0x8, 0xffffffff, 0x8}, {0x6000, 0xd000, 0xd, 0x1, 0x8, 0x0, 0x5, 0x101, 0xffffffffffffff7f, 0x4, 0x7, 0x3}, {0x0, 0xf004, 0x19, 0xfa, 0x6, 0x7, 0x10000, 0x3ff, 0x3, 0x1, 0x9, 0x5}, {0x100000, 0x6000, 0x4, 0x3, 0x4, 0x6bcfda0000000000, 0xc1, 0x1, 0x6, 0x81, 0xfffffffffffffff9, 0x5}, {0xf000, 0x5000, 0xe, 0x1, 0x1, 0x2, 0x0, 0x7fff, 0x5, 0x0, 0xd7d, 0xeecf}, {0x4000, 0x4, 0xf, 0x1, 0x2, 0x3, 0x1, 0x9, 0x3, 0x8, 0xf2, 0x200}, {0x7005, 0x100000, 0xb, 0x200, 0x9, 0xfffffffffffffffa, 0x2, 0x7b5, 0x1f, 0x1, 0xde, 0x400}, {0x7000, 0x0, 0x9, 0x7, 0xf3f7, 0xfd4, 0x7, 0xfffffffffffffeff, 0xd2e, 0x3ff, 0x4, 0xec12}, {0x105000, 0xf000}, {0x0, 0x3000}, 0x10000, 0x0, 0x5000, 0x91, 0x1, 0x3000, 0x11d000, [0x7, 0xb7, 0x7ff, 0x5]}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) ftruncate(r2, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a00)}}, 0x20) socket$inet6(0xa, 0x1000000000002, 0x0) io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000002c0)="80", 0x1}]) 03:41:18 executing program 1: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14}}, 0x10) listen(r0, 0x7ff) r1 = accept(r0, &(0x7f00000011c0)=ANY=[], &(0x7f0000123000)) listen(r0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000040)={{0x0, @broadcast=0xffffffff, 0x4e24, 0x4, 'lblc\x00', 0x10, 0xfffffffffffffff8, 0x6b}, {@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e22, 0x10007, 0x4, 0x6, 0x1ff}}, 0x44) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000002c0)="025cc83d6d345f8f762070") listen(r0, 0x8) 03:41:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfd87) fallocate(r1, 0x0, 0x0, 0xffff) fallocate(r1, 0x3, 0x5e00, 0x2cbd) lseek(r1, 0x0, 0x4) 03:41:18 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x10080}, "706f727431000000000000000000000000000000000000000000000000000000000000000100", 0xa9824f69d1376637, 0x10800b}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x77359400}}) flistxattr(r0, &(0x7f0000000380)=""/4096, 0x1000) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xfffffffffffffffe, 0x600) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000001380), &(0x7f0000000280)=0x3) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc04c5349, &(0x7f0000000000)={{0x0, 0x1}}) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0xfffffffffffffe37) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 03:41:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfd87) fallocate(r1, 0x0, 0x0, 0xffff) fallocate(r1, 0x3, 0x5e00, 0x2cbd) lseek(r1, 0x0, 0x4) 03:41:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfd87) fallocate(r1, 0x0, 0x0, 0xffff) lseek(r1, 0x0, 0x4) [ 146.513065] FAT-fs (loop3): Directory bread(block 128) failed [ 146.538908] FAT-fs (loop3): Directory bread(block 129) failed [ 146.554936] FAT-fs (loop3): Directory bread(block 130) failed 03:41:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfd87) fallocate(r1, 0x0, 0x0, 0xffff) lseek(r1, 0x0, 0x4) [ 146.567196] FAT-fs (loop3): Directory bread(block 131) failed [ 146.573847] FAT-fs (loop3): Directory bread(block 132) failed [ 146.582118] FAT-fs (loop3): Directory bread(block 133) failed [ 146.588686] FAT-fs (loop3): Directory bread(block 134) failed [ 146.595604] FAT-fs (loop3): Directory bread(block 135) failed [ 146.602635] FAT-fs (loop3): Directory bread(block 136) failed [ 146.609724] FAT-fs (loop3): Directory bread(block 137) failed 03:41:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200000, 0x0) sendmsg$nfc_llcp(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x27, 0x0, 0x2, 0x3, 0x0, 0x5, "be2738002afc55d8c0f0a1ee434457a93478bcc3631c0ac2b7c4f1a0e8a5b60a59e8d00d6337273dcc60b15fddecc5edaecea0f72da10970ed85e3b6630ce1", 0x3b}, 0x60, &(0x7f0000001680)=[{&(0x7f0000000240)="2d0615a93649340ec95292a838798052b9a2db4106d61a537d0f52d85b4968a3ed8c51c91589f644a6d1f6ad67408245e33b4e8dd9e67d72de3a975d74475c25bbb6f0f905a29913b3863c81", 0x4c}, {&(0x7f00000002c0)="3b7a63c37194a29d0246889c082e0c1caf4a4eebac032ae2b781274350c3c10e28f045e1c9f150af4dc5b52ae566b34b114b188f179404ad03595595a8bbdca42460b652fb7cb36d9b76045e98601a36ddd5aff73b63db78563443611bbbca71f7c2897af77ea00703802e0ce735933c776b725c91d27c50b70b007dd54c0f4cea06f2e065b32826bd7c3c08e022e1661cb58c8646a6eb8b3fddf661b91bd7c15ec31dd1e29257353902975bcb029464224411386d4db660c2e998359c67657443f65b4ec40d42b10c739d54b8d33093fbfba3f12c161d04176142", 0xdb}, {&(0x7f00000003c0)="409b432f3484856d5c88e6bee5e2ac11f127d1b7c70014403e98df570bac52bd9ca13f44cd4dc8ab913b6792e099ada39b0d1c114d45338e9d31f2d95aeaed53ebb36228cfa86273f4e507e10850058424a504c9264e9e590426e1057bf862dd28166c86254620c9c2b99df854c0487185c0ec55447d1c09c587d87c611161322eb812ddd5b86f07ef7e2654d5486b9e8998a9c6a472230dff23f6d722097abcd98fc2f6e9324159c8f4535f54cc3122169ca7d90d04c7f1b35a984bd84abcf3ed050b92ce0f5a1660a0f5c1116fd6f3894b2703a89cfea10f2348e2b73d833401cdeed7723b8dff", 0xe8}, {&(0x7f00000004c0)="450e8011d035c664bb4c04e7fd3c0851995a40ec5a171cf03b56b2bf959215bcd30e704a13894b78c381fb9436e44b484ed36cb383a43e933041a54de3cba44b7a3c55c59b231276a88b72d36372e1db6f765c322b56dc148e6fcbef217594734b46576a3dc5af341c06165bfa2c897edc4b87da47b3ec652849ad619d2b33eaa353e4b58fbf526f729242dc3619ce6452b1abdbfdc90060fb66b807eeb1ac628a1f04fd1a903f4a675d2cc0657231d235a77b18982f6098c1990b863c145dae71bc8d4ceee17024", 0xc8}, {&(0x7f0000000140)="0f784ad65d76f8acb5e974ecfe", 0xd}, {&(0x7f00000005c0)="07905f0043a520f50f5036e31c0d23e3e141c54bbdf2d8f62a04738b92bdfa42ea8c22937d411727c911c325b8c83e445a49cecc607c5a7f500ffee71d45134ec13fe44cb0652e0e169749cd7cf9830cf1e238063b7da0fbb004d2042e600cd6869ecc77c83b8082516bc77f8538a3b67553deba3181040e64d48a61028986ba9fe7c09871b492e7e313b0ebff86700f8913bc1c3893988aad88d3527d61f264508a9bc856b46f3dc12e33eb38dabd1cef49c2a2dcc31341ae0036722b6091b4", 0xc0}, {&(0x7f0000000680)="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", 0x1000}], 0x7, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x11e}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x211, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x3, {0x0, 0xf0}}]}, 0x1c}, 0x1}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001700)={0x0, @rand_addr, @broadcast}, &(0x7f0000001740)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001780)={'irlan0\x00', r2}) [ 146.665998] attempt to access beyond end of device [ 146.671225] loop3: rw=2049, want=310, limit=128 [ 146.705064] attempt to access beyond end of device [ 146.710413] loop3: rw=2049, want=311, limit=128 [ 146.726900] attempt to access beyond end of device [ 146.732163] loop3: rw=2049, want=312, limit=128 [ 146.747773] attempt to access beyond end of device [ 146.753066] loop3: rw=2049, want=313, limit=128 [ 146.761338] attempt to access beyond end of device [ 146.766691] loop3: rw=2049, want=326, limit=128 [ 146.786943] attempt to access beyond end of device [ 146.792121] loop3: rw=0, want=310, limit=128 [ 146.798215] attempt to access beyond end of device [ 146.803251] loop3: rw=0, want=311, limit=128 [ 146.812158] attempt to access beyond end of device [ 146.817388] loop3: rw=0, want=312, limit=128 [ 146.830373] attempt to access beyond end of device [ 146.835511] loop3: rw=0, want=313, limit=128 [ 146.840761] attempt to access beyond end of device [ 146.845925] loop3: rw=0, want=326, limit=128 [ 147.019369] ------------[ cut here ]------------ [ 147.024174] kernel BUG at mm/slab.c:4421! [ 147.028439] invalid opcode: 0000 [#1] SMP KASAN [ 147.033113] CPU: 0 PID: 7178 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #152 [ 147.040383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.049753] RIP: 0010:__check_heap_object+0xa7/0xb5 [ 147.054953] Code: 48 c7 c7 d8 6e c0 88 e8 87 7a 08 00 5d c3 41 8b 91 04 01 00 00 48 29 c7 48 39 d7 77 be 48 01 d0 48 29 c8 48 39 f0 72 b3 5d c3 <0f> 0b 48 c7 c7 d8 6e c0 88 e8 6d 81 08 00 44 89 e1 4c 8d 45 c4 48 [ 147.074212] RSP: 0018:ffff8801c3257a10 EFLAGS: 00010246 [ 147.079589] RAX: 0000000000000001 RBX: 1ffff1003864af49 RCX: 0000000000000014 [ 147.086861] RDX: ffff880192e00080 RSI: 00000000000003d4 RDI: ffff880192fffffc [ 147.094129] RBP: ffff8801c3257a10 R08: ffff8801d7682700 R09: ffff8801da802b00 [ 147.101416] R10: 00000000001fdf8c R11: 0000000000000001 R12: ffff880192fffffc [ 147.108688] R13: 00000000000003d4 R14: 0000000000000001 R15: ffffea00064b8000 [ 147.115968] FS: 00007f2751cc3700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 147.118193] ------------[ cut here ]------------ [ 147.124209] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.128963] kernel BUG at mm/slab.c:4421! [ 147.134843] CR2: 00007ffd40a05ff8 CR3: 00000001b9c37000 CR4: 00000000001406f0 [ 147.134852] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.134858] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 147.134861] Call Trace: [ 147.134894] __check_object_size+0x4db/0x5f2 [ 147.167903] ? usercopy_warn+0x120/0x120 [ 147.172045] ? kvm_clock_read+0x25/0x30 [ 147.176012] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 147.181027] bpf_test_finish.isra.7+0xd9/0x1f0 [ 147.185617] ? bpf_test_init.isra.8+0x100/0x100 [ 147.190369] ? bpf_test_run+0x2fc/0x3b0 [ 147.194340] bpf_prog_test_run_skb+0x7d7/0xa30 [ 147.198933] ? bpf_test_finish.isra.7+0x1f0/0x1f0 [ 147.203995] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 147.209536] ? fput+0x130/0x1a0 [ 147.212886] ? __bpf_prog_get+0x9b/0x290 [ 147.216956] ? bpf_test_finish.isra.7+0x1f0/0x1f0 [ 147.221810] bpf_prog_test_run+0x130/0x1a0 [ 147.226055] __x64_sys_bpf+0x3d8/0x510 [ 147.229949] ? bpf_prog_get+0x20/0x20 [ 147.233743] ? do_syscall_64+0x9a/0x820 [ 147.237886] do_syscall_64+0x1b9/0x820 [ 147.241762] ? finish_task_switch+0x1d3/0x870 [ 147.246250] ? syscall_return_slowpath+0x5e0/0x5e0 [ 147.251172] ? syscall_return_slowpath+0x31d/0x5e0 [ 147.256095] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 147.261457] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 147.266314] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 147.271498] RIP: 0033:0x455ab9 [ 147.274691] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 147.293900] RSP: 002b:00007f2751cc2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 147.301620] RAX: ffffffffffffffda RBX: 00007f2751cc36d4 RCX: 0000000000455ab9 [ 147.308898] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 147.316170] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 147.323433] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 147.330694] R13: 00000000004bb71f R14: 00000000004c8b00 R15: 0000000000000000 [ 147.337972] Modules linked in: [ 147.341169] Dumping ftrace buffer: [ 147.344695] (ftrace buffer empty) [ 147.348426] invalid opcode: 0000 [#2] SMP KASAN [ 147.348567] ---[ end trace f1eee48af61ccc9c ]--- [ 147.353279] CPU: 1 PID: 7220 Comm: syz-executor4 Tainted: G D 4.18.0-rc5+ #152 [ 147.353286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.353312] RIP: 0010:__check_heap_object+0xa7/0xb5 [ 147.358156] RIP: 0010:__check_heap_object+0xa7/0xb5 [ 147.366777] Code: 48 c7 c7 d8 6e c0 88 e8 [ 147.376631] Code: [ 147.381692] 87 7a 08 00 5d c3 [ 147.386734] 48 [ 147.390944] 41 8b 91 04 01 00 00 48 [ 147.393129] c7 [ 147.396302] 29 c7 48 39 d7 77 be [ 147.398202] c7 [ 147.401901] 48 01 d0 48 29 c8 48 39 [ 147.403822] d8 [ 147.407242] f0 72 b3 5d c3 <0f> 0b [ 147.409144] 6e [ 147.412825] 48 c7 c7 d8 6e c0 88 e8 [ 147.414731] c0 [ 147.418324] 6d 81 08 00 44 89 [ 147.420225] 88 [ 147.423921] e1 4c 8d 45 c4 48 [ 147.423949] RSP: 0018:ffff880191a07a10 EFLAGS: 00010246 [ 147.425835] e8 [ 147.428997] RAX: 0000000000000001 RBX: 1ffff10032340f49 RCX: 0000000000000015 [ 147.429004] RDX: ffff88018e0000c0 RSI: 00000000000003d4 RDI: ffff88018e3ffffc [ 147.429013] RBP: ffff880191a07a10 R08: ffff8801b3536040 R09: ffff8801da802c80 [ 147.429024] R10: 00000000003fdf44 R11: 0000000000000001 R12: ffff88018e3ffffc [ 147.430916] 87 [ 147.434077] R13: 00000000000003d4 R14: 0000000000000001 R15: ffffea0006380000 [ 147.434088] FS: 00007f2751c81700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 147.434101] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.439451] 7a [ 147.441314] CR2: 00007fb8e6152000 CR3: 00000001b9c37000 CR4: 00000000001406e0 [ 147.441324] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.441335] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 147.448592] 08 [ 147.455831] Call Trace: [ 147.455854] __check_object_size+0x4db/0x5f2 [ 147.455871] ? usercopy_warn+0x120/0x120 [ 147.463148] 00 [ 147.470404] ? kvm_clock_read+0x25/0x30 [ 147.470418] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 147.470439] bpf_test_finish.isra.7+0xd9/0x1f0 [ 147.472310] 5d [ 147.479574] ? bpf_test_init.isra.8+0x100/0x100 [ 147.479584] ? bpf_test_run+0xe8/0x3b0 [ 147.479600] ? bpf_test_run+0x2fc/0x3b0 [ 147.487843] c3 [ 147.493721] bpf_prog_test_run_skb+0x7d7/0xa30 [ 147.493739] ? bpf_test_finish.isra.7+0x1f0/0x1f0 [ 147.495624] 41 [ 147.503062] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 147.503074] ? fput+0x130/0x1a0 [ 147.503091] ? __bpf_prog_get+0x9b/0x290 [ 147.510372] 8b [ 147.517635] ? bpf_test_finish.isra.7+0x1f0/0x1f0 [ 147.517651] bpf_prog_test_run+0x130/0x1a0 [ 147.519520] 91 [ 147.522082] __x64_sys_bpf+0x3d8/0x510 [ 147.522098] ? bpf_prog_get+0x20/0x20 [ 147.526504] 04 [ 147.530563] ? ksys_ioctl+0x81/0xd0 [ 147.530582] ? do_syscall_64+0x9a/0x820 [ 147.532630] 01 [ 147.536589] do_syscall_64+0x1b9/0x820 [ 147.536606] ? finish_task_switch+0x1d3/0x870 [ 147.541610] 00 [ 147.546188] ? syscall_return_slowpath+0x5e0/0x5e0 [ 147.546200] ? syscall_return_slowpath+0x31d/0x5e0 [ 147.546222] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 147.548094] 00 [ 147.552763] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 147.552783] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 147.556654] 48 [ 147.560610] RIP: 0033:0x455ab9 [ 147.560613] Code: 1d [ 147.562496] 29 [ 147.567749] ba fb ff c3 66 2e [ 147.572608] c7 [ 147.574461] 0f 1f 84 00 00 [ 147.580016] 48 [ 147.583250] 00 00 00 66 90 48 [ 147.587317] 39 [ 147.589184] 89 f8 48 89 f7 [ 147.594046] d7 [ 147.598259] 48 89 d6 48 89 ca 4d 89 [ 147.600180] 77 [ 147.604036] c2 4d 89 c8 4c 8b 4c [ 147.607898] be [ 147.609759] 24 08 0f 05 <48> 3d [ 147.613420] 48 [ 147.617367] 01 f0 ff ff 0f 83 eb [ 147.619274] 01 [ 147.623142] b9 fb ff c3 66 2e [ 147.627722] d0 [ 147.629574] 0f 1f 84 00 00 [ 147.634511] 48 [ 147.639415] 00 00 [ 147.639426] RSP: 002b:00007f2751c80c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 147.639443] RAX: ffffffffffffffda RBX: 00007f2751c816d4 RCX: 0000000000455ab9 [ 147.644815] 29 [ 147.646675] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 147.646682] RBP: 000000000072bff0 R08: 0000000000000000 R09: 0000000000000000 [ 147.646694] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 147.651541] c8 [ 147.656709] R13: 00000000004bb71f R14: 00000000004c8b00 R15: 0000000000000002 [ 147.656726] Modules linked in: [ 147.658601] 48 [ 147.661767] Dumping ftrace buffer: [ 147.661777] (ftrace buffer empty) [ 147.664177] 39 [ 147.666351] ---[ end trace f1eee48af61ccc9d ]--- [ 147.669497] f0 [ 147.671176] RIP: 0010:__check_heap_object+0xa7/0xb5 [ 147.674086] 72 [ 147.675969] Code: [ 147.679147] b3 5d [ 147.681034] 48 [ 147.683951] c3 <0f> [ 147.685844] c7 [ 147.689554] 0b [ 147.691434] c7 [ 147.694873] 48 c7 [ 147.696762] d8 [ 147.700147] c7 d8 [ 147.702036] 6e [ 147.705496] 6e [ 147.707381] c0 [ 147.710560] c0 88 [ 147.712449] 88 [ 147.715379] e8 6d [ 147.717265] e8 [ 147.719402] 81 08 [ 147.727295] 87 [ 147.734663] 00 [ 147.736543] 7a [ 147.743817] 44 [ 147.751086] 08 00 [ 147.758460] 89 [ 147.760342] 5d [ 147.767617] e1 4c [ 147.770990] c3 41 [ 147.772875] 8d 45 [ 147.776422] 8b 91 [ 147.780129] c4 48 [ 147.782018] 04 [ 147.788645] 01 [ 147.793735] RSP: 0018:ffff8801c3257a10 EFLAGS: 00010246 [ 147.795619] 00 [ 147.797756] RAX: 0000000000000001 RBX: 1ffff1003864af49 RCX: 0000000000000014 [ 147.797768] RDX: ffff880192e00080 RSI: 00000000000003d4 RDI: ffff880192fffffc [ 147.799909] 00 [ 147.801794] RBP: ffff8801c3257a10 R08: ffff8801d7682700 R09: ffff8801da802b00 [ 147.804116] 48 [ 147.805993] R10: 00000000001fdf8c R11: 0000000000000001 R12: ffff880192fffffc [ 147.806008] R13: 00000000000003d4 R14: 0000000000000001 R15: ffffea00064b8000 [ 147.807883] 29 [ 147.809856] FS: 00007f2751cc3700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 147.809868] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.812007] c7 [ 147.813885] CR2: 00007ffd40a05ff8 CR3: 00000001b9c37000 CR4: 00000000001406f0 [ 147.813896] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.816030] 48 [ 147.817908] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 147.817917] Kernel panic - not syncing: Fatal exception [ 147.819803] 39 [ 147.822227] Dumping ftrace buffer: [ 147.822232] (ftrace buffer empty) [ 147.822235] Kernel Offset: disabled [ 147.966661] Rebooting in 86400 seconds..