[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 16.032738] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.782680] random: sshd: uninitialized urandom read (32 bytes read) [ 20.025060] random: sshd: uninitialized urandom read (32 bytes read) [ 20.870772] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.40' (ECDSA) to the list of known hosts. [ 26.330259] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/09 07:40:10 fuzzer started [ 27.755514] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/09 07:40:12 dialing manager at 10.128.0.26:44551 2018/07/09 07:40:15 syscalls: 1785 2018/07/09 07:40:15 code coverage: enabled 2018/07/09 07:40:15 comparison tracing: enabled 2018/07/09 07:40:15 setuid sandbox: enabled 2018/07/09 07:40:15 namespace sandbox: enabled 2018/07/09 07:40:15 fault injection: enabled 2018/07/09 07:40:15 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/09 07:40:15 net packed injection: enabled [ 32.552682] random: crng init done 07:41:18 executing program 7: syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@map_acorn='map=acorn', 0x2c}]}) 07:41:18 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="0f", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000029000)="c6", 0x1, 0x0, &(0x7f0000007ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x73, &(0x7f0000018000)={0x0, @in6={{0xa}}}, &(0x7f0000000000)=0x8c) 07:41:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0}) clock_settime(0x0, &(0x7f0000000540)={r0}) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000400)) 07:41:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b00f2ff0001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xaeb7, &(0x7f0000000140)) 07:41:18 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3ef) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) 07:41:18 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x9, 0x400000004, 0xf728}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f00000001c0), &(0x7f0000000080)=""/164}, 0x18) 07:41:18 executing program 3: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x15, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffffb}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000481000)=""/128, 0x1d8) 07:41:18 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x101, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)}}, 0x20) ioctl$VHOST_SET_VRING_KICK(r0, 0x3305, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00}, 0x20) [ 94.974761] IPVS: ftp: loaded support on port[0] = 21 [ 94.984382] IPVS: ftp: loaded support on port[0] = 21 [ 95.001620] IPVS: ftp: loaded support on port[0] = 21 [ 95.058483] IPVS: ftp: loaded support on port[0] = 21 [ 95.073431] IPVS: ftp: loaded support on port[0] = 21 [ 95.108174] IPVS: ftp: loaded support on port[0] = 21 [ 95.150068] IPVS: ftp: loaded support on port[0] = 21 [ 95.157253] IPVS: ftp: loaded support on port[0] = 21 [ 96.744490] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.750875] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.767726] device bridge_slave_0 entered promiscuous mode [ 96.776612] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.782999] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.790082] device bridge_slave_0 entered promiscuous mode [ 96.803471] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.809849] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.819916] device bridge_slave_0 entered promiscuous mode [ 96.829946] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.836314] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.845304] device bridge_slave_0 entered promiscuous mode [ 96.857966] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.864363] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.876273] device bridge_slave_0 entered promiscuous mode [ 96.884325] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.890688] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.898036] device bridge_slave_1 entered promiscuous mode [ 96.907249] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.913616] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.920924] device bridge_slave_0 entered promiscuous mode [ 96.929678] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.936042] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.943591] device bridge_slave_1 entered promiscuous mode [ 96.950397] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.956762] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.973985] device bridge_slave_0 entered promiscuous mode [ 96.981923] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.988287] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.995647] device bridge_slave_0 entered promiscuous mode [ 97.002905] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.009259] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.017174] device bridge_slave_1 entered promiscuous mode [ 97.024907] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.031261] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.043659] device bridge_slave_1 entered promiscuous mode [ 97.057546] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 97.066454] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 97.074907] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.081273] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.088957] device bridge_slave_1 entered promiscuous mode [ 97.096597] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.103051] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.121409] device bridge_slave_1 entered promiscuous mode [ 97.132512] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.138899] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.146295] device bridge_slave_1 entered promiscuous mode [ 97.154140] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 97.161196] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.167589] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.178991] device bridge_slave_1 entered promiscuous mode [ 97.187510] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 97.195712] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 97.204051] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 97.211306] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 97.221569] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 97.230754] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 97.247343] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 97.306254] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 97.316807] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 97.324422] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 97.347562] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 97.355908] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 97.416880] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 97.474290] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 97.533807] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 97.587069] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 97.618809] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 97.629238] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 97.646699] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 97.662258] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 97.671689] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 97.686102] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 97.724223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 97.732294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.752420] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 97.763256] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 97.772908] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 97.782663] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 97.791428] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 97.824960] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 97.887321] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 98.113091] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 98.132843] team0: Port device team_slave_0 added [ 98.183956] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 98.224361] team0: Port device team_slave_0 added [ 98.241737] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 98.249541] team0: Port device team_slave_1 added [ 98.256730] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 98.265177] team0: Port device team_slave_0 added [ 98.286904] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 98.295270] team0: Port device team_slave_0 added [ 98.303375] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 98.311721] team0: Port device team_slave_0 added [ 98.334534] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 98.349271] team0: Port device team_slave_0 added [ 98.357354] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 98.369398] team0: Port device team_slave_1 added [ 98.378959] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 98.385935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.397388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.416090] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 98.425137] team0: Port device team_slave_0 added [ 98.431601] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 98.439246] team0: Port device team_slave_1 added [ 98.445925] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 98.457889] team0: Port device team_slave_1 added [ 98.466354] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 98.474377] team0: Port device team_slave_0 added [ 98.481731] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 98.492898] team0: Port device team_slave_1 added [ 98.498501] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 98.513969] team0: Port device team_slave_1 added [ 98.520751] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 98.528488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 98.536803] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 98.543795] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 98.555891] team0: Port device team_slave_1 added [ 98.562130] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 98.572593] team0: Port device team_slave_1 added [ 98.591650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.607331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.621006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.631307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.638790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.646422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.655350] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 98.662301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.669920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.680439] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 98.687783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.695726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.705037] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 98.712801] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 98.720183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.744321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.758929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.766838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.774668] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 98.781511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.789292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.798570] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 98.807928] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 98.814809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.822726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.833166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.841197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.857537] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 98.864492] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 98.871366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.885434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.893169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.901422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.909172] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 98.917550] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 98.925946] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 98.935556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 98.942693] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 98.950378] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 98.962186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.992826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.007946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.024875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.032420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.040155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.047493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.055149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.062477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.070170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.077740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.085427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.095386] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 99.105440] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 99.113936] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 99.120979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.132883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.141006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.168988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.176861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.184588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.192446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 99.199315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.207252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.215301] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 99.222741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.230739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.240031] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 99.249964] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 99.259667] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 99.268721] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 99.276174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.302507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.328402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.344928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.352641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.360454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.368101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.375747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.386080] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 99.393822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.402401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.415453] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 99.422656] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 99.444106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.459773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.488821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.508427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.524181] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 99.531325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.552538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.594358] ip (5066) used greatest stack depth: 17472 bytes left [ 100.269472] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.275864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.282482] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.288836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.303551] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 100.378260] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.384664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.391734] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.398098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.409895] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 100.417476] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.423827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.430442] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.436781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.444670] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 100.454434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.465645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.480525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.500331] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.506722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.513351] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.519709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.538700] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 100.558249] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.564658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.571297] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.577637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.620928] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 100.628584] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.634965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.641587] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.647965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.655554] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 100.671963] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.678383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.685043] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.691391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.703259] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 100.711388] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.717748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.724349] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.730714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.741503] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 101.472325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.483731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.509816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.517762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.525477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.268725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.321826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.345646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.457989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.469221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.521924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.565438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.660914] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 104.671752] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 104.680934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.725687] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 104.733859] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 104.827292] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 104.852568] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 104.987224] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 105.024747] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 105.030967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.041492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.070509] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 105.085403] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 105.091547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.100602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.121560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.142443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.151492] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 105.158383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.165432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.189780] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 105.263407] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 105.269581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.279578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.307356] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 105.317530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.327387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.369588] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 105.375749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.387057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.426895] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.492144] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.516995] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.546624] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.584735] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 105.590901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.601507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.637253] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.708747] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.747990] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.992353] 8021q: adding VLAN 0 to HW filter on device team0 07:41:31 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') mlock2(&(0x7f0000785000/0x1000)=nil, 0x1000, 0x0) sigaltstack(&(0x7f0000601000/0x4000)=nil, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x100000080000000) 07:41:31 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3ef) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) 07:41:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x801000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="025cc83d6d00008f762070") close(r0) socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x366, 0x0, 0x0, 0x4e) 07:41:31 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3ef) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) [ 107.737344] Restarting kernel threads ... done. [ 107.779733] Restarting kernel threads ... done. 07:41:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x8, &(0x7f0000003980)=ANY=[@ANYBLOB="7a0af8ff00000000bfa100000000000007010000f8ffffffb702000008004000bf130000000000008500000040000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x9}, 0x48) 07:41:31 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3ef) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) 07:41:31 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x101, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)}}, 0x20) ioctl$VHOST_SET_VRING_KICK(r0, 0x3305, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00}, 0x20) 07:41:31 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x101, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)}}, 0x20) ioctl$VHOST_SET_VRING_KICK(r0, 0x3305, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00}, 0x20) [ 108.050434] Restarting kernel threads ... done. [ 108.072149] ISOFS: Unable to identify CD-ROM format. 07:41:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="240000000a0a07031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 108.117255] ISOFS: Unable to identify CD-ROM format. [ 108.160080] netlink: 20 bytes leftover after parsing attributes in process `syz-executor7'. [ 108.170728] netlink: 20 bytes leftover after parsing attributes in process `syz-executor7'. 07:41:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448cb, &(0x7f00000003c0)={0x0, &(0x7f0000000140)}) 07:41:32 executing program 3: perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xfffffffffffffffd, 0xff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="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", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc020660b, &(0x7f00000001c0)) 07:41:32 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r1}], 0x1, &(0x7f0000000200)={0x77359400}, &(0x7f00000002c0), 0x8) read(r1, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x0, 0x0) 07:41:32 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x101, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)}}, 0x20) ioctl$VHOST_SET_VRING_KICK(r0, 0x3305, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00}, 0x20) 07:41:32 executing program 0: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x5, 0x0) listen(r1, 0x0) accept$packet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0x14) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000300)=@req3={0x80000000}, 0x1c) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) close(r1) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000740)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a00)='/', 0x1}], 0x1, &(0x7f0000000600)=ANY=[]}, 0x0) 07:41:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) keyctl$chown(0x4, r1, r2, 0x0) 07:41:32 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x101, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)}}, 0x20) ioctl$VHOST_SET_VRING_KICK(r0, 0x3305, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00}, 0x20) 07:41:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="240000000a0a07031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 07:41:32 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x101, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)}}, 0x20) ioctl$VHOST_SET_VRING_KICK(r0, 0x3305, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00}, 0x20) 07:41:32 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000007a0a00ffffffff00731130"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 07:41:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="240000000a0a07031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 109.248250] netlink: 20 bytes leftover after parsing attributes in process `syz-executor7'. 07:41:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=@srh={0x0, 0x0, 0x4}, 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040), 0x8) sendto$inet(r4, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=""/39, &(0x7f0000000140)=0x27) sendto$inet(r4, &(0x7f0000000000)="1b", 0x1, 0x8000, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r4) [ 109.314825] Restarting kernel threads ... done. 07:41:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:41:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./f-le0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:41:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$inet(0x1e, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) [ 109.346436] netlink: 20 bytes leftover after parsing attributes in process `syz-executor7'. 07:41:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="240000000a0a07031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 07:41:32 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x101, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)}}, 0x20) ioctl$VHOST_SET_VRING_KICK(r0, 0x3305, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00}, 0x20) 07:41:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x400) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000200), 0x35e) [ 109.457630] netlink: 20 bytes leftover after parsing attributes in process `syz-executor7'. [ 109.563433] Restarting kernel threads ... done. 07:41:33 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b300000000000000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001640)="be1f3c84bef5523003672e8647879ad58e384c8a1a2b563f64e067146fd624bc", 0x20}], 0x1, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 07:41:33 executing program 2: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xfffffffffffffffd, 0x10031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f00000009c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="2c0271ca8b080aae3300bfa4def38003c21c104094bc5bb301", 0x19}], 0x1, &(0x7f0000000140)}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001180)="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", 0x2b7}], 0x1, &(0x7f0000000e00)}, 0x8000) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@can, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000480)=""/40, 0x28}, 0x0) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="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", 0x2d5}], 0x1, &(0x7f0000003b40)}, 0x0) 07:41:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1=0xe0000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}, 0x1}, 0x0) 07:41:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) rt_sigaction(0x1c, &(0x7f0000000080), &(0x7f0000000240), 0x8, &(0x7f0000000200)) 07:41:33 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x8, 0x5}) 07:41:33 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x14, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f00000000c0)) 07:41:33 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis256)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 07:41:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={"73797a5f74756e00000000000000e8ff", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getnetconf={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@NETCONFA_IFINDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1}, 0x0) 07:41:33 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x101, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000340)={0x0, 0x0, 0x1ff, 'queue1\x00'}) 07:41:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xfffffffdffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = accept4(r1, &(0x7f00000003c0)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000540)=0x80, 0x0) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in={{0x2}}, 0x0, 0x0, 0x0, 0x0, 0x8d}, 0x98) 07:41:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920fa0"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:41:33 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept(r0, &(0x7f00000002c0)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f0000000380)=0x80) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x8000000000000007, 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f00000003c0)="a7", 0x1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000100)="14", 0x1) 07:41:33 executing program 3: r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000a75000)={0x0, 0x0, 0xfffffffffffffffa}) 07:41:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") keyctl$invalidate(0x15, 0x0) 07:41:33 executing program 1: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, &(0x7f0000000000)=""/114, 0x72) 07:41:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000780)={[{@rtdev={'rtdev', 0x3d, './file0/../file0'}, 0x2c}]}) 07:41:33 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) ftruncate(r1, 0x80003) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) [ 110.564748] XFS (loop5): Invalid device [./file0/../file0], error=-15 [ 110.581315] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 110.589299] FAT-fs (loop6): Filesystem has been set read-only [ 110.608843] XFS (loop5): Invalid device [./file0/../file0], error=-15 [ 110.619187] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 110.638606] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 110.654129] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 110.662143] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 110.670374] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) 07:41:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae03, 0x0) 07:41:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) ftruncate(r0, 0x10001) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)) 07:41:34 executing program 1: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, &(0x7f0000000000)=""/114, 0x72) 07:41:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0xa, 0x800000000a, 0x1, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) 07:41:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000780)={[{@rtdev={'rtdev', 0x3d, './file0/../file0'}, 0x2c}]}) 07:41:34 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) ftruncate(r1, 0x80003) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 07:41:34 executing program 1: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, &(0x7f0000000000)=""/114, 0x72) 07:41:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000000000)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) close(r1) [ 111.457202] XFS (loop5): Invalid device [./file0/../file0], error=-15 07:41:34 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./bus\x00', &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x2000000, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000003c0)='./bus\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000400)=[{}], 0x18) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 07:41:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xfffffffdffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = accept4(r1, &(0x7f00000003c0)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000540)=0x80, 0x0) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in={{0x2}}, 0x0, 0x0, 0x0, 0x0, 0x8d}, 0x98) 07:41:34 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept(r0, &(0x7f00000002c0)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f0000000380)=0x80) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x8000000000000007, 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f00000003c0)="a7", 0x1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000100)="14", 0x1) 07:41:34 executing program 1: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, &(0x7f0000000000)=""/114, 0x72) 07:41:34 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept(r0, &(0x7f00000002c0)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f0000000380)=0x80) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x8000000000000007, 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f00000003c0)="a7", 0x1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000100)="14", 0x1) [ 111.503595] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 111.511649] FAT-fs (loop6): Filesystem has been set read-only 07:41:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000000000)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) close(r1) 07:41:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000780)={[{@rtdev={'rtdev', 0x3d, './file0/../file0'}, 0x2c}]}) [ 111.559323] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000202) [ 111.567374] attempt to access beyond end of device [ 111.571773] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000202) [ 111.572343] loop3: rw=1, want=386, limit=112 [ 111.595339] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000202) 07:41:34 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)=',') 07:41:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000000000)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) close(r1) [ 111.645484] XFS (loop5): Invalid device [./file0/../file0], error=-15 07:41:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000780)={[{@rtdev={'rtdev', 0x3d, './file0/../file0'}, 0x2c}]}) 07:41:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001500192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:41:34 executing program 2: prctl$intptr(0x35, 0x0) 07:41:34 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) ftruncate(r1, 0x80003) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 07:41:34 executing program 2: gettid() r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f000000d000)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000008ff8)) prctl$seccomp(0x16, 0x0, &(0x7f0000000140)={0x0, &(0x7f0000000100)}) recvfrom$unix(0xffffffffffffffff, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0x8) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) tkill(0x0, 0x0) 07:41:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000000000)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) close(r1) [ 111.736534] XFS (loop5): Invalid device [./file0/../file0], error=-15 [ 111.766794] netlink: 64 bytes leftover after parsing attributes in process `syz-executor1'. 07:41:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x0, 0x10001}}) [ 111.799126] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 111.807092] FAT-fs (loop6): Filesystem has been set read-only [ 111.813494] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000202) [ 111.821521] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000202) 07:41:34 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x13}, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b0", 0x1, 0x40041, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}, 0x1c) [ 111.854596] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000202) [ 111.897766] Dead loop on virtual device ip6_vti0, fix it urgently! [ 111.921273] Dead loop on virtual device ip6_vti0, fix it urgently! [ 111.930741] syz-executor0 (6851) used greatest stack depth: 13056 bytes left 07:41:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xfffffffdffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = accept4(r1, &(0x7f00000003c0)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000540)=0x80, 0x0) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in={{0x2}}, 0x0, 0x0, 0x0, 0x0, 0x8d}, 0x98) 07:41:35 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) ftruncate(r1, 0x80003) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 07:41:35 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSBRK(r1, 0x40044591) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000100)) 07:41:35 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept(r0, &(0x7f00000002c0)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f0000000380)=0x80) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x8000000000000007, 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f00000003c0)="a7", 0x1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000100)="14", 0x1) 07:41:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="0008000000000000f40c00000000000002000000feffffff03"]) 07:41:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000100)="0fc3600266b8080000000f23d00f21f866352000000b0f23f8673e0f01cfb8d60d8ed80f320f01bf0e00baf80c66b813e8a28366efbafc0cb0e5ee66b9db0800000f3266b9b809000066b87443ed4866ba000000000f30deba0700", 0x5b}], 0x1, 0x22, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:41:35 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f}}, 0x20) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000000c0)=0xe, 0x4) write(r0, &(0x7f00000000c0), 0xfec9) 07:41:35 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept(r0, &(0x7f00000002c0)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f0000000380)=0x80) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x8000000000000007, 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f00000003c0)="a7", 0x1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000100)="14", 0x1) 07:41:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6}]}, 0x10) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 112.457277] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 112.465281] FAT-fs (loop6): Filesystem has been set read-only [ 112.474718] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000202) [ 112.489318] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000202) [ 112.496545] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000202) 07:41:35 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af24, &(0x7f0000000540)) 07:41:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x80045438, &(0x7f0000000000)) 07:41:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 07:41:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000), 0x1) 07:41:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) recvmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/241, 0xf1}], 0x1, &(0x7f00000005c0)=""/190, 0xbe}, 0x10042) 07:41:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:41:35 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000080)="8b", 0x1, 0x1, &(0x7f0000000100)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 07:41:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xfffffffdffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = accept4(r1, &(0x7f00000003c0)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000540)=0x80, 0x0) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in={{0x2}}, 0x0, 0x0, 0x0, 0x0, 0x8d}, 0x98) 07:41:36 executing program 6: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:41:36 executing program 5: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x94) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "01000009d0010100000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000000), 0xc, &(0x7f00006e9c68)}, 0x0) 07:41:36 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept(r0, &(0x7f00000002c0)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f0000000380)=0x80) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x8000000000000007, 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f00000003c0)="a7", 0x1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000100)="14", 0x1) 07:41:36 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:41:36 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4e6546000000007d95c88c1612786908655d4e1d310e524467c8a1648dd386848d080033000000"], 0x2a) readv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1) 07:41:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff], 0xbb}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) 07:41:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000840)) close(r2) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000800)) 07:41:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x3, @remote={0xfe, 0x80, [], 0xbb}}}}, 0xfe55) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa}}}, 0x108) connect$inet6(r1, &(0x7f0000000280)={0xa}, 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 07:41:36 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept(r0, &(0x7f00000002c0)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f0000000380)=0x80) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x8000000000000007, 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f00000003c0)="a7", 0x1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000100)="14", 0x1) 07:41:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = getpgrp(0x0) setpriority(0x1, r1, 0x0) 07:41:36 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE(r1, 0x4008ae6a, &(0x7f0000000280)={0xfec00000}) 07:41:36 executing program 5: r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [], 0xa}, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200), &(0x7f0000000280)) 07:41:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x208012, &(0x7f0000000600)={[{@fat=@uid={'uid', 0x3d}, 0x2c}]}) 07:41:36 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x175) setresuid(0x0, r1, 0x0) mknod(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 07:41:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000080)) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x11, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x883e, 0x8}}}}}, 0x0) [ 113.546987] ip_tunnel: non-ECT from 172.20.255.187 with TOS=0x1 07:41:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000080)) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x11, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x883e, 0x8}}}}}, 0x0) 07:41:37 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x18, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x111, 0x11, &(0x7f0000000680), &(0x7f0000000600)=0x7970e41e) 07:41:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 07:41:37 executing program 2: r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001800)=[{{&(0x7f00000015c0)=@alg, 0x80, &(0x7f00000016c0), 0x0, &(0x7f0000001700)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000001a00)={0x0, 0x989680}) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000001dc0)=@bridge_getlink={0x20, 0x12, 0x201, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) [ 114.180886] ip_tunnel: non-ECT from 172.20.255.187 with TOS=0x1 07:41:37 executing program 7: remap_file_pages(&(0x7f000038d000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) [ 114.287712] mmap: syz-executor7 (7012) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 07:41:37 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x5, 0x0, 0x0) 07:41:37 executing program 3: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x6, 0x13, &(0x7f0000000000), &(0x7f0000000080)=0x4) 07:41:37 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f00000001c0)={0x14, 0x14, 0x301, 0x0, 0x0, {0x1e}}, 0x14}, 0x1}, 0x0) 07:41:37 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x4002, 0x0, 0x0, 0x0, 0x0) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f00000006c0)=""/29) clone(0x0, &(0x7f0000000700), &(0x7f00000001c0), &(0x7f00000000c0), &(0x7f0000000400)) umount2(&(0x7f00000000c0)='./file0\x00', 0x1000000000000003) 07:41:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000080)) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x11, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x883e, 0x8}}}}}, 0x0) 07:41:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 07:41:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) unshare(0x20020400) syz_fuse_mount(&(0x7f0000000240)='./file0\x00', 0xc001, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000140), 0x0, 0x200007f) unlink(&(0x7f0000000080)='./file0\x00') 07:41:37 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@map_normal='map=normal', 0x2c}, {@check_strict='check=strict', 0x2c}]}) 07:41:37 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000220000000700000000009b009500000000000000"], &(0x7f00000001c0)="73797a6b616c6c65720001be826e8f833152f795b4d9f4bc3ea582523aed371b084fccfc3d2ef2cbe65d30642ca8dcd0f8479be52e66937908f1d8112489e8099d9d4edb806d81189c0fbb6818d028546c35d3363d54db0db780f54977ae6359d617c1d233d8e18abfc75f9a76cd8e1f77583bc02f07a33de6f304e95db82fd4da55ebd25162df6f88e7d1bb0654ffb31e008967", 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x1e, 0x18, &(0x7f0000000380)="0aac1ac205286e83e005514088caab1b9080c1b9378955a0d89597df1632", &(0x7f0000000340)=""/24}, 0x28) 07:41:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 07:41:37 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x5, 0x0, 0x0) [ 114.394735] ip_tunnel: non-ECT from 172.20.255.187 with TOS=0x1 07:41:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000080)) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x11, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x883e, 0x8}}}}}, 0x0) 07:41:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 07:41:37 executing program 6: sendmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x80, &(0x7f0000000940), 0x0, &(0x7f0000000a00)}, 0x0) pipe(&(0x7f0000000280)) accept4$unix(0xffffffffffffff9c, &(0x7f0000001a40)=@abs, &(0x7f00000002c0)=0x6e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000004200)={&(0x7f0000001ac0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000000340)="3ca177f08c16c38e97f57faab3af0a9ef6215fd9a501e1f4dcef5e04894863a9082eaf6a848148f9e2e698a39620261ab6b8", 0x32}], 0x1, &(0x7f0000004040)}, 0x0) r0 = socket$unix(0xa, 0x3, 0x3a) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x3, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) sendmsg(r0, &(0x7f00000005c0)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280), 0x388}], 0x1, &(0x7f00000003c0)}, 0x0) [ 114.495910] ISOFS: Unable to identify CD-ROM format. [ 114.524705] ip_tunnel: non-ECT from 172.20.255.187 with TOS=0x1 [ 114.574912] ISOFS: Unable to identify CD-ROM format. 07:41:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f00006e9ff8)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', &(0x7f0000227f74)=""/140, 0x0) 07:41:38 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x5, 0x0, 0x0) 07:41:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xf0d0}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 07:41:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x800000f) fallocate(r1, 0x3, 0x0, 0x800000f) 07:41:38 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000000440)=[{&(0x7f0000000340)=""/206, 0xce}], 0x1, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1, 0x0) 07:41:38 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x13, &(0x7f0000000040), 0x4) close(r2) close(r1) 07:41:38 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) 07:41:38 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x5, 0x0, 0x0) 07:41:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x800000f) fallocate(r1, 0x3, 0x0, 0x800000f) 07:41:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4038ae7a, &(0x7f0000000000)) 07:41:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) 07:41:38 executing program 2: io_setup(0x4, &(0x7f0000000000)=0x0) r1 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)}]) 07:41:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x1085}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 07:41:38 executing program 7: syz_mount_image$jfs(&(0x7f0000000300)='jfs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@discard_size={'discard', 0x3d, [0x32]}, 0x2c}]}) 07:41:38 executing program 1: r0 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r0, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0x40045730, &(0x7f0000000000)) 07:41:38 executing program 3: r0 = memfd_create(&(0x7f0000001fc1)="00ac3d9dd2dbe6bfb408ed634a8e84d44e129b1f09bd112b865416a3b3ae309f393fef6fa46b01323ea19c86781c9f841935de975f097ef3591222705ec10f", 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) openat(0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', 0x0, 0x0) 07:41:38 executing program 1: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r1 = getpid() r2 = perf_event_open(&(0x7f0000001740)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, r1, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x0) 07:41:38 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 07:41:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=@flushpolicy={0x10, 0x1d, 0xf2f}, 0x10}, 0x1}, 0x0) 07:41:38 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 07:41:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x800000f) fallocate(r1, 0x3, 0x0, 0x800000f) [ 115.489872] JFS: discard option not supported on device [ 115.543821] JFS: discard option not supported on device 07:41:39 executing program 4: syz_emit_ethernet(0x16, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@generic={0x8864, "4a575dd1907c0021"}}}, &(0x7f00000000c0)) 07:41:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000010"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f00000000c0)=[@fda={0x66646185}, @fd={0x66642a85}], &(0x7f0000000180)=[0x20]}}], 0x0, 0x0, &(0x7f0000000500)}) 07:41:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x1e, 0x1, 0x0) getsockname$netlink(r1, &(0x7f0000000100), &(0x7f0000000140)=0xc) 07:41:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="f20f94ff0f01cf0fc72f6436f0f79b450066b9800000c00f326635000100000f3066b91a09000066b8fdafa70566ba000000000f30650fc7a900700f01cf642e3e0f005a0fb800098ee0", 0x4a}], 0x104, 0x5e, &(0x7f0000000100), 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)=ANY=[]) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:41:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x800000f) fallocate(r1, 0x3, 0x0, 0x800000f) 07:41:39 executing program 7: syz_mount_image$jfs(&(0x7f0000000300)='jfs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@discard_size={'discard', 0x3d, [0x32]}, 0x2c}]}) 07:41:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f00005f7ffa), 0x80000, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) umount2(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000780)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0xa000, 0x0) [ 116.146115] binder: 7159:7161 ERROR: BC_REGISTER_LOOPER called without request [ 116.167243] JFS: discard option not supported on device [ 116.178633] binder: 7159:7161 got transaction with invalid fd, -1 07:41:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000000400)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 07:41:39 executing program 4: syz_open_dev$sg(&(0x7f0000000800)='/dev/sg#\x00', 0x0, 0x20080) 07:41:39 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) [ 116.196778] kvm [7165]: vcpu0, guest rIP: 0x9133 disabled perfctr wrmsr: 0xc1 data 0x5a7affd [ 116.211412] binder: 7159:7161 transaction failed 29201/-9, size 56-8 line 3072 [ 116.218941] binder: send failed reply for transaction 2 to 7159:7161 [ 116.223611] kvm [7165]: vcpu0, guest rIP: 0x9133 disabled perfctr wrmsr: 0xc1 data 0x5a7affd [ 116.267901] kvm [7165]: vcpu0, guest rIP: 0x9133 disabled perfctr wrmsr: 0xc2 data 0x5a7affd [ 116.280390] binder: BINDER_SET_CONTEXT_MGR already set [ 116.293274] binder: 7182:7184 ioctl 40046207 0 returned -16 [ 116.300102] binder_alloc: binder_alloc_mmap_handler: 7182 20001000-20004000 already mapped failed -16 07:41:39 executing program 7: syz_mount_image$jfs(&(0x7f0000000300)='jfs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@discard_size={'discard', 0x3d, [0x32]}, 0x2c}]}) [ 116.311384] binder_alloc: binder_alloc_mmap_handler: 7159 20001000-20004000 already mapped failed -16 [ 116.328156] kvm [7165]: vcpu0, guest rIP: 0x9133 disabled perfctr wrmsr: 0xc2 data 0x5a7affd [ 116.329668] binder: BINDER_SET_CONTEXT_MGR already set [ 116.346305] binder: release 7182:7184 transaction 5 out, still active [ 116.352950] binder: undelivered TRANSACTION_COMPLETE [ 116.368181] binder: 7159:7191 ioctl 40046207 0 returned -16 [ 116.368677] JFS: discard option not supported on device [ 116.381944] binder_alloc: 7159: binder_alloc_buf, no vma [ 116.387479] binder: 7159:7161 transaction failed 29189/-3, size 0-0 line 2967 [ 116.398015] kvm [7165]: vcpu0, guest rIP: 0x9133 disabled perfctr wrmsr: 0xc1 data 0x5a7affd [ 116.410576] binder: 7159:7186 ERROR: BC_REGISTER_LOOPER called without request [ 116.429256] binder: undelivered TRANSACTION_COMPLETE [ 116.430949] kvm [7165]: vcpu0, guest rIP: 0x9133 disabled perfctr wrmsr: 0xc1 data 0x5a7affd [ 116.434430] binder: undelivered TRANSACTION_ERROR: 29201 [ 116.451284] binder: undelivered TRANSACTION_ERROR: 29190 [ 116.456819] binder: send failed reply for transaction 5, target dead [ 116.468373] kvm [7165]: vcpu0, guest rIP: 0x9133 disabled perfctr wrmsr: 0xc2 data 0x5a7affd 07:41:39 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x602, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r0, &(0x7f0000000100), &(0x7f0000000480)=""/16}, 0x18) 07:41:39 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) 07:41:39 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 07:41:39 executing program 4: mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = dup2(r0, r0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@generic) 07:41:39 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, r1}}, 0x48) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r1, r0}}, 0x18) 07:41:39 executing program 7: syz_mount_image$jfs(&(0x7f0000000300)='jfs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@discard_size={'discard', 0x3d, [0x32]}, 0x2c}]}) 07:41:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000400)={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x0, @link_local={0x1, 0x80, 0xc2}}, 0x0, {0x2, 0x0, @loopback=0x7f000001}, 'gretap0\x00'}) [ 116.480255] kvm [7165]: vcpu0, guest rIP: 0x9133 disabled perfctr wrmsr: 0xc2 data 0x5a7affd [ 116.486059] binder: undelivered TRANSACTION_ERROR: 29189 07:41:39 executing program 2: sched_setattr(0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) 07:41:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000100), 0x0) listen(r1, 0x110000000012) accept(r1, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80) 07:41:39 executing program 4: mremap(&(0x7f00004ec000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000394000/0x3000)=nil) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) mbind(&(0x7f0000289000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000540), 0x1, 0x2) 07:41:39 executing program 0: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x6, 0x23, &(0x7f0000000100), &(0x7f0000013000)=0x10) [ 116.555948] JFS: discard option not supported on device 07:41:39 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) 07:41:39 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 07:41:39 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200000004af2f90d544f2566ffc7e51abbe8b09f77ae51bc86"], 0x19}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f00000001c0)=@alg, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000740)=""/4096, 0x1000}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x80000001, 0x0, "0950fe4adba7"}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000080), 0x1ce) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x4, 0x894f, 0x5, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000340), 0x25d, &(0x7f0000000380)}, 0x0) 07:41:39 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 07:41:39 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) removexattr(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)=@known='system.posix_acl_default\x00') 07:41:39 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = eventfd(0xfffffffffffffff9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x0, r1}) r2 = eventfd(0x3f) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r2}) 07:41:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4543(gcm(aes-generic)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="d179f20600000000001c14b1048c5b1bd2e7fcd330451c64b8614fcff9671a5cf54ab025", 0x24) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000001500)=ANY=[], 0x4cba) recvmmsg(r2, &(0x7f0000004200)=[{{&(0x7f0000002cc0)=@vsock={0x0, 0x0, 0x0, @host}, 0x80, &(0x7f0000004080)=[{&(0x7f0000004000)=""/76, 0x4c}], 0x1, &(0x7f0000004100)=""/238, 0xee}}], 0x1, 0x0, &(0x7f0000004300)) 07:41:39 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) 07:41:39 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) removexattr(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)=@known='system.posix_acl_default\x00') 07:41:39 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = eventfd(0xfffffffffffffff9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x0, r1}) r2 = eventfd(0x3f) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r2}) 07:41:39 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 07:41:39 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) removexattr(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)=@known='system.posix_acl_default\x00') 07:41:40 executing program 2: sched_setattr(0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) 07:41:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000100), 0x0) listen(r1, 0x110000000012) accept(r1, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80) 07:41:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff8c, 0x0, 0x0, 0x0, [], {0x0, 0x6, 'p+l', 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80}}}}}}}}, 0x0) 07:41:40 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = eventfd(0xfffffffffffffff9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x0, r1}) r2 = eventfd(0x3f) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r2}) 07:41:40 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) close(r0) 07:41:40 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) removexattr(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)=@known='system.posix_acl_default\x00') 07:41:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c0045006, &(0x7f0000000040)=0x4) readv(r1, &(0x7f0000000400)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/176, 0xb0}], 0x2) 07:41:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)="b3", 0x1) 07:41:40 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@delsa={0x3c, 0x11, 0x101, 0x0, 0x0, {@in6}, [@srcaddr={0x14, 0xd, @in=@multicast1=0xe0000001}]}, 0x3c}, 0x1}, 0x0) 07:41:40 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res(&(0x7f00000001c0), 0x0, 0x0) 07:41:40 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = eventfd(0xfffffffffffffff9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x0, r1}) r2 = eventfd(0x3f) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r2}) 07:41:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0xa082) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r1) 07:41:40 executing program 7: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x400c0930, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000040)}) 07:41:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 07:41:40 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@ipv6_getaddr={0x18, 0x16, 0x101, 0x0, 0x0, {0xa}}, 0x18}, 0x1}, 0x0) 07:41:40 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x4003, 0x4) sendto$inet6(r0, &(0x7f0000000140)="0401000000c0031102000002000200001104", 0x12, 0x0, &(0x7f00000000c0)={0xa, 0x200010000010894f, 0x2, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 07:41:41 executing program 2: sched_setattr(0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) 07:41:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000100), 0x0) listen(r1, 0x110000000012) accept(r1, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80) 07:41:41 executing program 7: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000080)={[{@swalloc='swalloc', 0x2c}]}) 07:41:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') poll(&(0x7f0000000040)=[{r1}], 0x1, 0x3) 07:41:41 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x0) 07:41:41 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x10031, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000012c0)={'security\x00'}, &(0x7f0000000000)=0x54) 07:41:41 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000140)={&(0x7f00000005c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f0000000000)=@sco, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000540)=""/94, 0xffffffffffffffa2}}, {{&(0x7f00000003c0)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x1a1, &(0x7f00000001c0)=[{&(0x7f0000003100)=""/226, 0x2a}], 0x1, &(0x7f0000000640)=""/239, 0xef}}], 0x2, 0x0, 0x0) 07:41:41 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x800000000009, &(0x7f00000000c0)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 07:41:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=@allocspi={0xf8, 0x16, 0x31d, 0x0, 0x0, {{{@in6, @in6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, {@in6, 0x0, 0x33}}, 0x0, 0xfff}}, 0xf8}, 0x1}, 0x0) 07:41:41 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt6_stats\x00') r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f00000021c0), 0x0) [ 118.652618] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:41:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=@allocspi={0xf8, 0x16, 0x31d, 0x0, 0x0, {{{@in6, @in6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, {@in6, 0x0, 0x33}}, 0x0, 0xfff}}, 0xf8}, 0x1}, 0x0) [ 118.718989] XFS (loop7): Invalid superblock magic number 07:41:41 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x80000}) 07:41:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=@allocspi={0xf8, 0x16, 0x31d, 0x0, 0x0, {{{@in6, @in6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, {@in6, 0x0, 0x33}}, 0x0, 0xfff}}, 0xf8}, 0x1}, 0x0) [ 118.803731] XFS (loop7): Invalid superblock magic number 07:41:41 executing program 7: pipe2(&(0x7f0000601ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x3, &(0x7f0000dc0ff8)=0x0) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f0000587000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f000096f000)}]) 07:41:41 executing program 6: r0 = inotify_init1(0x0) fcntl$getflags(r0, 0x40a) 07:41:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=@allocspi={0xf8, 0x16, 0x31d, 0x0, 0x0, {{{@in6, @in6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, {@in6, 0x0, 0x33}}, 0x0, 0xfff}}, 0xf8}, 0x1}, 0x0) 07:41:42 executing program 2: sched_setattr(0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) 07:41:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000100), 0x0) listen(r1, 0x110000000012) accept(r1, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80) 07:41:42 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000000208ffff20006f68da27000000000000"], 0x14}, 0x1}, 0x0) getresgid(&(0x7f0000000240), &(0x7f00000003c0), &(0x7f0000000400)) 07:41:42 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003a40)={&(0x7f00000001c0)=@nfc={0x27}, 0x80, &(0x7f0000002600)=[{&(0x7f00000002c0)="9392bf9efd3c79c60f2bf47c6f09971a88afaf98be59513daecb89dab8b5196e08ad1809041b88d4e96f344003003ab0c4e5c4bcef1983c30e9685b1020c1b372cad857f01e084785dd75b4323db545de451b6be05e2a5c18a988c3a4497bc802b89", 0x62}], 0x1, &(0x7f0000002680)}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000380)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c4f4f0aedef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c392c6b4d1b050338f11cc40000000081ff34d1634d9bb9358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50e278e1d90b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd5f0f4020e9dda771d2954f"], &(0x7f0000000140)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:41:42 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000f000000670600000200000007060000e4d923e3bf050000000000001f650000000000006707000002000000070700004c0000000f75000000000000bf5400000000000007040000040000003d43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 07:41:42 executing program 7: r0 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001200)={'nat\x00', 0x0, 0x6, 0x90, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) 07:41:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x9}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x40}, 0x1}, 0x0) 07:41:42 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x0) 07:41:42 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x0) 07:41:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="480000001400197f09004b0101048c590188ff3f67614e495b1e2e1f72161affcf5d6f9fafab2a40e10520613057fff7e07900defeff0000e5ed5e00000000c855000000000000ac", 0x48}], 0x1) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f00000024c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f00000026c0)}}, {{&(0x7f0000002740)=@ax25, 0x80, &(0x7f0000002d00)}}], 0x2, 0x0, &(0x7f0000002e40)={0x0, 0x1c9c380}) 07:41:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000010207031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 119.586228] kernel msg: ebtables bug: please report to author: Nentries wrong 07:41:42 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000001700)="2957e1311f16f477671070") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000), 0xc5) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x9) 07:41:42 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="f9"], 0x1) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000340)=0x1, 0x4) recvmsg(r1, &(0x7f0000000180)={&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000003c0)=""/75, 0x4b}, 0x0) 07:41:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x2e, 0x119, 0x0, 0x0, {0x3}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32=0x4}]}]}, 0x20}, 0x1}, 0x0) [ 119.699260] netlink: 5 bytes leftover after parsing attributes in process `syz-executor3'. 07:41:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:41:42 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x47}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x2c}], {0x95}}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfd51, &(0x7f00000001c0)=""/251, 0x0, 0x0, [], 0x0, 0xd}, 0x48) [ 119.755256] openvswitch: netlink: Either Ethernet header or EtherType is required. 07:41:43 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000003c0)={0x1d}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) 07:41:43 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x0) 07:41:43 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)}}, 0x20) dup2(r1, r3) 07:41:43 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) 07:41:43 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000001340)={&(0x7f0000000140)=@delpolicy={0x50, 0x14, 0x1, 0x0, 0x0, {{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@dev={0xfe, 0x80}}, 0xa00}}, 0x50}, 0x1}, 0x0) 07:41:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x3c}, [], {0x95}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) 07:41:43 executing program 5: socketpair$unix(0x1, 0x801, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socket$pptp(0x18, 0x1, 0x2) io_getevents(r1, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x77359400}) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140)}]) 07:41:43 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x0) 07:41:43 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/if_inet6\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x80000002) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00}, 0x7) 07:41:43 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000001340)={&(0x7f0000000140)=@delpolicy={0x50, 0x14, 0x1, 0x0, 0x0, {{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@dev={0xfe, 0x80}}, 0xa00}}, 0x50}, 0x1}, 0x0) 07:41:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x3c}, [], {0x95}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) 07:41:43 executing program 6: futex(&(0x7f0000000040)=0x1, 0x4, 0x0, &(0x7f0000cc3ff0)={0x77359400}, &(0x7f00000000c0), 0x0) 07:41:43 executing program 5: socketpair$unix(0x1, 0x801, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socket$pptp(0x18, 0x1, 0x2) io_getevents(r1, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x77359400}) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140)}]) 07:41:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f00000009c0)={0x1c, 0x20, 0x8aff, 0x0, 0x0, {0x1}, [@nested={0x8, 0x1, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) 07:41:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x3c}, [], {0x95}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) 07:41:43 executing program 5: socketpair$unix(0x1, 0x801, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socket$pptp(0x18, 0x1, 0x2) io_getevents(r1, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x77359400}) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140)}]) 07:41:43 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000001340)={&(0x7f0000000140)=@delpolicy={0x50, 0x14, 0x1, 0x0, 0x0, {{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@dev={0xfe, 0x80}}, 0xa00}}, 0x50}, 0x1}, 0x0) 07:41:44 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x0) 07:41:44 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 07:41:44 executing program 6: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0xc0189436, 0x7fffffffefff) 07:41:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x3c}, [], {0x95}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) 07:41:44 executing program 5: socketpair$unix(0x1, 0x801, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socket$pptp(0x18, 0x1, 0x2) io_getevents(r1, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x77359400}) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140)}]) 07:41:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000180)=0x3c, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000000), 0xc) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) 07:41:44 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000001340)={&(0x7f0000000140)=@delpolicy={0x50, 0x14, 0x1, 0x0, 0x0, {{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@dev={0xfe, 0x80}}, 0xa00}}, 0x50}, 0x1}, 0x0) 07:41:44 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x0) 07:41:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_MULTIPATH={0x14, 0x9, {0x8, 0x0, 0x0, r1}}, @RTA_OIF={0x8, 0x4}]}, 0x30}, 0x1}, 0x0) 07:41:44 executing program 2: rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') ftruncate(r0, 0x100000000) 07:41:44 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 07:41:44 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt(r0, 0x84, 0x8000000006d, &(0x7f0000feeff8)=""/8, &(0x7f0000000040)=0x8) 07:41:44 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x105000) 07:41:44 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) pwrite64(r0, &(0x7f0000001200)='?', 0x1, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000001240)={0x8}, &(0x7f0000002280), 0x1000) 07:41:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x30000000010, &(0x7f0000000140)="02000100020001b40000000207206548", 0x10) 07:41:44 executing program 3: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f0000000180)=0x1e) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x100) r2 = msgget(0x3, 0x18) getresuid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) fstat(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) r7 = getpid() r8 = gettid() msgctl$IPC_SET(r2, 0x1, &(0x7f0000000480)={{0x3f, r3, r4, r5, r6, 0x41, 0x6}, 0x3, 0x5, 0x62bfe7aa, 0x9, 0xade, 0x6, r7, r8}) r9 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = getpid() ioprio_get$pid(0x3, r10) r11 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r11, 0x8912, &(0x7f0000000180)="025cc80a2b345f8f762070") execve(&(0x7f0000000500)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000540)='trusted\x00', &(0x7f0000000580)='selinux\\\x00'], &(0x7f0000000680)=[&(0x7f0000000600)='NETMAP\x00', &(0x7f0000000640)='NETMAP\x00']) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000007c0)) prctl$intptr(0x2a, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r12 = socket$inet6(0xa, 0x1, 0x0) ioctl(r12, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2dd) ioctl$PERF_EVENT_IOC_QUERY_BPF(r9, 0xc008240a, &(0x7f00000001c0)={0x3, 0x0, [0x0, 0x0, 0x0]}) getsockopt$inet6_tcp_int(r11, 0x6, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 07:41:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000200)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0xfffffdca, 0x0, &(0x7f0000008f37)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death={0x400c630f}], 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000080)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000000100)}) 07:41:45 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r3 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000000040)=0x80, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x70967c17166daa5c, 0x0) recvmsg(r1, &(0x7f00000016c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000001640)=""/112, 0x70}, 0x0) recvmsg$kcm(r3, &(0x7f0000002700)={&(0x7f00000001c0)=@sco, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000001580)=""/185, 0xb9}, 0x0) write(r1, &(0x7f0000000840), 0xff98) 07:41:45 executing program 7: socket(0x2c, 0x0, 0x0) 07:41:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000002640)="6e65742f736f636b7374617436004404d9f18c0606d312bf9f2e49559dea0d1e74036a1e96d6d9880540e1502003cf85b22ec322a83b8800cf80605c65a0ba7341c381e5a33f81453e13f3b952e38c973dae5ff14f01e1dc69a587864ae41b34dfbd9681793111459b279efff5c72cf72d6457afc4862c5fa2f208b39f3c701aa51b") preadv(r0, &(0x7f00000024c0)=[{&(0x7f0000000340)=""/43, 0x2b}], 0x1, 0x1a) 07:41:45 executing program 6: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) rt_sigtimedwait(&(0x7f00000000c0)={0x27fffffff}, &(0x7f0000000000), &(0x7f0000000100)={0x77359400}, 0x8) 07:41:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0xe2ee}) ioctl$TCSETAF(r1, 0x5412, &(0x7f00000000c0)={0xd}) 07:41:45 executing program 0: socket$inet(0x28, 0x0, 0xffffffff00000028) 07:41:45 executing program 5: mq_open(&(0x7f0000000100)='systemsecurityvboxnet1trusted\x00', 0x41, 0x0, &(0x7f0000000200)) 07:41:45 executing program 7: syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 07:41:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/112, 0x200034b0}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0) 07:41:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000003, 0x7) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKREPORTZONE(r1, 0x127b, &(0x7f00000002c0)=ANY=[]) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 07:41:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000), 0xc5) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x9) 07:41:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000003, 0x7) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKREPORTZONE(r1, 0x127b, &(0x7f00000002c0)=ANY=[]) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 07:41:45 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=@newsa={0x138, 0x18, 0x713, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [0xff, 0xff], @broadcast=0xffffffff}}, @in6=@ipv4={[], [0xff, 0xff]}}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1}, 0x0) 07:41:45 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000d300000000028000007a0a00ffffffff006b01"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000500)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 07:41:45 executing program 5: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, r0, 0x3) [ 122.485722] netlink: 64 bytes leftover after parsing attributes in process `syz-executor7'. 07:41:46 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000000c0)) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) 07:41:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_getneigh={0x20, 0x1e, 0x313, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) 07:41:46 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={"6c6f000000000000000000000000ed1f", 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@local={0xfe, 0x80, [], 0xaa}, @loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 07:41:46 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000000008006a0a00fe00000000850000000b000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0xe5, &(0x7f0000000080)="31d8f0bd7eb8993528a10e346bb4", &(0x7f0000000580)=""/229}, 0x28) 07:41:46 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r0, &(0x7f0000000080)="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", 0x821, 0x0, &(0x7f0000089000)={0xa, 0x3, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000ac0)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}, 0x1c) 07:41:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000003, 0x7) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKREPORTZONE(r1, 0x127b, &(0x7f00000002c0)=ANY=[]) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 07:41:46 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4106(gcm_base(ctr(aes-aesni),ghash-generic)))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x10) 07:41:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)={0x0, 0x80, "2ae2e44c98827ff3bc992fdd28da90d6d8c0c9725dc149c19e9631d4eec6ce84be7d7f41dd11983c44eb1e0c76f49023f34163f306ba6ee644a1af34ba96b69fc437bc5135416887b33740d56852a2ef604460cf88bf028396107bfc4d303f8bb25c9084d9b0224b83eb6fdd158a8ce5b845dcf35e88287690ab3cf2bbe62609"}, &(0x7f00000000c0)=0x88) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 123.068224] dccp_insert_option_ackvec: No space left for Ack Vector (51) on skb (65432+0), MPS=65475 ==> reduce payload size? [ 123.083777] binder: 7668:7671 unknown command 536907575 [ 123.089249] binder: 7668:7671 ioctl c0306201 20008fd0 returned -22 [ 123.095962] binder: 7668:7717 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 123.105352] binder: 7668:7671 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:41:46 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/108) 07:41:46 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(xtea-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000"], 0x1a) readv(r1, &(0x7f0000000680)=[{&(0x7f0000000280)=""/129, 0x19}], 0x1f5) 07:41:46 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000140), 0x8) 07:41:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000003, 0x7) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKREPORTZONE(r1, 0x127b, &(0x7f00000002c0)=ANY=[]) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 07:41:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0}) recvmmsg(r1, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r2}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000040)={0x14, 0x1e, 0x201}, 0x14}, 0x1}, 0x0) 07:41:46 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/108) 07:41:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000140)={0x94}) [ 123.226141] kvm: pic: non byte read 07:41:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x178, 0x4) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000180)=0x9, 0x4) sendto$inet6(r1, &(0x7f0000000100), 0x3da, 0x0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 07:41:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cb53d6d344f8f762070") r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, 0x0, 0x0) ioprio_set$uid(0x3, r2, 0x0) 07:41:46 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00003b9ffc)=0x40000000000800, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000002c0)="a9", 0x1) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) recvfrom$inet(r0, &(0x7f0000000000)=""/248, 0xf8, 0x40012000, 0x0, 0x0) [ 123.265302] kvm: pic: non byte read [ 123.276941] kvm: pic: non byte read [ 123.282904] kvm: pic: non byte read 07:41:46 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/108) [ 123.341761] kvm: pic: non byte read 07:41:46 executing program 6: set_mempolicy(0x8003, &(0x7f00007de000)=0x7d5, 0x7) set_mempolicy(0x8002, &(0x7f0000cce000)=0x707, 0x800) 07:41:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 07:41:46 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) 07:41:46 executing program 5: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x20141042, 0x0) r2 = dup(r1) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x4080, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 123.365246] kvm: pic: non byte read [ 123.376360] kvm: pic: non byte read [ 123.392553] kvm: pic: non byte read [ 123.401640] kvm: pic: non byte read [ 123.405782] kvm: pic: non byte read 07:41:46 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x2, r1, 0xffffffffff600000, &(0x7f0000000100)={&(0x7f0000000140)}) 07:41:46 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000b5dfa8)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x4000, 0x0) ioctl$TIOCSBRK(r3, 0x5427) r4 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x0) r5 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) write$cgroup_pid(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="36363797de452358f838654847fc555d7a30333836"], 0x15) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000280)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000002c0)=r6) socket$key(0xf, 0x3, 0x2) r7 = socket$inet6(0xa, 0x800, 0x2) ioctl(r7, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") sendmsg$key(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x2, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_ident={0x2, 0xa}]}, 0x20}, 0x1}, 0x0) ioctl(r0, 0x401, &(0x7f0000000340)="6dd43ca19aa88900a59faacbcc80bc8ba114c4622455977557cbed93f67bf9c2efc8b43d4ee9c3ae7724b6181450cb064d19ed8954ee5c072fffe61a31514386b227c092f0c0c6af92faa9e31fe542183eaa2a94415e7cda5d4757bc0a7988283f6bb9c476710e4f1e85c1a2ee0dc23e12b6f56f6f44aa0388a60100b0790d665044cfd7500f134994a8f5b1198f1ca274fff241d2663bbc27236d95f807") getsockopt$packet_int(r4, 0x107, 0x0, &(0x7f0000000140), &(0x7f0000000200)=0x4) r8 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="020a01068002000029bd7028b81b68d080ffdbdf00000008004e200000bf3da1cd2193fe0a983879bcd8932189fdce17ad45e667805c4f06de43d2c380a4f8f06a20a330f83329d36d11100ff241d50227"], 0x51}, 0x1}, 0x4) unlink(&(0x7f0000000000)='./file0\x00') socket$key(0xf, 0x3, 0x2) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 07:41:46 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/108) 07:41:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[], 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000), 0x73e0) 07:41:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") timer_create(0x2, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) timer_gettime(0x0, &(0x7f0000000040)) 07:41:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000780)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) sendfile(r0, r1, &(0x7f0000000040)=0xe00, 0x8010) 07:41:47 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000400), &(0x7f0000000440)=0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r1) close(r0) 07:41:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="290000002000190700003fffffffda060200000622e80002040000150d000400e0ff000000d200019c", 0x29}], 0x1) 07:41:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000594000), 0x0) r2 = socket(0x10, 0x2, 0xc) write(r2, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) close(r1) 07:41:47 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") listen(r0, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'tunl0\x00'}) close(r0) 07:41:47 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000000c0)) 07:41:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0}) recvmmsg(r1, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r2}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000040)={0x14, 0x1e, 0x201}, 0x14}, 0x1}, 0x0) 07:41:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip_tables_matches\x00') dup2(r0, r1) 07:41:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x1, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) [ 124.129607] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. [ 124.138161] netlink: 'syz-executor5': attribute type 4 has an invalid length. [ 124.161669] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. [ 124.171012] netlink: 'syz-executor5': attribute type 4 has an invalid length. 07:41:47 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000000c0)) 07:41:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[]]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:41:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x0, 0x0, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)="73797a6b616c6c65722c493d6c2b78db01beb8234b8301e2918b8b33e703f173263d15127d1c5309a0593d0f6dbe9cd5434619dfff6e61ba74ed3776315503f2d22b3ecd7a62819bc2345afd348344bed224a114267fd4cd1e55f8cf69c16cfffd3a4dc7721aacdfb55e39d507f86531752d2affc30318f5da65be34374a24f6", 0x0, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) socket(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00009da000), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00'}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000002c0)=""/96}, 0x18) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000480)) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000580), 0x4) sendto$inet6(r0, &(0x7f0000000540)='\b', 0x1, 0x3fffffa, &(0x7f0000000500)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x6, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)={0x303, 0x33}, 0x4) 07:41:47 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000a80)='./file0\x00', &(0x7f0000000a40)='ramfs\x00', 0x0, &(0x7f0000000b80)) chdir(&(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='qnx6\x00', 0x1000, &(0x7f0000000500)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 07:41:47 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x1ffffffffffffe8d, &(0x7f0000001780)=ANY=[], &(0x7f0000000d00)="3efc6584777c026d6ff7a03e8984074dbdadf4b82a5af6e700002239cc670081f57e9e18fd6796b4db24957aad8c9286e638dee5a6a7a12e5a142fb0cd477a173b8f603de4ba189ca07c946f73956c6a7c78fe2d6fa17f396462eec2e643acd1cc53cce7bdd22c22f763b5547524848de9797c2187cba1bcc6a619e4b93d9ab510b7bc75"}, 0x48) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000000)='ip6gre0\x00') 07:41:47 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) 07:41:47 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x0, 0x800}, 0x18) 07:41:47 executing program 2: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0xe78, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200007c0], 0x0, &(0x7f0000000080), &(0x7f00000007c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'veth0_to_team\x00', 'ipddp0\x00', 'bridge_slave_0\x00', "7465616d5f73ff5e76655f30004000", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x938, 0xab0, 0xae0, [@among={'among\x00', 0x850, {{0x50080000, 0x0, 0x0, {[], 0x1, [{[], @dev={0xac, 0x14, 0x14}}]}, {[], 0x3, [{[], @dev={0xac, 0x14, 0x14}}, {[], @local={0xac, 0x14, 0x14, 0xaa}}, {[], @broadcast=0xffffffff}]}}}}, @helper={'helper\x00', 0x28, {{0x0, 'H.245\x00'}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'bond_slave_0\x00', 'veth1_to_bridge\x00', 'syz_tun\x00', 'eql\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xa8, 0x1d8, 0x308, [@mac={'mac\x00', 0x10}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:var_spool_t:s0\x00'}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:bsdpty_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0xef0) 07:41:48 executing program 6: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0x0) 07:41:48 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000000c0)) 07:41:48 executing program 1: unshare(0x8020000) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f00000003c0)={0x3}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/47}, 0x37, 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') setns(r0, 0x0) 07:41:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000003, 0x7) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTOP(r1, 0x1276, 0x0) 07:41:48 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) r1 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00009b1ffc)) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 07:41:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_newrule={0x34, 0x20, 0x3, 0x0, 0x0, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_SRC={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x34}, 0x1}, 0x0) 07:41:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000340)={0x2, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3f}]}) 07:41:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0}) recvmmsg(r1, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r2}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000040)={0x14, 0x1e, 0x201}, 0x14}, 0x1}, 0x0) 07:41:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@delsa={0x28, 0x11, 0x11, 0x0, 0x0, {@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0x6c}}, 0x28}, 0x1}, 0x0) 07:41:48 executing program 1: unshare(0x8020000) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f00000003c0)={0x3}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/47}, 0x37, 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') setns(r0, 0x0) 07:41:48 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b300000000000000e6000000000000000000000000000000", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f9999c1192ad6e8103dd000000000000a3263c372ffa500f4dfbec09357f0700000076f26cdf47b46265999180448838", 0x30}], 0x1, &(0x7f0000000140)}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000180), 0x286, 0x0, &(0x7f0000000080)={0x0, r2+10000000}) 07:41:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x20000008912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000001400)=""/169, 0xa9}], 0x1, 0x2) 07:41:48 executing program 5: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1baf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0) 07:41:48 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000000c0)) 07:41:48 executing program 1: unshare(0x8020000) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f00000003c0)={0x3}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/47}, 0x37, 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') setns(r0, 0x0) 07:41:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5", 0x4) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 07:41:48 executing program 6: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2}}, 0x0, 0x0, 0x0, "e79852051e50a2b3edc2e7e707fbdbca69306f7003d638ba22f160c7e3a0b94ffb3007b515681c0cef83f9909d757722d567243496effc2707eb3a1e53c1c758156b2c0dccb5d6fb3bcd7b399bca8a5d"}, 0xd8) ptrace(0x4207, r1) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 07:41:48 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000100)) r0 = gettid() clock_nanosleep(0x2, 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000640)) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000040)="0700e1311f16f477671070") timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000013) 07:41:48 executing program 1: unshare(0x8020000) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f00000003c0)={0x3}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/47}, 0x37, 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') setns(r0, 0x0) 07:41:48 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x9, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x8) 07:41:49 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) dup2(r0, r1) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb957) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) 07:41:49 executing program 6: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a}, 0x10) 07:41:49 executing program 1: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380), 0x217, &(0x7f0000000180)}, 0x0) recvmsg(r1, &(0x7f000000b7c0)={&(0x7f000000a400)=@can={0x0, 0x0}, 0x80, &(0x7f000000b700)=[{&(0x7f000000b600)=""/218, 0xda}], 0x1, &(0x7f000000b780)=""/15, 0xf}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000b800)={0x3, 0x2, &(0x7f00000003c0)=@raw=[@exit={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x39, &(0x7f0000000440)=""/57, 0x0, 0x1, [], r2}, 0x48) 07:41:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x5, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffff0, 0xffffffffffffffff}}}, 0xb8}, 0x1}, 0x0) 07:41:49 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x9, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x8) 07:41:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000}, 0x1fa, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x5}, [@nested={0xc, 0x11, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 07:41:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0}) recvmmsg(r1, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r2}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000040)={0x14, 0x1e, 0x201}, 0x14}, 0x1}, 0x0) 07:41:49 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x9, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x8) 07:41:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f06762070") r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x0, 0x0, 0x4) fallocate(r1, 0x20, 0x0, 0xfffffeff000) write$cgroup_int(r1, &(0x7f0000000180), 0x1) lseek(r1, 0x0, 0x4) 07:41:49 executing program 1: execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), &(0x7f00000002c0), 0x100) 07:41:49 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet6_buf(r1, 0x29, 0x33, &(0x7f0000000080), 0x0) 07:41:49 executing program 6: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000000000)) wait4(0x0, &(0x7f0000000080), 0x40000000, &(0x7f00000000c0)) 07:41:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000080}]}) 07:41:49 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x43) accept(r0, &(0x7f0000000100)=@alg, &(0x7f0000000180)=0x80) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) shutdown(r0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) 07:41:49 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x9, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x8) 07:41:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000c00)=[{{&(0x7f0000000980)=@rc, 0x80, &(0x7f0000000b00), 0x0, &(0x7f0000000b40)=""/192, 0xc0}}], 0x1, 0x40000103, &(0x7f0000000cc0)) 07:41:49 executing program 7: r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f0000000040), 0x1c) 07:41:49 executing program 2: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r1) vmsplice(r0, &(0x7f0000000600)=[{&(0x7f00000005c0)='$', 0x1}], 0x1, 0x0) 07:41:49 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x34, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 07:41:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r2, &(0x7f0000000040)="358d4d3fb81ef3d49c", 0x9, 0x0, 0x0, 0x0) r4 = dup2(r3, r1) read$eventfd(r4, &(0x7f0000000000), 0x8) 07:41:49 executing program 7: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_xen(&(0x7f0000000280)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000380)=ANY=[]) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='9p\x00', 0x100000, &(0x7f0000000440)={'trans=unix,'}) mount$9p_xen(&(0x7f0000000600)='/\x00', &(0x7f0000000640)='./file1\x00', &(0x7f0000000680)='9p\x00', 0x301a418, &(0x7f00000006c0)={'trans=xen,'}) 07:41:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000040)={'ah\x00'}, &(0x7f00000000c0)=0x1e) r3 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) ptrace$getregset(0x4204, r4, 0x204, &(0x7f0000000340)={&(0x7f00000002c0)=""/121, 0x79}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000500)={0x4}, 0x1) io_setup(0xa8c, &(0x7f00000003c0)=0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) io_getevents(r6, 0x5, 0x3, &(0x7f0000000400)=[{}, {}, {}], &(0x7f00000004c0)={r7, r8+10000000}) syz_fuse_mount(&(0x7f0000000100)='./file0\x00', 0x0, r3, r5, 0x608, 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[{0x7, 0x2}, {0x2, 0xcae}, {0x3}, {0x5, 0xfffffffffffffff7}, {0xe, 0xffffffff}], 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x8, 0x4) io_setup(0xff, &(0x7f0000000380)=0x0) io_destroy(r9) 07:41:49 executing program 6: r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffff}, 0x111, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18) fallocate(r0, 0x0, 0x40000, 0x8005) fallocate(r0, 0x8, 0x4000, 0x8000) 07:41:49 executing program 1: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000b19000/0x1000)=nil) remap_file_pages(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x8, 0x1ff, 0x10002) mlock2(&(0x7f0000b1c000/0x3000)=nil, 0x3000, 0xfffffffffffffffe) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) mbind(&(0x7f0000b1d000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000), 0x7f, 0x3) 07:41:49 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x727, 0x80000) r1 = getpid() fcntl$setown(r0, 0x8, r1) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797a31f4d008a5f4faeb8fbc93cd7f223232acc2de6aba18442fdeddc499c310c62f892b4444d8af733d7b2fb3ee172cb3cb59146911d9d429f6255e2cb14ebb54d4d4ba8fc276001f1a44d11acddd0739a7ccf8324e9162506fae027b4e"], 0x5f) write$binfmt_misc(r0, &(0x7f0000000040)={'syz1'}, 0x4) 07:41:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000040)={'ah\x00'}, &(0x7f00000000c0)=0x1e) r3 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) ptrace$getregset(0x4204, r4, 0x204, &(0x7f0000000340)={&(0x7f00000002c0)=""/121, 0x79}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000500)={0x4}, 0x1) io_setup(0xa8c, &(0x7f00000003c0)=0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) io_getevents(r6, 0x5, 0x3, &(0x7f0000000400)=[{}, {}, {}], &(0x7f00000004c0)={r7, r8+10000000}) syz_fuse_mount(&(0x7f0000000100)='./file0\x00', 0x0, r3, r5, 0x608, 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[{0x7, 0x2}, {0x2, 0xcae}, {0x3}, {0x5, 0xfffffffffffffff7}, {0xe, 0xffffffff}], 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x8, 0x4) io_setup(0xff, &(0x7f0000000380)=0x0) io_destroy(r9) 07:41:49 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) r1 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/250) shmget$private(0x0, 0x1000, 0x60, &(0x7f0000fff000/0x1000)=nil) 07:41:49 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = socket$inet6(0xa, 0x800, 0x40) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@srh={0x0, 0xa, 0x4, 0x5, 0x400, 0x8, 0x5a, [@mcast2={0xff, 0x2, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, @remote={0xfe, 0x80, [], 0xbb}]}, 0x58) ppoll(&(0x7f0000000080)=[{r0, 0x2020}, {r2}, {r2, 0x1}, {r0, 0x100}], 0x4, &(0x7f00000000c0), &(0x7f0000000100)={0xfffffffffffffffa}, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x100, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x30001, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8001, 0x0) r3 = accept4(r1, &(0x7f0000000280)=@ax25, &(0x7f0000000300)=0xfffffffffffffedc, 0x800) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2={0x1f}, 0x80}}, {{&(0x7f0000007500)=@hci={0x1f}, 0x80, &(0x7f0000007680), 0x0, &(0x7f00000076c0)}}], 0x2, 0x0) 07:41:49 executing program 6: io_setup(0x2, &(0x7f0000000000)=0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2, 0x0) io_cancel(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00000001c0)) [ 126.868382] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 07:41:50 executing program 0: r0 = socket$inet6(0xa, 0x80000000005, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x2dd) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x8}}, 0x0, 0x7, 0x829, 0x5, 0xd6b}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x202, 0x4, 0x7, 0x7ff, r1}, 0x10) r2 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x101000) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000300)={0x6, 0x2, 0x3000}, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x1e, &(0x7f0000000000), 0x356) 07:41:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000040)={'ah\x00'}, &(0x7f00000000c0)=0x1e) r3 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) ptrace$getregset(0x4204, r4, 0x204, &(0x7f0000000340)={&(0x7f00000002c0)=""/121, 0x79}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000500)={0x4}, 0x1) io_setup(0xa8c, &(0x7f00000003c0)=0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) io_getevents(r6, 0x5, 0x3, &(0x7f0000000400)=[{}, {}, {}], &(0x7f00000004c0)={r7, r8+10000000}) syz_fuse_mount(&(0x7f0000000100)='./file0\x00', 0x0, r3, r5, 0x608, 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[{0x7, 0x2}, {0x2, 0xcae}, {0x3}, {0x5, 0xfffffffffffffff7}, {0xe, 0xffffffff}], 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x8, 0x4) io_setup(0xff, &(0x7f0000000380)=0x0) io_destroy(r9) 07:41:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x96040, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x18}, 0xe6d2}, @in={0x2, 0x4e22, @broadcast=0xffffffff}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0xffff, 0x3}, 0x8) r2 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x3, 0x8000) bind$bt_sco(r2, &(0x7f0000000180)={0x1f, {0x1, 0x5, 0xebc, 0xfffffffffffffc00, 0x4, 0x6}}, 0x8) 07:41:50 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) r1 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/250) shmget$private(0x0, 0x1000, 0x60, &(0x7f0000fff000/0x1000)=nil) 07:41:50 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x4000) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/151) syz_mount_image$hfsplus(&(0x7f0000000f80)='hfs.lus\x00', &(0x7f0000000fc0)='./file0\x00', 0x0, 0x0, &(0x7f0000001040), 0x0, &(0x7f0000001080)) 07:41:50 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x16) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f00000001c0)) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[]) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x42042, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r3, @ANYBLOB="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"]) ioctl$int_out(r1, 0x5462, &(0x7f0000000080)) 07:41:50 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) r1 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/250) shmget$private(0x0, 0x1000, 0x60, &(0x7f0000fff000/0x1000)=nil) 07:41:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x400000) 07:41:50 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0xfffffffffffffffe) unshare(0x2000400) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") ioctl$int_out(r0, 0x80004524, &(0x7f00000000c0)) fchmod(r1, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [0xff, 0xff], @rand_addr}, 0x2, 0x3, 0x2, 0x2, 0x10001, 0x3, 0x8000}, 0x20) 07:41:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2080, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x80000001, 0x4}, 0x0, 0xee, 0xffff, {0x5, 0x200}, 0x5, 0xf85c}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000005802000000000000ffff8000000000000000000000000000"]) 07:41:50 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x400000, 0x0) socketpair(0x8, 0xe, 0x3ff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x2, 0x6, 0x9, 0xa, 0x0, r0, 0x8}, 0x2c) 07:41:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x1, &(0x7f0000000140)="295e709c0cb63d0822e057db5630bd8cf91f67fe6825f1753157579cf7daf917babc57cfd5cbeb45c026b81522a1096ceece53e5947caf297a03be4b52a171543617a1015d18e89cd5d56d7ca7175c049415e703db4c3596f4e0035f8acedcf271f839fc93b822122c74b0411e255df462b17483db44ead516") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0xe75, 0x7fff, 0xffffffffffff8001}) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x2) getsockopt$inet6_int(r0, 0x29, 0xfd, &(0x7f0000000100), &(0x7f00000001c0)=0x4) [ 127.416068] FAT-fs (loop3): bogus number of reserved sectors [ 127.421954] FAT-fs (loop3): Can't find a valid FAT filesystem 07:41:50 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) r1 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/250) shmget$private(0x0, 0x1000, 0x60, &(0x7f0000fff000/0x1000)=nil) 07:41:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000400)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000440)="0001000000ff000000000000c9030000ec00000001000800000011cc0a56d4a9a75900000020000000010000000000006e5fbe5c0000ffff53ef0100010000006e5fbe5a0000c9ca68e30d69e5000000000000010000000000800000002c00000000000088", 0x65, 0x400}], 0x8000, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x5, 0x4) [ 127.490064] FAT-fs (loop3): bogus number of reserved sectors [ 127.495947] FAT-fs (loop3): Can't find a valid FAT filesystem 07:41:50 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080), r1, 0x0, 0x4, 0x400000}}, 0x20) 07:41:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) dup(r0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001940)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'team_slave_0\x00', 0x100}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) 07:41:50 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) r1 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/250) 07:41:50 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='user*selfo!$\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000300)=""/4096, 0x0, 0x800, 0xb406}, 0x18) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2}}) 07:41:50 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) [ 127.593652] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 127.602505] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities 07:41:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) r1 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/250) 07:41:50 executing program 6: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) migrate_pages(0x0, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x200000005) r0 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x80800) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f00000000c0)={@empty, @multicast2, 0x0}, &(0x7f0000000100)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xbb}, 0x7e, r1}) 07:41:50 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x200000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={0xffffffffffffffff, r1}) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1559a0d0, 0x101000) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000040)) shutdown(0xffffffffffffffff, 0x1) 07:41:50 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x400) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f0000000180)) r1 = eventfd(0x8000000000000005) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40000) r3 = getpgrp(0xffffffffffffffff) r4 = geteuid() getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={r3, r4, r5}, 0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r1) [ 127.674652] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 127.697241] capability: warning: `syz-executor6' uses 32-bit capabilities (legacy support in use) 07:41:50 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 07:41:50 executing program 6: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x0, 0x0, 0xfffffffffffffff8) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xb) [ 127.731086] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 127.739922] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities 07:41:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f00000000c0)='/dev/kvm\x00', 0x1) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="0f01c9b805000000b9a00100000f01d9c744240000580000c74424020b000000c7442406000000000f011424f30f0866ba4100b00deef32e0f21c466f30fbd5b888fc8d4a24a1ab90f2179c744240077000000c7442402dcc2fc4ec7442406000000000f011c24", 0x67}], 0x1, 0x0, &(0x7f0000000580), 0x0) 07:41:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x36, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000200)={{r1, r2+10000000}}, &(0x7f0000000240)) capget(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x3}) r3 = socket$l2tp(0x18, 0x1, 0x1) fcntl$setflags(r3, 0x2, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x16, &(0x7f0000000000)={@local={0xfe, 0x80, [], 0xaa}}, 0xfdf7) 07:41:50 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc008240a, &(0x7f0000000040)='mime_typeem0eth0\x00') syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 07:41:50 executing program 2: socketpair(0x10, 0x2, 0x8000, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c0000003200000427bd7000fddbdf25009306000800040001800000700001001400010000000c000100736b624a64697400000010001a0000000800010078740000000010001b00000008000300080000000000100016000000080001007874000000001400070000000c000100736b626d6f64000000001400100000000c000100736b6265646974000000"], 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f0000000180), &(0x7f0000000080)=""/140}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000180), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000180)}, 0x10) 07:41:50 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 07:41:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x2, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000000)=0x4, 0x4) r2 = timerfd_create(0x0, 0x0) sendto$inet(r1, &(0x7f00000000c0), 0x0, 0x2000c000, &(0x7f0000000080)={0x2, 0x4e21}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) dup2(r2, r1) 07:41:50 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000028c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="0a00010180544e1900000000020000000000000000000000", 0xffffffffffffff83) r1 = accept$alg(r0, 0x0, 0x0) writev(r1, &(0x7f0000000540)=[{&(0x7f0000002980)="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", 0xd5b}, {&(0x7f0000000140)="7a99dde1c5b87b", 0x7}], 0x2) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x7b, &(0x7f00000013c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 07:41:50 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x111000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000180)={0x303, 0x33}, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{r1, r2/1000+30000}, {0x77359400}}) rt_sigreturn() r3 = accept4$llc(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x10, 0x0) readahead(r3, 0x3, 0x2) 07:41:50 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000fc0000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000040)={0x2, "c867"}, 0x3) 07:41:50 executing program 3: prctl$intptr(0x21, 0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$TIOCSBRK(r0, 0x5427) fcntl$addseals(r0, 0x409, 0x0) 07:41:51 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 07:41:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0xe59d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x7, 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000001400)=""/169, 0xa9}], 0x1, 0x1f6) 07:41:51 executing program 2: setitimer(0x2, &(0x7f0000000fe0)={{0x100000000000}, {0x77359400}}, &(0x7f0000000440)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000040)={0xd99}) setitimer(0x2, &(0x7f0000000380)={{0x77359400}, {0x0, 0x7530}}, &(0x7f00000003c0)) 07:41:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x40000000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='gre0\x00', 0x10) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 07:41:51 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 07:41:51 executing program 6: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000, 0x80) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6010822}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getnetconf={0x2c, 0x52, 0x400, 0x70bd28, 0x25dfdbff, {0xa}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xfffffffffffff390}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6}, @NETCONFA_FORWARDING={0x8, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000200)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x80140912, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffdce, &(0x7f00000000c0)}) 07:41:51 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x4, &(0x7f0000001380)=[{&(0x7f0000000180)="569368f341fe3171edc727f1ebf21b0e69160d20213de95d004d19698376ea91d8b3fd8e77f547b698d46621c31b792ebb293d2be52e99a0cfc54bdc90e23581932bebe6170c8fa659434ad9e54666c963733bdfd8821de19ff0f181252bf580ddce979c7dce9cf114c11b96db12f2afc55590b765e52d0346899dfdd270775d731cea81865dd82a9e57881a2449c2ca6e6fffd8b8246d5df00a9d02eb1b191dde977322f084444327c5f216e33aee48e558d5adf27a5de09e9e12bec2459d227f99cec1ef0a7f551a97efa9ea8cdd384b7905e2f231ece1eafc4caa65fd2721428a901b8071", 0xe6, 0x7}, {&(0x7f00000002c0)="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", 0x1000, 0x7}, {&(0x7f00000012c0)="c4f69f40bb219ccba0a0a84f0de5d9fa0578e1942066ae6ce53b9100ca405fda560276bdb12fc09e13147afa363b0667b90854ac04ad6c138a3726690a50564e0f173aa6f56db6", 0x47, 0x4}, {&(0x7f0000001340)="996260ffb4d89624", 0x8, 0x1}], 0x2080, &(0x7f0000001400)={[{@lockproto_nolock='lockproto=lock_nolock', 0x2c}, {@noacl='noacl', 0x2c}, {@quota_quantum={'quota_quantum', 0x3d, [0x7b, 0x0, 0x37, 0x36, 0x33, 0x36, 0x34]}, 0x2c}, {@errors_withdraw='errors=withdraw', 0x2c}, {@nobarrier='nobarrier', 0x2c}, {@statfs_percent={'statfs_percent', 0x3d, [0x36, 0x3d, 0x2d, 0x34, 0x32, 0x39, 0x32, 0x33]}, 0x2c}]}) r0 = syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x2, 0x1028001) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x1, 0x4d, 0x2}, {}], 0xff05) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000000c0)=""/178) 07:41:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) capset(&(0x7f0000be6ff8)={0x19980330}, &(0x7f000032e000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$VT_WAITACTIVE(r0, 0x5607) [ 128.042855] IPVS: ftp: loaded support on port[0] = 21 07:41:51 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) listen(r0, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 07:41:51 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6ac, 0x8000) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)) perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0x20000000cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)="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") 07:41:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/cgroup\x00') ioctl$VT_RELDISP(r1, 0xb701) 07:41:51 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000880)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x12}]}) 07:41:51 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) listen(r0, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 07:41:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000100)=0xc) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, @remote}, &(0x7f0000000180)=0x10, 0x800) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x800}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x3, 0x2, 0x4, 0x1, r2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r2], 0x2}, 0x1}, 0x0) 07:41:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = memfd_create(&(0x7f00000001c0)='\x00', 0x3) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x78) write$P9_RFLUSH(r1, &(0x7f0000000200)={0x7, 0x6d, 0x2}, 0x7) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x100000000008}, 0x1c) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000000)=@in={0x2, 0x4e23, @broadcast=0xffffffff}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000100)}}], 0x2, 0x0) [ 128.191339] IPVS: ftp: loaded support on port[0] = 21 07:41:51 executing program 6: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000440)={0x8, 0x9, 0x3, 0x5, 0x8, 0x0, 0x9, 0x80000001, 0x1000, 0x40, 0x4, 0x6}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='posix_acl_access\x00') getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0xa5e, @remote={0xfe, 0x80, [], 0xbb}, 0x20}}}, &(0x7f0000000340)=0x84) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000580)=0xe8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rtc0\x00', 0x20000, 0x0) fstat(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, r4, r5) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, [], 0x1b}, 0x2}}, 0x80000001}, 0x90) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2108ffc, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r6, 0x40bc5311, &(0x7f0000000080)={0x7f, 0x1, 'client1\x00', 0xffffffff80000001, "d175057c85844145", "5d0b19f9589bcf56ab0d66171e43c408f00f532013963c39ab3cd96d19d2a62b", 0x9, 0x401}) 07:41:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400000, 0x8) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/174) 07:41:51 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) listen(r0, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 07:41:51 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000100)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x2000, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000140)={'security\x00', 0x2, [{}, {}]}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x0, r2}) read(r0, &(0x7f0000a16000)=""/71, 0x47) 07:41:51 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000140)={"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"}) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000040)={0x103002, 0xf000, 0x9, 0x3, 0x1f}) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="e9670402e2b7216e247ff08508023c50a9853a943dc6e074cda2fd8a2aac19a4d3c9f0418dc1a9551c671414879b8501b8377524e940ea2b02aeb600d656bbcdf8fc42ddf683cf2fdffc1d2d1f59eeb8aa8a1f254059f19abf9f8afac55fdc2ef6330ed2"], &(0x7f0000000000)="73797a6b616c6c65720079a992a8b54a138a2b15e5a5e3834727c92e7da99f989fe05b08b789f58457b5e8c54a81998cb1f68103d880c4f0cd8d3015884af5", 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080)={@ipv4={[], [], @remote}, 0x0}, &(0x7f00000000c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="b400000000000003250000000000000007000000b0ffffff00000000000000009500f30000000000"], &(0x7f00000006c0)='GPL\x00', 0x5, 0x132, &(0x7f00000005c0)=""/195, 0x0, 0x0, [], r1}, 0x48) 07:41:51 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="240000002e0007041dfffd946fa2830020200a0009000000001d8568ff0f000000000000280000001100ffffba16a0aa1c2009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 07:41:51 executing program 7: bind$inet6(0xffffffffffffffff, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 07:41:51 executing program 6: timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f}, &(0x7f00002d3ffc)) timer_create(0x2, &(0x7f0000000280)={0x0, 0x1f}, &(0x7f0000000240)=0x0) clock_gettime(0x0, &(0x7f0000cfa000)={0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={r1}, &(0x7f00003d7ff0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000040)={0x0}) timer_settime(r0, 0x0, &(0x7f0000000100)={{}, {r2}}, &(0x7f0000000140)) nanosleep(&(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000000180)) 07:41:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x40000000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='gre0\x00', 0x10) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 07:41:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0040028, 0x0, 0x0, 0x0, 0x0, 0x8100}) 07:41:51 executing program 1: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000080)) mknod(&(0x7f0000000000)='./file0\x00', 0x1044, 0x0) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040), &(0x7f0000001640)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f00000000c0)=0xfffffffffffffffe, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000680)="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") read(r1, &(0x7f0000000540)=""/245, 0xf5) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480), &(0x7f0000000f40)) open$dir(&(0x7f0000000080)='./file0\x00', 0x289, 0x0) 07:41:51 executing program 7: bind$inet6(0xffffffffffffffff, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) [ 128.832141] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 128.855843] IPVS: ftp: loaded support on port[0] = 21 07:41:51 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x54d0, 0x1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) r5 = add_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)="e066afee936f26cf942cba4dd2060cd6eb5f71ec7f6906c40b1723ff697d85d965c1a2cb57c08246c43b34f768078ccfb4c89283bdfcd56dfaa396167a2a1abd1a6ad1ed", 0x44, 0xfffffffffffffff9) keyctl$get_persistent(0x16, r4, r5) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x47) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x2402, &(0x7f0000000040)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000380)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) close(r3) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x440800, 0x0) [ 128.882487] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 07:41:52 executing program 7: bind$inet6(0xffffffffffffffff, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 07:41:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x200000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961000)=[@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x4}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x11, &(0x7f0000000080)={r1, @in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, &(0x7f0000000140)=0x84) 07:41:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="68b9cbf27c5f63c1d51136bbbc1b3819bb71d633009f30851407e7136ad2e75e3c946dae3f2f2512b3abf12cd6a5cc220beaec88d650eaabc1ddaaf5cd58c0826e1e216b5e3449cf922e60de5035cde6c6babfd5b04c183096c8bfe292b31ba036a17254c692f1809ea9b0031da6b3058c471cf75d26d860b9664a00231305b56cb1bc2a3acc4047c6f40093aaa2b0fa17a93515d25766532860fda9b2cc66139ee7e30ce96690733ac85635f44d62fd3a6d06f3f646b615a4a97a5247e64f018a9e96ceb59fb2a8"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 07:41:52 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x40}) read(r0, &(0x7f0000000000)=""/128, 0x80) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1fe, 0x8031, 0xffffffffffffffff, 0x0) 07:41:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a007fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd000000100001000204080000010000000000ff", 0x58}], 0x1) 07:41:52 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 07:41:52 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x2d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, &(0x7f0000000040), &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]}, 0x348) [ 129.004844] binder: 8360:8361 transaction failed 29189/-22, size 0-0 line 2852 [ 129.040823] binder: undelivered TRANSACTION_ERROR: 29189 [ 129.050290] binder: 8360:8370 transaction failed 29189/-22, size 0-0 line 2852 07:41:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-twofish-3way)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="bc55604174d377be30f7072548745f0d0639c74278118a6146d01de8e16b2424b826cbb0e7f28eb8", 0x28) 07:41:52 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 07:41:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x6464, 0xaf) close(r3) dup3(r1, r2, 0x0) [ 129.107620] binder: undelivered TRANSACTION_ERROR: 29189 07:41:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000500)=""/223, 0xdf}], 0x1, 0x0) 07:41:52 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 07:41:52 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x16}, 'bridge0\x00'}}, 0x1e) close(r1) 07:41:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[]) r0 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0xcea) fadvise64(r0, 0x0, 0x0, 0x4) 07:41:52 executing program 4: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0), 0x1c2) 07:41:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r3, &(0x7f0000000040)=0x100000, 0x8001) 07:41:52 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_config_ext={0xfffffffeffffffff}, 0xa000003fe, 0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 07:41:53 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x3c}, [], {0x95}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) 07:41:53 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) [ 129.913854] x86/PAT: syz-executor3:8432 map pfn RAM range req write-combining for [mem 0x190450000-0x190453fff], got write-back [ 129.972405] x86/PAT: syz-executor3:8439 map pfn RAM range req write-combining for [mem 0x190450000-0x190453fff], got write-back 07:41:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r1 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffe, 0x0) fallocate(r1, 0x0, 0x0, 0x8004) fcntl$setstatus(r1, 0x4, 0x0) sendfile(r1, r1, 0x0, 0xffffffff) 07:41:53 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffe, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) fcntl$setstatus(r0, 0x4, 0x0) sendfile(r0, r0, 0x0, 0xffffffff) setgid(0x0) 07:41:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='+6'], 0x2) 07:41:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000040)='./file0\x00', r2, 0x0) chmod(&(0x7f0000000700)='./file0\x00', 0x0) 07:41:53 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 07:41:53 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x3c}, [], {0x95}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) 07:41:53 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, 0x0) recvfrom$inet(r0, &(0x7f0000000000)=""/30, 0x1e, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) 07:41:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000005efff)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000f6bff4)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000efd000)=0x62) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000fddfff)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000000)) 07:41:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_dellink={0x28, 0x11, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0x3}]}]}, 0x28}, 0x1}, 0x0) 07:41:53 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 07:41:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001580)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(arc4-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)='\n', 0x1) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004880)=[{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000380)='K', 0x1}], 0x1, &(0x7f0000001500)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 07:41:53 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x3c}, [], {0x95}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) 07:41:53 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000480)='./file0\x00') symlink(&(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)='./file1\x00') rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00') 07:41:53 executing program 6: syz_read_part_table(0x0, 0x1, &(0x7f0000000880)=[{&(0x7f0000000840), 0x6c00, 0x101}]) 07:41:53 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x2, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000180)) getitimer(0x2, &(0x7f0000000140)) 07:41:53 executing program 5: r0 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x2, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) 07:41:53 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x3c}, [], {0x95}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) 07:41:53 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect(r0, &(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "276bc19561b2"}, 0x80) 07:41:53 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa}, 0x1c) listen(r0, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 07:41:53 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet(r1, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bond_slave_1\x00', 0x10) dup2(r0, r1) 07:41:53 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0xfffffffb, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 07:41:53 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000000c0)=""/87) sync() [ 130.422697] loop6: [POWERTEC] p1 [ 130.438834] loop6: p1 size 540672 extends beyond EOD, truncated [ 130.513165] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 130.541845] loop6: [POWERTEC] p1 [ 130.547909] loop6: p1 size 540672 extends beyond EOD, truncated 07:41:54 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000000200)={0x2, 0x4000000000000d, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1=0xe0000001}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_lifetime={0x4, 0x3, 0x9}]}, 0xa0}, 0x1}, 0x0) 07:41:54 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0x333) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 07:41:54 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect(r0, &(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "276bc19561b2"}, 0x80) 07:41:54 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa}, 0x1c) listen(r0, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 07:41:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x48b]}) 07:41:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0xb}, 0x1c) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040)=0x2, 0x4) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) 07:41:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000729000/0x1000)=nil, 0x1000, 0x0, 0x8000000000004011, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) mmap(&(0x7f00005a1000/0x200000)=nil, 0x200000, 0x1fffffe, 0x8031, 0xffffffffffffffff, 0x0) 07:41:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000440)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) 07:41:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$eventfd(r0, &(0x7f0000000300)=0x2, 0x8) 07:41:54 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect(r0, &(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "276bc19561b2"}, 0x80) 07:41:54 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa}, 0x1c) listen(r0, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 07:41:54 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000ae1000)='/dev/cuse\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)) 07:41:54 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000062c0)=[{{&(0x7f0000005080)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000006280)=[{&(0x7f0000005140)=""/56, 0x38}, {&(0x7f0000006180)=""/200, 0xc8}], 0x2}}], 0x1, 0x0, 0x0) 07:41:54 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 07:41:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffbbfffffff, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000040)="9b248050f4e33e212ea1ffea2ee90e58d3020d8da99daa45bf3f0d47816a6a32b7", &(0x7f00000003c0)=""/126, 0x0, 0x0, 0x0, &(0x7f0000000480)}) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[], 0xf6) 07:41:54 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect(r0, &(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "276bc19561b2"}, 0x80) 07:41:54 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="24000000580007031dfffd946f61830002200a00090000e7fe1c40000c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 131.424949] sd 0:0:1:0: [sg0] tag#2294 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 131.433740] sd 0:0:1:0: [sg0] tag#2294 CDB: opcode=0x9b [ 131.439184] sd 0:0:1:0: [sg0] tag#2294 CDB[00]: 9b 24 80 50 f4 e3 3e 21 2e a1 ff ea 2e e9 0e 58 [ 131.448060] sd 0:0:1:0: [sg0] tag#2294 CDB[10]: d3 02 0d 8d a9 9d aa 45 bf 3f 0d 47 81 6a 6a 32 [ 131.456945] sd 0:0:1:0: [sg0] tag#2294 CDB[20]: b7 [ 131.488014] sd 0:0:1:0: [sg0] tag#2294 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 131.496863] sd 0:0:1:0: [sg0] tag#2294 CDB: opcode=0x9b [ 131.502276] sd 0:0:1:0: [sg0] tag#2294 CDB[00]: 9b 24 80 50 f4 e3 3e 21 2e a1 ff ea 2e e9 0e 58 [ 131.511130] sd 0:0:1:0: [sg0] tag#2294 CDB[10]: d3 02 0d 8d a9 9d aa 45 bf 3f 0d 47 81 6a 6a 32 [ 131.520007] sd 0:0:1:0: [sg0] tag#2294 CDB[20]: b7 07:41:55 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0x333) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 07:41:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x2f84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x5}}) close(r2) close(r1) 07:41:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 07:41:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x1) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TCSETSF(r1, 0x40087101, &(0x7f0000000000)) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) 07:41:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x70003}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000180)="c744240000500000c74424020a000000c7442406000000000f011c240f0134120f20e035020000000f22e0e193ea2c010000e6000f00520ec4e1be5f7cd4a266ba400066b8f4ac66efdeb7eadb7cc866bad10466b8dd0566ef", 0x59}], 0x1, 0x22, &(0x7f0000000040), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000400)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:41:55 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYBLOB="f4c97efd259dcb3d018036c600a91d929f0911d8260f255af998c6a7f0dffe85e56e9193b06fcb98503daab814b0e6deb4b5d889ab0607465b728c6304ec1a25c5474efd499ba3d04535af497727c794790024b5aeb53cbd79a54891fd2577c91ff99f8be550d44914d1850f0b439a43591679c9598041e2e85a0646059a98c340e9426c4c9d15426aa972e555557ac499672be287a3c221562d5698f261eab90c6243c674def66de1e55e4f1dd5c6184b4c2c5bbaefb4c33c0800077a2df7fe6023931f2d76a4e76229fcc01d733e920de498dd1ab0eef5c924eb6dd2e25aaca134d955af9950de2f1eba2435627aff5b2a93046f213979868e51d82f7d25264bdc83b73c5bf85ce86dafa03b08ddcb57569cdee4e17b72e110c5cd339d74cb88f0a348794637380000010000000000ade6a50c1785c2eec363b264c982666e340d4224f6c619b6"]) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)) 07:41:55 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 07:41:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0xe, &(0x7f0000000000), 0x4) close(r3) dup3(r1, r2, 0x0) 07:41:55 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x10000000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 07:41:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000a80)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000300)="0229", 0x2, r3) r5 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000480)="c147549af9b7946d98716da0ab937610721246465ed3eb802e1517cf4e0eff944934e748cd5acde4c2175884bd9095c6e346ec09e73fffca1c95cf74e9e7472db2b5f03e09a5ce5ec32f2c30d5fa83a029d95f72e81cbb01de8c62fa21df74a9f6fb655e02e1be3b446bbfb80e257b80926a7a66005f59c62cf388bad13355e7b08101f4a4911c32c3448ff83f695aec696243e50e5dc044304e1a0723f725cd0568ccd71462603a2789789dd1ac4b284e00440a108427fcb165b428605a7353", 0xc0, r1) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r5}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif-generic\x00'}}) 07:41:55 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYBLOB="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"]) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)) [ 132.076125] binder: 8600:8605 ERROR: BC_REGISTER_LOOPER called without request 07:41:55 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) [ 132.120945] binder: release 8600:8605 transaction 15 in, still active [ 132.127741] binder: send failed reply for transaction 15 to 8600:8605 [ 132.153279] ================================================================== [ 132.160699] BUG: KASAN: slab-out-of-bounds in crypto_dh_encode_key+0x670/0x830 07:41:55 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) [ 132.168066] Write of size 192 at addr ffff8801cb926196 by task syz-executor1/8629 [ 132.175678] [ 132.177310] CPU: 1 PID: 8629 Comm: syz-executor1 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 132.180780] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 132.185628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 132.185633] Call Trace: [ 132.185658] dump_stack+0x1c9/0x2b4 [ 132.185677] ? dump_stack_print_info.cold.2+0x52/0x52 [ 132.185697] ? printk+0xa7/0xcf 07:41:55 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) [ 132.200023] binder: BINDER_SET_CONTEXT_MGR already set [ 132.205367] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 132.205394] ? crypto_dh_encode_key+0x670/0x830 [ 132.215912] binder: 8600:8605 ioctl 40046207 0 returned -16 [ 132.216733] print_address_description+0x6c/0x20b [ 132.216751] ? crypto_dh_encode_key+0x670/0x830 [ 132.216763] kasan_report.cold.7+0x242/0x30d [ 132.216784] check_memory_region+0x13e/0x1b0 [ 132.228622] binder: 8600:8634 ERROR: BC_REGISTER_LOOPER called without request [ 132.230040] memcpy+0x37/0x50 07:41:55 executing program 3: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x65, &(0x7f00000000c0), 0x54deded00158a180) [ 132.230057] crypto_dh_encode_key+0x670/0x830 [ 132.230077] ? crypto_dh_decode_key+0x820/0x820 [ 132.248535] binder_alloc: binder_alloc_mmap_handler: 8600 20001000-20004000 already mapped failed -16 [ 132.249905] ? __keyctl_dh_compute+0x6e1/0x1c00 [ 132.249923] __keyctl_dh_compute+0x707/0x1c00 [ 132.249938] ? __save_stack_trace+0x8d/0xf0 [ 132.249957] ? copy_overflow+0x30/0x30 [ 132.261303] binder: undelivered TRANSACTION_COMPLETE [ 132.266081] ? save_stack+0x43/0xd0 [ 132.266096] ? __kasan_slab_free+0x11a/0x170 [ 132.266105] ? kasan_slab_free+0xe/0x10 07:41:55 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) [ 132.266121] ? kfree+0xd9/0x260 [ 132.269211] binder: undelivered TRANSACTION_ERROR: 29189 [ 132.273676] ? __x64_sys_add_key+0x2b7/0x4e0 [ 132.273689] ? do_syscall_64+0x1b9/0x820 [ 132.273707] ? kasan_check_read+0x11/0x20 [ 132.314698] binder: release 8600:8634 transaction 16 out, still active [ 132.318080] ? do_raw_spin_unlock+0xa7/0x2f0 [ 132.318096] ? lock_acquire+0x1e4/0x540 [ 132.318113] ? __might_fault+0x12b/0x1e0 [ 132.322070] binder: undelivered TRANSACTION_COMPLETE [ 132.325325] ? lock_release+0xa30/0xa30 [ 132.325343] ? check_same_owner+0x340/0x340 [ 132.358808] binder: send failed reply for transaction 16, target dead [ 132.362366] ? debug_check_no_obj_freed+0x30b/0x595 [ 132.362392] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 132.362407] ? _copy_from_user+0xdf/0x150 [ 132.396996] keyctl_dh_compute+0xc5/0x11f [ 132.401132] ? __keyctl_dh_compute+0x1c00/0x1c00 [ 132.405879] ? syscall_slow_exit_work+0x500/0x500 [ 132.410705] __x64_sys_keyctl+0x12a/0x3b0 [ 132.414835] do_syscall_64+0x1b9/0x820 [ 132.418707] ? syscall_slow_exit_work+0x500/0x500 [ 132.423564] ? syscall_return_slowpath+0x5e0/0x5e0 [ 132.428476] ? syscall_return_slowpath+0x31d/0x5e0 [ 132.433415] ? prepare_exit_to_usermode+0x291/0x3b0 [ 132.438425] ? perf_trace_sys_enter+0xb10/0xb10 [ 132.443077] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 132.447908] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 132.453077] RIP: 0033:0x455e29 [ 132.456242] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 132.475406] RSP: 002b:00007f5de1b31c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 132.483103] RAX: ffffffffffffffda RBX: 00007f5de1b326d4 RCX: 0000000000455e29 [ 132.490353] RDX: 0000000020a53ffb RSI: 0000000020000100 RDI: 0000000000000017 [ 132.497602] RBP: 000000000072bea0 R08: 0000000020000180 R09: 0000000000000000 [ 132.504853] R10: 0000000000000005 R11: 0000000000000246 R12: 00000000ffffffff [ 132.512102] R13: 00000000004c02f9 R14: 00000000004cfb00 R15: 0000000000000000 [ 132.519355] [ 132.520967] Allocated by task 8629: [ 132.524576] save_stack+0x43/0xd0 [ 132.528014] kasan_kmalloc+0xc4/0xe0 [ 132.531708] __kmalloc+0x14e/0x760 [ 132.535230] __keyctl_dh_compute+0x6e1/0x1c00 [ 132.539708] keyctl_dh_compute+0xc5/0x11f [ 132.543851] __x64_sys_keyctl+0x12a/0x3b0 [ 132.547989] do_syscall_64+0x1b9/0x820 [ 132.551865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 132.557028] [ 132.558632] Freed by task 2749: [ 132.561902] save_stack+0x43/0xd0 [ 132.565352] __kasan_slab_free+0x11a/0x170 [ 132.569565] kasan_slab_free+0xe/0x10 [ 132.573353] kfree+0xd9/0x260 [ 132.576438] kernfs_fop_release+0x12b/0x1a0 [ 132.580747] __fput+0x35d/0x930 [ 132.584006] ____fput+0x15/0x20 [ 132.587271] task_work_run+0x1ec/0x2a0 [ 132.591157] exit_to_usermode_loop+0x313/0x370 [ 132.595717] do_syscall_64+0x6be/0x820 [ 132.600248] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 132.605422] [ 132.607033] The buggy address belongs to the object at ffff8801cb9260c0 [ 132.607033] which belongs to the cache kmalloc-512 of size 512 [ 132.619669] The buggy address is located 214 bytes inside of [ 132.619669] 512-byte region [ffff8801cb9260c0, ffff8801cb9262c0) [ 132.631517] The buggy address belongs to the page: [ 132.636435] page:ffffea00072e4980 count:1 mapcount:0 mapping:ffff8801da800940 index:0xffff8801cb9265c0 [ 132.645858] flags: 0x2fffc0000000100(slab) [ 132.650079] raw: 02fffc0000000100 ffffea00072a56c8 ffffea00072c49c8 ffff8801da800940 [ 132.657951] raw: ffff8801cb9265c0 ffff8801cb9260c0 0000000100000001 0000000000000000 [ 132.665807] page dumped because: kasan: bad access detected [ 132.671491] [ 132.673097] Memory state around the buggy address: [ 132.678006] ffff8801cb926100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 132.685354] ffff8801cb926180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 132.692694] >ffff8801cb926200: 00 00 00 00 00 00 00 00 00 00 02 fc fc fc fc fc [ 132.700028] ^ [ 132.705976] ffff8801cb926280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 132.713317] ffff8801cb926300: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 132.720657] ================================================================== [ 132.728499] Kernel panic - not syncing: panic_on_warn set ... [ 132.728499] [ 132.735878] CPU: 1 PID: 8629 Comm: syz-executor1 Tainted: G B 4.18.0-rc3-next-20180709+ #2 [ 132.745574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 132.754922] Call Trace: [ 132.757502] dump_stack+0x1c9/0x2b4 [ 132.761120] ? dump_stack_print_info.cold.2+0x52/0x52 [ 132.766304] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 132.771047] panic+0x238/0x4e7 [ 132.774222] ? add_taint.cold.5+0x16/0x16 [ 132.778363] ? do_raw_spin_unlock+0xa7/0x2f0 [ 132.782752] ? do_raw_spin_unlock+0xa7/0x2f0 [ 132.787145] ? crypto_dh_encode_key+0x670/0x830 [ 132.791810] kasan_end_report+0x47/0x4f [ 132.795857] kasan_report.cold.7+0x76/0x30d [ 132.800163] check_memory_region+0x13e/0x1b0 [ 132.804552] memcpy+0x37/0x50 [ 132.807644] crypto_dh_encode_key+0x670/0x830 [ 132.812133] ? crypto_dh_decode_key+0x820/0x820 [ 132.816790] ? __keyctl_dh_compute+0x6e1/0x1c00 [ 132.821445] __keyctl_dh_compute+0x707/0x1c00 [ 132.825933] ? __save_stack_trace+0x8d/0xf0 [ 132.830250] ? copy_overflow+0x30/0x30 [ 132.834120] ? save_stack+0x43/0xd0 [ 132.837728] ? __kasan_slab_free+0x11a/0x170 [ 132.842114] ? kasan_slab_free+0xe/0x10 [ 132.846077] ? kfree+0xd9/0x260 [ 132.849337] ? __x64_sys_add_key+0x2b7/0x4e0 [ 132.853726] ? do_syscall_64+0x1b9/0x820 [ 132.857772] ? kasan_check_read+0x11/0x20 [ 132.861900] ? do_raw_spin_unlock+0xa7/0x2f0 [ 132.866295] ? lock_acquire+0x1e4/0x540 [ 132.870249] ? __might_fault+0x12b/0x1e0 [ 132.874296] ? lock_release+0xa30/0xa30 [ 132.878253] ? check_same_owner+0x340/0x340 [ 132.882566] ? debug_check_no_obj_freed+0x30b/0x595 [ 132.887578] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 132.893094] ? _copy_from_user+0xdf/0x150 [ 132.897234] keyctl_dh_compute+0xc5/0x11f [ 132.901368] ? __keyctl_dh_compute+0x1c00/0x1c00 [ 132.906109] ? syscall_slow_exit_work+0x500/0x500 [ 132.910936] __x64_sys_keyctl+0x12a/0x3b0 [ 132.915066] do_syscall_64+0x1b9/0x820 [ 132.918937] ? syscall_slow_exit_work+0x500/0x500 [ 132.923760] ? syscall_return_slowpath+0x5e0/0x5e0 [ 132.928671] ? syscall_return_slowpath+0x31d/0x5e0 [ 132.933592] ? prepare_exit_to_usermode+0x291/0x3b0 [ 132.938589] ? perf_trace_sys_enter+0xb10/0xb10 [ 132.943240] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 132.948067] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 132.953237] RIP: 0033:0x455e29 [ 132.956406] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 132.975568] RSP: 002b:00007f5de1b31c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 132.983259] RAX: ffffffffffffffda RBX: 00007f5de1b326d4 RCX: 0000000000455e29 [ 132.990517] RDX: 0000000020a53ffb RSI: 0000000020000100 RDI: 0000000000000017 [ 132.997765] RBP: 000000000072bea0 R08: 0000000020000180 R09: 0000000000000000 [ 133.005016] R10: 0000000000000005 R11: 0000000000000246 R12: 00000000ffffffff [ 133.012268] R13: 00000000004c02f9 R14: 00000000004cfb00 R15: 0000000000000000 [ 133.019998] Dumping ftrace buffer: [ 133.023523] (ftrace buffer empty) [ 133.027210] Kernel Offset: disabled [ 133.030819] Rebooting in 86400 seconds..