[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 16.562679] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.141613] random: sshd: uninitialized urandom read (32 bytes read) [ 18.308365] random: sshd: uninitialized urandom read (32 bytes read) [ 19.111700] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.45' (ECDSA) to the list of known hosts. [ 24.553133] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/01 09:17:07 fuzzer started [ 25.745922] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/01 09:17:09 dialing manager at 10.128.0.26:46293 2018/08/01 09:17:12 syscalls: 1808 2018/08/01 09:17:12 code coverage: enabled 2018/08/01 09:17:12 comparison tracing: enabled 2018/08/01 09:17:12 setuid sandbox: enabled 2018/08/01 09:17:12 namespace sandbox: enabled 2018/08/01 09:17:12 fault injection: enabled 2018/08/01 09:17:12 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/01 09:17:12 net packed injection: enabled 2018/08/01 09:17:12 net device setup: enabled [ 30.237164] random: crng init done 09:17:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r1, 0xf, &(0x7f0000fa4000)={0x0, r2}) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) removexattr(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)=@known='system.posix_acl_default\x00') 09:17:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "84652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 09:17:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0), 0x0, &(0x7f0000001300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000004880)=ANY=[@ANYRESOCT, @ANYBLOB="1579835083f226e4d0ea924b8e5baac72faf9548de306fadefb5c6d68bc061e1d252ee9337626617e92d8c95ecc6843105203a8dc25053213a62c7cef2d083ab1be35a28d2ab14b9b482478c19a3d12d0c02100dd3ca6bb5ef5aeecfd35e15fdb00ae1b689bb5831409b3b8da9fad36e"], 0x87) clock_gettime(0x0, &(0x7f0000002680)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002500)=[{{&(0x7f0000000880)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a40)=""/66, 0x42}, {&(0x7f0000000ac0)=""/68, 0x44}], 0x2, &(0x7f0000000bc0)=""/98, 0x62}}, {{&(0x7f0000001240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001440)=""/126, 0x7e}], 0x1}}], 0x2, 0x0, &(0x7f00000026c0)={0x0, r2+10000000}) 09:17:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x8004, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="eb58906d6b66732e66617400020120000200038000f8", 0x16}], 0x0, &(0x7f0000000340)) 09:17:53 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfff7, 0x1a}) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x1500) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x1, 0x1}) 09:17:53 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$setendian(0x14, 0x1) r1 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r2 = add_key(&(0x7f0000001840)='logon\x00', &(0x7f0000001880)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000500)=[{&(0x7f0000000940)="ea45ed0ce26d859d944dc17b99726e536ed2a84e81dd0f070dc1150edc9eb9adb2aceaff6c8ecfbd990ec16907c86dfd607c804c05b0f45af9aa0a238faee4a30fb609a369023e84f7e6bd88cafd78c56f40c2c29199af24", 0x58}], 0x1, r2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x806, 0x3fd) getsockopt$nfc_llcp(r3, 0x118, 0x1, &(0x7f00000005c0)=""/91, 0x5b) r4 = syz_open_dev$vcsn(&(0x7f0000000540)='/dev/vcs#\x00', 0xd5, 0x70200) ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f0000000640)=0x20000000800) r5 = syz_open_dev$midi(&(0x7f00000008c0)='/dev/midi#\x00', 0xc00000000, 0x20400) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000004c0)={0x0, 0x5ed9}, &(0x7f0000000480)=0xffffffe2) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) r7 = socket(0xa, 0x1, 0x0) getpeername$inet(r4, &(0x7f0000000840)={0x0, 0x0, @multicast1}, &(0x7f00000002c0)=0xc2318b8493992447) close(0xffffffffffffffff) ioctl$int_out(r0, 0x40000005462, &(0x7f0000000040)) ioctl(r4, 0x8908, &(0x7f00000001c0)="602626dca880ee2c") setsockopt$sock_timeval(r7, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x10) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000900)=0xffffffffffffff69, 0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000440)=0x7fffffff, 0xffffffffffffffba) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000400), 0x4) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000680)={r6, @in={{0x2, 0x4e22, @multicast2}}}, 0x84) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000740)={0x74, 0x0, [0x8, 0xfffffffffffffffa, 0x8bd0, 0x3]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[]}}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') r9 = socket$inet(0x2, 0x4000000000000001, 0x100000000) bind$inet(r9, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r9, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendfile(r9, r8, &(0x7f0000000000)=0x10, 0x80000003) 09:17:54 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x70b5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2100000, &(0x7f0000000040), &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000280)) 09:17:54 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKMODE={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 71.021341] IPVS: ftp: loaded support on port[0] = 21 [ 71.036015] IPVS: ftp: loaded support on port[0] = 21 [ 71.048135] IPVS: ftp: loaded support on port[0] = 21 [ 71.060539] IPVS: ftp: loaded support on port[0] = 21 [ 71.105558] IPVS: ftp: loaded support on port[0] = 21 [ 71.105621] IPVS: ftp: loaded support on port[0] = 21 [ 71.118440] IPVS: ftp: loaded support on port[0] = 21 [ 71.134374] IPVS: ftp: loaded support on port[0] = 21 [ 72.707587] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.714019] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.721155] device bridge_slave_0 entered promiscuous mode [ 72.733147] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.739536] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.759938] device bridge_slave_0 entered promiscuous mode [ 72.774752] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.781156] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.791639] device bridge_slave_0 entered promiscuous mode [ 72.804229] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.810619] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.829408] device bridge_slave_1 entered promiscuous mode [ 72.840416] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.846800] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.855075] device bridge_slave_0 entered promiscuous mode [ 72.863946] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.870327] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.878636] device bridge_slave_0 entered promiscuous mode [ 72.885569] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.891946] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.900684] device bridge_slave_0 entered promiscuous mode [ 72.908982] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.915400] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.924133] device bridge_slave_1 entered promiscuous mode [ 72.932487] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 72.939975] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.946339] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.969682] device bridge_slave_0 entered promiscuous mode [ 72.983942] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.990336] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.998853] device bridge_slave_0 entered promiscuous mode [ 73.008651] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.015031] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.025009] device bridge_slave_1 entered promiscuous mode [ 73.034158] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.040532] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.047954] device bridge_slave_1 entered promiscuous mode [ 73.055279] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.061717] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.070236] device bridge_slave_1 entered promiscuous mode [ 73.079571] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.088312] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.094677] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.119721] device bridge_slave_1 entered promiscuous mode [ 73.126327] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.132711] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.140147] device bridge_slave_1 entered promiscuous mode [ 73.146762] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.153131] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.161302] device bridge_slave_1 entered promiscuous mode [ 73.177511] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.186474] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.196922] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.205158] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.212490] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.220607] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.235541] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.273689] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.305672] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.320546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.340493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.349285] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.357216] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.436644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.514467] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.568705] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.594225] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.602864] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.639545] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.649673] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.678531] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.688640] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.699084] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.724682] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.749889] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.758756] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.769477] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.805837] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.832667] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.895370] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.172219] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 74.183266] team0: Port device team_slave_0 added [ 74.204165] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 74.217965] team0: Port device team_slave_0 added [ 74.248768] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 74.257708] team0: Port device team_slave_0 added [ 74.264720] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 74.273439] team0: Port device team_slave_0 added [ 74.290758] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.307157] team0: Port device team_slave_1 added [ 74.317927] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 74.326041] team0: Port device team_slave_0 added [ 74.343829] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 74.357924] team0: Port device team_slave_0 added [ 74.372821] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 74.386104] team0: Port device team_slave_0 added [ 74.393535] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.403096] team0: Port device team_slave_1 added [ 74.412567] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.421006] team0: Port device team_slave_1 added [ 74.426213] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.438777] team0: Port device team_slave_1 added [ 74.446414] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.456368] team0: Port device team_slave_1 added [ 74.463288] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 74.471527] team0: Port device team_slave_0 added [ 74.477367] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.485436] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.493572] team0: Port device team_slave_1 added [ 74.508116] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.514931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.535176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.554516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.562187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.571297] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.578295] team0: Port device team_slave_1 added [ 74.585909] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.594401] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.608074] team0: Port device team_slave_1 added [ 74.614429] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.623443] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.630686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.642322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.650145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.668028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.680127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.690448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.697928] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.705316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.712880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.722979] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.730376] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.738851] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.750056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.758989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.771648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.779333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.787034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.794776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.802554] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.809472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.817362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.826549] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.833556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.841404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.849652] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.856730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.864379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.884391] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.893644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.901708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.911502] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.918645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.931659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.939818] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.946779] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.953761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.962778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.971032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.979022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.993392] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 75.002745] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.013563] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.025753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.038782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.047548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.067108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.080641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.088018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.095738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.105036] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.112271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.122877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.130773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.146326] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.153489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.161445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.170768] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 75.177573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.185440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.211125] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.219394] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.228117] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.235492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.263880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.282973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.297182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.304916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.312515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.324639] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.337972] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.352283] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.359451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.371173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.400936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.414063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.425527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.433131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.441542] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.452925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.463109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.565804] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.573213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.583978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.155760] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.162160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.168793] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.175157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.191401] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 76.203227] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.209627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.216241] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.222622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.230892] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 76.320664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.335900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.366098] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.372459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.379038] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.385372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.396708] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 76.414937] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.421303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.427914] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.434257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.466978] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 76.499856] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.506225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.512842] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.519192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.552464] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 76.570057] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.576417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.583037] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.589392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.617400] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 76.714715] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.721091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.727711] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.734066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.747916] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 76.754744] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.761100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.767675] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.774022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.791166] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.384999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.400005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.424297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.432153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.439358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.446533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.952231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.300499] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 80.309108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.328111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.366949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.392946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.517452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.556230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.667231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.684370] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 80.692303] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 80.698643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.706696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.726075] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 80.735538] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 80.748770] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 80.908585] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 80.920026] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 81.014963] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 81.022875] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 81.032181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.042552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.078549] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.098180] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 81.104862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.116422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.146099] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 81.152340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.162247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.186070] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 81.194263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.218058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.315089] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 81.321311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.328568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.409260] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.446041] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 81.453173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.461143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.499876] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 81.506535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.529947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.551051] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.571271] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.588078] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.692618] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.839168] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.859958] 8021q: adding VLAN 0 to HW filter on device team0 09:18:06 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfff7, 0x1a}) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x1500) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x1, 0x1}) 09:18:06 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfff7, 0x1a}) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x1500) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x1, 0x1}) 09:18:06 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfff7, 0x1a}) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x1500) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x1, 0x1}) 09:18:06 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfff7, 0x1a}) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x1500) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x1, 0x1}) 09:18:06 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfff7, 0x1a}) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x1500) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x1, 0x1}) 09:18:06 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfff7, 0x1a}) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x1500) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x1, 0x1}) [ 83.540015] FAT-fs (loop7): Directory bread(block 64) failed [ 83.565797] FAT-fs (loop7): Directory bread(block 65) failed 09:18:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000140)={&(0x7f00000017c0)={0x1c, 0x2c, 0x829, 0x0, 0x0, {0x3}, [@generic, @typed={0x8, 0x0, @u32}]}, 0x1c}}, 0x0) [ 83.597786] FAT-fs (loop7): Directory bread(block 66) failed [ 83.626251] FAT-fs (loop7): Directory bread(block 67) failed [ 83.655070] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 83.674523] FAT-fs (loop7): Directory bread(block 68) failed [ 83.688137] FAT-fs (loop7): Directory bread(block 69) failed 09:18:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000140)={&(0x7f00000017c0)={0x1c, 0x2c, 0x829, 0x0, 0x0, {0x3}, [@generic, @typed={0x8, 0x0, @u32}]}, 0x1c}}, 0x0) [ 83.726826] FAT-fs (loop7): Directory bread(block 70) failed [ 83.753833] FAT-fs (loop7): Directory bread(block 71) failed [ 83.795682] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 83.806675] FAT-fs (loop7): Directory bread(block 72) failed [ 83.827657] FAT-fs (loop7): Directory bread(block 73) failed [ 83.896050] bond0: cannot enslave bond to itself. [ 83.914494] bond0: cannot enslave bond to itself. 09:18:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r1, 0xf, &(0x7f0000fa4000)={0x0, r2}) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) removexattr(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)=@known='system.posix_acl_default\x00') 09:18:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "84652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 09:18:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0), 0x0, &(0x7f0000001300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000004880)=ANY=[@ANYRESOCT, @ANYBLOB="1579835083f226e4d0ea924b8e5baac72faf9548de306fadefb5c6d68bc061e1d252ee9337626617e92d8c95ecc6843105203a8dc25053213a62c7cef2d083ab1be35a28d2ab14b9b482478c19a3d12d0c02100dd3ca6bb5ef5aeecfd35e15fdb00ae1b689bb5831409b3b8da9fad36e"], 0x87) clock_gettime(0x0, &(0x7f0000002680)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002500)=[{{&(0x7f0000000880)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a40)=""/66, 0x42}, {&(0x7f0000000ac0)=""/68, 0x44}], 0x2, &(0x7f0000000bc0)=""/98, 0x62}}, {{&(0x7f0000001240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001440)=""/126, 0x7e}], 0x1}}], 0x2, 0x0, &(0x7f00000026c0)={0x0, r2+10000000}) 09:18:07 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a00)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x1, 0x0) syz_mount_image$ntfs(&(0x7f0000000980)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f00000008c0)=[{&(0x7f00000005c0), 0x0, 0xfffffffffffffffc}, {&(0x7f0000000740)}, {&(0x7f00000007c0)}], 0x0, &(0x7f0000000580)={[{@nls={'nls', 0x3d, '\naccyrillic'}}]}) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, 0x84) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="cb", 0x1}], 0x1) 09:18:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000140)={&(0x7f00000017c0)={0x1c, 0x2c, 0x829, 0x0, 0x0, {0x3}, [@generic, @typed={0x8, 0x0, @u32}]}, 0x1c}}, 0x0) 09:18:07 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKMODE={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 09:18:07 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$setendian(0x14, 0x1) r1 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r2 = add_key(&(0x7f0000001840)='logon\x00', &(0x7f0000001880)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000500)=[{&(0x7f0000000940)="ea45ed0ce26d859d944dc17b99726e536ed2a84e81dd0f070dc1150edc9eb9adb2aceaff6c8ecfbd990ec16907c86dfd607c804c05b0f45af9aa0a238faee4a30fb609a369023e84f7e6bd88cafd78c56f40c2c29199af24", 0x58}], 0x1, r2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x806, 0x3fd) getsockopt$nfc_llcp(r3, 0x118, 0x1, &(0x7f00000005c0)=""/91, 0x5b) r4 = syz_open_dev$vcsn(&(0x7f0000000540)='/dev/vcs#\x00', 0xd5, 0x70200) ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f0000000640)=0x20000000800) r5 = syz_open_dev$midi(&(0x7f00000008c0)='/dev/midi#\x00', 0xc00000000, 0x20400) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000004c0)={0x0, 0x5ed9}, &(0x7f0000000480)=0xffffffe2) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) r7 = socket(0xa, 0x1, 0x0) getpeername$inet(r4, &(0x7f0000000840)={0x0, 0x0, @multicast1}, &(0x7f00000002c0)=0xc2318b8493992447) close(0xffffffffffffffff) ioctl$int_out(r0, 0x40000005462, &(0x7f0000000040)) ioctl(r4, 0x8908, &(0x7f00000001c0)="602626dca880ee2c") setsockopt$sock_timeval(r7, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x10) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000900)=0xffffffffffffff69, 0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000440)=0x7fffffff, 0xffffffffffffffba) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000400), 0x4) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000680)={r6, @in={{0x2, 0x4e22, @multicast2}}}, 0x84) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000740)={0x74, 0x0, [0x8, 0xfffffffffffffffa, 0x8bd0, 0x3]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[]}}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') r9 = socket$inet(0x2, 0x4000000000000001, 0x100000000) bind$inet(r9, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r9, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendfile(r9, r8, &(0x7f0000000000)=0x10, 0x80000003) 09:18:07 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x70b5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2100000, &(0x7f0000000040), &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000280)) 09:18:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0), 0x0, &(0x7f0000001300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000004880)=ANY=[@ANYRESOCT, @ANYBLOB="1579835083f226e4d0ea924b8e5baac72faf9548de306fadefb5c6d68bc061e1d252ee9337626617e92d8c95ecc6843105203a8dc25053213a62c7cef2d083ab1be35a28d2ab14b9b482478c19a3d12d0c02100dd3ca6bb5ef5aeecfd35e15fdb00ae1b689bb5831409b3b8da9fad36e"], 0x87) clock_gettime(0x0, &(0x7f0000002680)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002500)=[{{&(0x7f0000000880)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a40)=""/66, 0x42}, {&(0x7f0000000ac0)=""/68, 0x44}], 0x2, &(0x7f0000000bc0)=""/98, 0x62}}, {{&(0x7f0000001240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001440)=""/126, 0x7e}], 0x1}}], 0x2, 0x0, &(0x7f00000026c0)={0x0, r2+10000000}) [ 84.054631] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 84.069288] bond0: cannot enslave bond to itself. 09:18:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "84652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 09:18:07 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKMODE={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 09:18:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r1, 0xf, &(0x7f0000fa4000)={0x0, r2}) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) removexattr(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)=@known='system.posix_acl_default\x00') 09:18:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000140)={&(0x7f00000017c0)={0x1c, 0x2c, 0x829, 0x0, 0x0, {0x3}, [@generic, @typed={0x8, 0x0, @u32}]}, 0x1c}}, 0x0) 09:18:07 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x70b5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2100000, &(0x7f0000000040), &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000280)) [ 84.143423] ntfs: (device loop7): parse_options(): NLS character set [ 84.143423] accyrillic not found. 09:18:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "84652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 09:18:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0), 0x0, &(0x7f0000001300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000004880)=ANY=[@ANYRESOCT, @ANYBLOB="1579835083f226e4d0ea924b8e5baac72faf9548de306fadefb5c6d68bc061e1d252ee9337626617e92d8c95ecc6843105203a8dc25053213a62c7cef2d083ab1be35a28d2ab14b9b482478c19a3d12d0c02100dd3ca6bb5ef5aeecfd35e15fdb00ae1b689bb5831409b3b8da9fad36e"], 0x87) clock_gettime(0x0, &(0x7f0000002680)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002500)=[{{&(0x7f0000000880)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a40)=""/66, 0x42}, {&(0x7f0000000ac0)=""/68, 0x44}], 0x2, &(0x7f0000000bc0)=""/98, 0x62}}, {{&(0x7f0000001240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001440)=""/126, 0x7e}], 0x1}}], 0x2, 0x0, &(0x7f00000026c0)={0x0, r2+10000000}) [ 84.220875] bond0: cannot enslave bond to itself. 09:18:07 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$setendian(0x14, 0x1) r1 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r2 = add_key(&(0x7f0000001840)='logon\x00', &(0x7f0000001880)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000500)=[{&(0x7f0000000940)="ea45ed0ce26d859d944dc17b99726e536ed2a84e81dd0f070dc1150edc9eb9adb2aceaff6c8ecfbd990ec16907c86dfd607c804c05b0f45af9aa0a238faee4a30fb609a369023e84f7e6bd88cafd78c56f40c2c29199af24", 0x58}], 0x1, r2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x806, 0x3fd) getsockopt$nfc_llcp(r3, 0x118, 0x1, &(0x7f00000005c0)=""/91, 0x5b) r4 = syz_open_dev$vcsn(&(0x7f0000000540)='/dev/vcs#\x00', 0xd5, 0x70200) ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f0000000640)=0x20000000800) r5 = syz_open_dev$midi(&(0x7f00000008c0)='/dev/midi#\x00', 0xc00000000, 0x20400) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000004c0)={0x0, 0x5ed9}, &(0x7f0000000480)=0xffffffe2) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) r7 = socket(0xa, 0x1, 0x0) getpeername$inet(r4, &(0x7f0000000840)={0x0, 0x0, @multicast1}, &(0x7f00000002c0)=0xc2318b8493992447) close(0xffffffffffffffff) ioctl$int_out(r0, 0x40000005462, &(0x7f0000000040)) ioctl(r4, 0x8908, &(0x7f00000001c0)="602626dca880ee2c") setsockopt$sock_timeval(r7, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x10) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000900)=0xffffffffffffff69, 0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000440)=0x7fffffff, 0xffffffffffffffba) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000400), 0x4) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000680)={r6, @in={{0x2, 0x4e22, @multicast2}}}, 0x84) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000740)={0x74, 0x0, [0x8, 0xfffffffffffffffa, 0x8bd0, 0x3]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[]}}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') r9 = socket$inet(0x2, 0x4000000000000001, 0x100000000) bind$inet(r9, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r9, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendfile(r9, r8, &(0x7f0000000000)=0x10, 0x80000003) [ 84.252657] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 84.272278] ntfs: (device loop7): parse_options(): NLS character set [ 84.272278] accyrillic not found. 09:18:07 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKMODE={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 09:18:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000140)=ANY=[]) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000540000/0x2000)=nil, &(0x7f0000479000/0x4000)=nil, 0x2000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl(r1, 0xc020660b, &(0x7f0000000000)) 09:18:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r1, 0xf, &(0x7f0000fa4000)={0x0, r2}) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) removexattr(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)=@known='system.posix_acl_default\x00') 09:18:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x803, 0x40) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r0, 0x0, &(0x7f0000000080)=0x2e3, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ipv6_route\x00') sendfile(r2, r3, &(0x7f00000002c0), 0x10000000000443) 09:18:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8dc, 0x10}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0x418, &(0x7f00001a7f05)=""/251}, 0x48) 09:18:07 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x70b5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2100000, &(0x7f0000000040), &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000280)) 09:18:07 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a00)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x1, 0x0) syz_mount_image$ntfs(&(0x7f0000000980)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f00000008c0)=[{&(0x7f00000005c0), 0x0, 0xfffffffffffffffc}, {&(0x7f0000000740)}, {&(0x7f00000007c0)}], 0x0, &(0x7f0000000580)={[{@nls={'nls', 0x3d, '\naccyrillic'}}]}) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, 0x84) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="cb", 0x1}], 0x1) [ 84.408306] bond0: cannot enslave bond to itself. 09:18:07 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$setendian(0x14, 0x1) r1 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r2 = add_key(&(0x7f0000001840)='logon\x00', &(0x7f0000001880)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000500)=[{&(0x7f0000000940)="ea45ed0ce26d859d944dc17b99726e536ed2a84e81dd0f070dc1150edc9eb9adb2aceaff6c8ecfbd990ec16907c86dfd607c804c05b0f45af9aa0a238faee4a30fb609a369023e84f7e6bd88cafd78c56f40c2c29199af24", 0x58}], 0x1, r2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x806, 0x3fd) getsockopt$nfc_llcp(r3, 0x118, 0x1, &(0x7f00000005c0)=""/91, 0x5b) r4 = syz_open_dev$vcsn(&(0x7f0000000540)='/dev/vcs#\x00', 0xd5, 0x70200) ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f0000000640)=0x20000000800) r5 = syz_open_dev$midi(&(0x7f00000008c0)='/dev/midi#\x00', 0xc00000000, 0x20400) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000004c0)={0x0, 0x5ed9}, &(0x7f0000000480)=0xffffffe2) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) r7 = socket(0xa, 0x1, 0x0) getpeername$inet(r4, &(0x7f0000000840)={0x0, 0x0, @multicast1}, &(0x7f00000002c0)=0xc2318b8493992447) close(0xffffffffffffffff) ioctl$int_out(r0, 0x40000005462, &(0x7f0000000040)) ioctl(r4, 0x8908, &(0x7f00000001c0)="602626dca880ee2c") setsockopt$sock_timeval(r7, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x10) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000900)=0xffffffffffffff69, 0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000440)=0x7fffffff, 0xffffffffffffffba) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000400), 0x4) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000680)={r6, @in={{0x2, 0x4e22, @multicast2}}}, 0x84) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000740)={0x74, 0x0, [0x8, 0xfffffffffffffffa, 0x8bd0, 0x3]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[]}}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') r9 = socket$inet(0x2, 0x4000000000000001, 0x100000000) bind$inet(r9, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r9, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendfile(r9, r8, &(0x7f0000000000)=0x10, 0x80000003) 09:18:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) io_getevents(r2, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0)) close(r1) socket$l2tp(0x18, 0x1, 0x1) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) 09:18:07 executing program 6: socketpair(0x4, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x20, 0x40000000000004, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000040)='<', &(0x7f00000002c0)=""/206}, 0x18) 09:18:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000140)=ANY=[]) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000540000/0x2000)=nil, &(0x7f0000479000/0x4000)=nil, 0x2000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl(r1, 0xc020660b, &(0x7f0000000000)) 09:18:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x803, 0x40) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r0, 0x0, &(0x7f0000000080)=0x2e3, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ipv6_route\x00') sendfile(r2, r3, &(0x7f00000002c0), 0x10000000000443) 09:18:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000140)=ANY=[]) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000540000/0x2000)=nil, &(0x7f0000479000/0x4000)=nil, 0x2000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl(r1, 0xc020660b, &(0x7f0000000000)) 09:18:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'bond0\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 84.585850] ntfs: (device loop7): parse_options(): NLS character set [ 84.585850] accyrillic not found. 09:18:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) io_getevents(r2, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0)) close(r1) socket$l2tp(0x18, 0x1, 0x1) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) 09:18:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8dc, 0x10}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0x418, &(0x7f00001a7f05)=""/251}, 0x48) 09:18:07 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a00)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x1, 0x0) syz_mount_image$ntfs(&(0x7f0000000980)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f00000008c0)=[{&(0x7f00000005c0), 0x0, 0xfffffffffffffffc}, {&(0x7f0000000740)}, {&(0x7f00000007c0)}], 0x0, &(0x7f0000000580)={[{@nls={'nls', 0x3d, '\naccyrillic'}}]}) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, 0x84) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="cb", 0x1}], 0x1) 09:18:07 executing program 6: socketpair(0x4, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x20, 0x40000000000004, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000040)='<', &(0x7f00000002c0)=""/206}, 0x18) 09:18:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000140)=ANY=[]) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000540000/0x2000)=nil, &(0x7f0000479000/0x4000)=nil, 0x2000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl(r1, 0xc020660b, &(0x7f0000000000)) 09:18:07 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f000000cffc), 0x4877e7) [ 84.718539] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns 09:18:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x803, 0x40) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r0, 0x0, &(0x7f0000000080)=0x2e3, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ipv6_route\x00') sendfile(r2, r3, &(0x7f00000002c0), 0x10000000000443) 09:18:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8dc, 0x10}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0x418, &(0x7f00001a7f05)=""/251}, 0x48) 09:18:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) io_getevents(r2, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0)) close(r1) socket$l2tp(0x18, 0x1, 0x1) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) 09:18:07 executing program 6: socketpair(0x4, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x20, 0x40000000000004, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000040)='<', &(0x7f00000002c0)=""/206}, 0x18) [ 84.816002] ntfs: (device loop7): parse_options(): NLS character set [ 84.816002] accyrillic not found. [ 84.828209] kvm: pic: level sensitive irq not supported 09:18:08 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f000000cffc), 0x4877e7) [ 84.828407] kvm: pic: single mode not supported [ 84.868317] kvm: pic: single mode not supported 09:18:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) io_getevents(r2, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0)) close(r1) socket$l2tp(0x18, 0x1, 0x1) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) 09:18:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) fstat(0xffffffffffffffff, &(0x7f0000006e00)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000006e80), 0x4) r1 = creat(&(0x7f0000000240)='./file0/file0\x00', 0x0) ioctl$KVM_GET_REGS(r1, 0x40047211, &(0x7f0000000080)) 09:18:08 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a00)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x1, 0x0) syz_mount_image$ntfs(&(0x7f0000000980)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f00000008c0)=[{&(0x7f00000005c0), 0x0, 0xfffffffffffffffc}, {&(0x7f0000000740)}, {&(0x7f00000007c0)}], 0x0, &(0x7f0000000580)={[{@nls={'nls', 0x3d, '\naccyrillic'}}]}) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, 0x84) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="cb", 0x1}], 0x1) 09:18:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8dc, 0x10}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0x418, &(0x7f00001a7f05)=""/251}, 0x48) [ 84.873198] kvm: pic: level sensitive irq not supported [ 84.941072] kvm: pic: level sensitive irq not supported [ 84.971229] kvm: pic: single mode not supported [ 84.976664] kvm: pic: level sensitive irq not supported [ 85.080518] kvm: pic: level sensitive irq not supported [ 85.091163] ntfs: (device loop7): parse_options(): NLS character set [ 85.091163] accyrillic not found. [ 85.108286] kvm: pic: level sensitive irq not supported [ 85.110074] kvm: pic: level sensitive irq not supported [ 85.147772] kvm: pic: level sensitive irq not supported [ 85.155265] kvm: pic: single mode not supported [ 85.160727] kvm: pic: level sensitive irq not supported [ 85.169860] kvm: pic: level sensitive irq not supported [ 85.183568] kvm: pic: single mode not supported [ 85.191013] kvm: pic: single mode not supported [ 85.196411] kvm: pic: single mode not supported [ 85.202243] kvm: pic: single mode not supported [ 85.255048] kvm: pic: single mode not supported 09:18:08 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f000000cffc), 0x4877e7) 09:18:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x803, 0x40) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r0, 0x0, &(0x7f0000000080)=0x2e3, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ipv6_route\x00') sendfile(r2, r3, &(0x7f00000002c0), 0x10000000000443) 09:18:08 executing program 6: socketpair(0x4, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x20, 0x40000000000004, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000040)='<', &(0x7f00000002c0)=""/206}, 0x18) 09:18:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) fstat(0xffffffffffffffff, &(0x7f0000006e00)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000006e80), 0x4) r1 = creat(&(0x7f0000000240)='./file0/file0\x00', 0x0) ioctl$KVM_GET_REGS(r1, 0x40047211, &(0x7f0000000080)) 09:18:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'bond0\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:18:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") creat(&(0x7f0000109ffc)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=@known='security.evm\x00', &(0x7f0000000280)='security.capabimity\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='security.evm\x00', &(0x7f0000000040)="6f428f4ed4df5a5ec3dd6cb73edd1f725d5d076eff1f4072e20ea03bc51975bef82d028a2511817051239c742a9036222207f050995a9945d6cec12644", 0x227, 0x0) 09:18:08 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x7ffff000}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x2034afa5}], 0x1, 0x0) 09:18:08 executing program 7: r0 = socket$inet(0x10, 0x3, 0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001640)="24000000100007031dfffd946fa2830020200a0009000300001c85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 09:18:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000240)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"69726c61bd15000000001f0000000020", 0x1012}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'bcsh0\x00', 0x2401}) 09:18:08 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f000000cffc), 0x4877e7) 09:18:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") creat(&(0x7f0000109ffc)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=@known='security.evm\x00', &(0x7f0000000280)='security.capabimity\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='security.evm\x00', &(0x7f0000000040)="6f428f4ed4df5a5ec3dd6cb73edd1f725d5d076eff1f4072e20ea03bc51975bef82d028a2511817051239c742a9036222207f050995a9945d6cec12644", 0x227, 0x0) [ 85.260069] kvm: pic: single mode not supported [ 85.424121] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns 09:18:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) fstat(0xffffffffffffffff, &(0x7f0000006e00)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000006e80), 0x4) r1 = creat(&(0x7f0000000240)='./file0/file0\x00', 0x0) ioctl$KVM_GET_REGS(r1, 0x40047211, &(0x7f0000000080)) 09:18:08 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000080)=0x64100000, 0x4) 09:18:08 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c4c2290c670866bad004b00feef2afc744240049e3aaf0c7442402910d1643c7442406000000000f011c24c4e1dc5c6f290f05c4e1fd593488d070a76666f2f20f20540f30", 0x45}], 0x1, 0x0, &(0x7f0000000180), 0x0) 09:18:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000140)=ANY=[@ANYBLOB="0d7f0c17dcc20d4cbe7e489b000075356ba9ca63df265710a00fba50d0699826e512ab3af363af661727cae8c3f902f84f37eab52b1e4cd7135591d5f4dbdb5f89558df17ca8d72f0be2a6ac46f480ca1ea1d7cc"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000080)={0x7, 0x7f}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x103000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:18:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'bond0\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:18:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000240)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"69726c61bd15000000001f0000000020", 0x1012}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'bcsh0\x00', 0x2401}) 09:18:08 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000080)=0x64100000, 0x4) 09:18:08 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045003, &(0x7f0000006000)) 09:18:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) fstat(0xffffffffffffffff, &(0x7f0000006e00)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000006e80), 0x4) r1 = creat(&(0x7f0000000240)='./file0/file0\x00', 0x0) ioctl$KVM_GET_REGS(r1, 0x40047211, &(0x7f0000000080)) 09:18:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") creat(&(0x7f0000109ffc)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=@known='security.evm\x00', &(0x7f0000000280)='security.capabimity\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='security.evm\x00', &(0x7f0000000040)="6f428f4ed4df5a5ec3dd6cb73edd1f725d5d076eff1f4072e20ea03bc51975bef82d028a2511817051239c742a9036222207f050995a9945d6cec12644", 0x227, 0x0) 09:18:08 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c4c2290c670866bad004b00feef2afc744240049e3aaf0c7442402910d1643c7442406000000000f011c24c4e1dc5c6f290f05c4e1fd593488d070a76666f2f20f20540f30", 0x45}], 0x1, 0x0, &(0x7f0000000180), 0x0) 09:18:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'bond0\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:18:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000240)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"69726c61bd15000000001f0000000020", 0x1012}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'bcsh0\x00', 0x2401}) 09:18:08 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000080)=0x64100000, 0x4) 09:18:08 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045003, &(0x7f0000006000)) 09:18:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") creat(&(0x7f0000109ffc)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=@known='security.evm\x00', &(0x7f0000000280)='security.capabimity\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='security.evm\x00', &(0x7f0000000040)="6f428f4ed4df5a5ec3dd6cb73edd1f725d5d076eff1f4072e20ea03bc51975bef82d028a2511817051239c742a9036222207f050995a9945d6cec12644", 0x227, 0x0) 09:18:08 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c4c2290c670866bad004b00feef2afc744240049e3aaf0c7442402910d1643c7442406000000000f011c24c4e1dc5c6f290f05c4e1fd593488d070a76666f2f20f20540f30", 0x45}], 0x1, 0x0, &(0x7f0000000180), 0x0) 09:18:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000140)=ANY=[@ANYBLOB="0d7f0c17dcc20d4cbe7e489b000075356ba9ca63df265710a00fba50d0699826e512ab3af363af661727cae8c3f902f84f37eab52b1e4cd7135591d5f4dbdb5f89558df17ca8d72f0be2a6ac46f480ca1ea1d7cc"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000080)={0x7, 0x7f}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x103000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:18:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c4c2290c670866bad004b00feef2afc744240049e3aaf0c7442402910d1643c7442406000000000f011c24c4e1dc5c6f290f05c4e1fd593488d070a76666f2f20f20540f30", 0x45}], 0x1, 0x0, &(0x7f0000000180), 0x0) 09:18:08 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000080)=0x64100000, 0x4) 09:18:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000240)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"69726c61bd15000000001f0000000020", 0x1012}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'bcsh0\x00', 0x2401}) 09:18:09 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045003, &(0x7f0000006000)) [ 85.881811] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns 09:18:09 executing program 0: r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0105303, &(0x7f0000000080)) 09:18:09 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xb, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) 09:18:09 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c4c2290c670866bad004b00feef2afc744240049e3aaf0c7442402910d1643c7442406000000000f011c24c4e1dc5c6f290f05c4e1fd593488d070a76666f2f20f20540f30", 0x45}], 0x1, 0x0, &(0x7f0000000180), 0x0) 09:18:09 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c4c2290c670866bad004b00feef2afc744240049e3aaf0c7442402910d1643c7442406000000000f011c24c4e1dc5c6f290f05c4e1fd593488d070a76666f2f20f20540f30", 0x45}], 0x1, 0x0, &(0x7f0000000180), 0x0) 09:18:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000140)=ANY=[@ANYBLOB="0d7f0c17dcc20d4cbe7e489b000075356ba9ca63df265710a00fba50d0699826e512ab3af363af661727cae8c3f902f84f37eab52b1e4cd7135591d5f4dbdb5f89558df17ca8d72f0be2a6ac46f480ca1ea1d7cc"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000080)={0x7, 0x7f}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x103000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:18:09 executing program 0: r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0105303, &(0x7f0000000080)) 09:18:09 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f000082ef0a)=""/246) 09:18:09 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045003, &(0x7f0000006000)) 09:18:09 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c4c2290c670866bad004b00feef2afc744240049e3aaf0c7442402910d1643c7442406000000000f011c24c4e1dc5c6f290f05c4e1fd593488d070a76666f2f20f20540f30", 0x45}], 0x1, 0x0, &(0x7f0000000180), 0x0) 09:18:09 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xb, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) 09:18:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty=0x4000}], 0x10) close(r2) close(r1) 09:18:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000140)=ANY=[@ANYBLOB="0d7f0c17dcc20d4cbe7e489b000075356ba9ca63df265710a00fba50d0699826e512ab3af363af661727cae8c3f902f84f37eab52b1e4cd7135591d5f4dbdb5f89558df17ca8d72f0be2a6ac46f480ca1ea1d7cc"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000080)={0x7, 0x7f}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x103000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:18:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x0, 0x0, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8}]}]}, 0x20}}, 0x0) 09:18:09 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xb, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) 09:18:09 executing program 0: r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0105303, &(0x7f0000000080)) 09:18:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x19, &(0x7f0000000480)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) 09:18:09 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f000082ef0a)=""/246) [ 86.449873] netlink: 'syz-executor5': attribute type 1 has an invalid length. 09:18:09 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1000000000001, 0x3, 0x4, 0xffffffdf00000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000280), &(0x7f0000000280)="ac2f8f"}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000200), &(0x7f00000004c0)=""/231}, 0x18) 09:18:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty=0x4000}], 0x10) close(r2) close(r1) 09:18:09 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000200)}, 0x10) 09:18:09 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xb, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) 09:18:09 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f000082ef0a)=""/246) [ 86.535751] netlink: 'syz-executor5': attribute type 1 has an invalid length. 09:18:09 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000001700000000f4ff009500000000000000"], &(0x7f0000000200)="73797a6b616c6c65722c493d6c2b78db01beb8234b8301e2918b8b33e703f173263d15127d1c5309a0593d0f6dbe9cd5434619dfff6e61ba74ed3776315503f2d22b3ecd7a62819bc2345afd348344bed224a114267fd4cd1e55f8cf69c16cfffd3a4dc7721aacdfb55e39d507f86531752d2affc30318f5da65be34374a24f6", 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000002f00)={&(0x7f0000000000), 0xc, &(0x7f0000002ec0)={&(0x7f0000002c40)={0x14, r2, 0x3}, 0x14}}, 0x0) 09:18:09 executing program 0: r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0105303, &(0x7f0000000080)) 09:18:09 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1000000000001, 0x3, 0x4, 0xffffffdf00000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000280), &(0x7f0000000280)="ac2f8f"}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000200), &(0x7f00000004c0)=""/231}, 0x18) 09:18:09 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000200)}, 0x10) 09:18:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x0, 0x0, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8}]}]}, 0x20}}, 0x0) 09:18:09 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x75d) sendto(r0, &(0x7f0000000000)='N', 0x1, 0xfffffffffffffffe, &(0x7f0000000040)=@sco, 0x80) sendmsg$kcm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="8c", 0x1}], 0x1, &(0x7f0000001780)}, 0x0) 09:18:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty=0x4000}], 0x10) close(r2) close(r1) 09:18:09 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f000082ef0a)=""/246) 09:18:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x119, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, [0x14]}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x6}}]}, 0x40}}, 0x0) 09:18:09 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000001700000000f4ff009500000000000000"], &(0x7f0000000200)="73797a6b616c6c65722c493d6c2b78db01beb8234b8301e2918b8b33e703f173263d15127d1c5309a0593d0f6dbe9cd5434619dfff6e61ba74ed3776315503f2d22b3ecd7a62819bc2345afd348344bed224a114267fd4cd1e55f8cf69c16cfffd3a4dc7721aacdfb55e39d507f86531752d2affc30318f5da65be34374a24f6", 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000002f00)={&(0x7f0000000000), 0xc, &(0x7f0000002ec0)={&(0x7f0000002c40)={0x14, r2, 0x3}, 0x14}}, 0x0) 09:18:09 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000200)}, 0x10) 09:18:09 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1000000000001, 0x3, 0x4, 0xffffffdf00000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000280), &(0x7f0000000280)="ac2f8f"}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000200), &(0x7f00000004c0)=""/231}, 0x18) [ 86.747221] netlink: 'syz-executor5': attribute type 1 has an invalid length. 09:18:09 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x75d) sendto(r0, &(0x7f0000000000)='N', 0x1, 0xfffffffffffffffe, &(0x7f0000000040)=@sco, 0x80) sendmsg$kcm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="8c", 0x1}], 0x1, &(0x7f0000001780)}, 0x0) 09:18:09 executing program 7: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x75d) sendto(r0, &(0x7f0000000000)='N', 0x1, 0xfffffffffffffffe, &(0x7f0000000040)=@sco, 0x80) sendmsg$kcm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="8c", 0x1}], 0x1, &(0x7f0000001780)}, 0x0) 09:18:09 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000200)}, 0x10) 09:18:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x119, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, [0x14]}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x6}}]}, 0x40}}, 0x0) 09:18:09 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1000000000001, 0x3, 0x4, 0xffffffdf00000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000280), &(0x7f0000000280)="ac2f8f"}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000200), &(0x7f00000004c0)=""/231}, 0x18) 09:18:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x0, 0x0, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8}]}]}, 0x20}}, 0x0) 09:18:09 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000001700000000f4ff009500000000000000"], &(0x7f0000000200)="73797a6b616c6c65722c493d6c2b78db01beb8234b8301e2918b8b33e703f173263d15127d1c5309a0593d0f6dbe9cd5434619dfff6e61ba74ed3776315503f2d22b3ecd7a62819bc2345afd348344bed224a114267fd4cd1e55f8cf69c16cfffd3a4dc7721aacdfb55e39d507f86531752d2affc30318f5da65be34374a24f6", 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000002f00)={&(0x7f0000000000), 0xc, &(0x7f0000002ec0)={&(0x7f0000002c40)={0x14, r2, 0x3}, 0x14}}, 0x0) 09:18:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @empty=0x4000}], 0x10) close(r2) close(r1) 09:18:10 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x75d) sendto(r0, &(0x7f0000000000)='N', 0x1, 0xfffffffffffffffe, &(0x7f0000000040)=@sco, 0x80) sendmsg$kcm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="8c", 0x1}], 0x1, &(0x7f0000001780)}, 0x0) 09:18:10 executing program 7: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x75d) sendto(r0, &(0x7f0000000000)='N', 0x1, 0xfffffffffffffffe, &(0x7f0000000040)=@sco, 0x80) sendmsg$kcm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="8c", 0x1}], 0x1, &(0x7f0000001780)}, 0x0) [ 86.910357] netlink: 'syz-executor5': attribute type 1 has an invalid length. 09:18:10 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000001700000000f4ff009500000000000000"], &(0x7f0000000200)="73797a6b616c6c65722c493d6c2b78db01beb8234b8301e2918b8b33e703f173263d15127d1c5309a0593d0f6dbe9cd5434619dfff6e61ba74ed3776315503f2d22b3ecd7a62819bc2345afd348344bed224a114267fd4cd1e55f8cf69c16cfffd3a4dc7721aacdfb55e39d507f86531752d2affc30318f5da65be34374a24f6", 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000002f00)={&(0x7f0000000000), 0xc, &(0x7f0000002ec0)={&(0x7f0000002c40)={0x14, r2, 0x3}, 0x14}}, 0x0) 09:18:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x119, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, [0x14]}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x6}}]}, 0x40}}, 0x0) 09:18:10 executing program 1: r0 = memfd_create(&(0x7f0000049000)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, "636c69656e743100fffc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008", 0xffffffff80000004, "7fd82d5e02ca3901", "88e7ed00007fff051eaa961ef6c6992b6900000000f9ffff7711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0xffffffbd) 09:18:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x0, 0x0, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8}]}]}, 0x20}}, 0x0) 09:18:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000040)='<'}) 09:18:10 executing program 7: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x75d) sendto(r0, &(0x7f0000000000)='N', 0x1, 0xfffffffffffffffe, &(0x7f0000000040)=@sco, 0x80) sendmsg$kcm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="8c", 0x1}], 0x1, &(0x7f0000001780)}, 0x0) 09:18:10 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x75d) sendto(r0, &(0x7f0000000000)='N', 0x1, 0xfffffffffffffffe, &(0x7f0000000040)=@sco, 0x80) sendmsg$kcm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="8c", 0x1}], 0x1, &(0x7f0000001780)}, 0x0) 09:18:10 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/90, &(0x7f0000000080)=0x5a) [ 87.053516] netlink: 'syz-executor5': attribute type 1 has an invalid length. 09:18:10 executing program 2: r0 = socket(0x1e, 0x805, 0x0) listen(r0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 09:18:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x119, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, [0x14]}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x6}}]}, 0x40}}, 0x0) 09:18:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000040)='<'}) 09:18:10 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/90, &(0x7f0000000080)=0x5a) 09:18:10 executing program 2: r0 = socket(0x1e, 0x805, 0x0) listen(r0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 09:18:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f6e01742f697076342f76732f636f6e6e5f72657573825f0500000000", 0x2, 0x0) quotactl(0x2080000201, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)) 09:18:10 executing program 1: r0 = memfd_create(&(0x7f0000049000)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, "636c69656e743100fffc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008", 0xffffffff80000004, "7fd82d5e02ca3901", "88e7ed00007fff051eaa961ef6c6992b6900000000f9ffff7711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0xffffffbd) 09:18:10 executing program 7: socketpair$unix(0x1, 0x800000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) sendto(r1, &(0x7f0000000980)="e9", 0x1, 0x0, 0x0, 0x0) recvfrom$llc(r2, &(0x7f0000000080)=""/244, 0xf4, 0x40000100, 0x0, 0x0) sendmsg(r0, &(0x7f000003c000)={0x0, 0x0, &(0x7f000005dfe0)=[{&(0x7f000002ff67)='}', 0x1}], 0x1, &(0x7f000003ae30)}, 0x0) close(r0) 09:18:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000040)='<'}) 09:18:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/fib_trie\x00') sendfile(r1, r2, &(0x7f0000000040), 0x10000000000441) 09:18:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd0000001000010009040800410400000000fcff", 0x58}], 0x1) 09:18:10 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/90, &(0x7f0000000080)=0x5a) 09:18:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f6e01742f697076342f76732f636f6e6e5f72657573825f0500000000", 0x2, 0x0) quotactl(0x2080000201, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)) 09:18:10 executing program 2: r0 = socket(0x1e, 0x805, 0x0) listen(r0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 09:18:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000040)='<'}) 09:18:10 executing program 7: socketpair$unix(0x1, 0x800000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) sendto(r1, &(0x7f0000000980)="e9", 0x1, 0x0, 0x0, 0x0) recvfrom$llc(r2, &(0x7f0000000080)=""/244, 0xf4, 0x40000100, 0x0, 0x0) sendmsg(r0, &(0x7f000003c000)={0x0, 0x0, &(0x7f000005dfe0)=[{&(0x7f000002ff67)='}', 0x1}], 0x1, &(0x7f000003ae30)}, 0x0) close(r0) 09:18:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd0000001000010009040800410400000000fcff", 0x58}], 0x1) 09:18:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/fib_trie\x00') sendfile(r1, r2, &(0x7f0000000040), 0x10000000000441) 09:18:10 executing program 2: r0 = socket(0x1e, 0x805, 0x0) listen(r0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 09:18:10 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/90, &(0x7f0000000080)=0x5a) 09:18:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f6e01742f697076342f76732f636f6e6e5f72657573825f0500000000", 0x2, 0x0) quotactl(0x2080000201, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)) 09:18:10 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x400000001, 0x4) recvmmsg(r3, &(0x7f0000008300)=[{{&(0x7f0000004a80)=@rc, 0x80, &(0x7f0000007f00), 0x0, &(0x7f0000007f80)=""/229, 0xe5}}, {{0x0, 0x0, &(0x7f00000081c0), 0x0, &(0x7f0000008200)=""/222, 0xde}}], 0x2, 0x0, &(0x7f0000008440)={0x0, 0x989680}) 09:18:10 executing program 1: r0 = memfd_create(&(0x7f0000049000)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, "636c69656e743100fffc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008", 0xffffffff80000004, "7fd82d5e02ca3901", "88e7ed00007fff051eaa961ef6c6992b6900000000f9ffff7711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0xffffffbd) 09:18:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd0000001000010009040800410400000000fcff", 0x58}], 0x1) 09:18:10 executing program 7: socketpair$unix(0x1, 0x800000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) sendto(r1, &(0x7f0000000980)="e9", 0x1, 0x0, 0x0, 0x0) recvfrom$llc(r2, &(0x7f0000000080)=""/244, 0xf4, 0x40000100, 0x0, 0x0) sendmsg(r0, &(0x7f000003c000)={0x0, 0x0, &(0x7f000005dfe0)=[{&(0x7f000002ff67)='}', 0x1}], 0x1, &(0x7f000003ae30)}, 0x0) close(r0) 09:18:10 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)={0x8}, 0x0) 09:18:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f6e01742f697076342f76732f636f6e6e5f72657573825f0500000000", 0x2, 0x0) quotactl(0x2080000201, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)) 09:18:10 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10) 09:18:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/fib_trie\x00') sendfile(r1, r2, &(0x7f0000000040), 0x10000000000441) 09:18:10 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)={0x8}, 0x0) 09:18:10 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x400000001, 0x4) recvmmsg(r3, &(0x7f0000008300)=[{{&(0x7f0000004a80)=@rc, 0x80, &(0x7f0000007f00), 0x0, &(0x7f0000007f80)=""/229, 0xe5}}, {{0x0, 0x0, &(0x7f00000081c0), 0x0, &(0x7f0000008200)=""/222, 0xde}}], 0x2, 0x0, &(0x7f0000008440)={0x0, 0x989680}) 09:18:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd0000001000010009040800410400000000fcff", 0x58}], 0x1) 09:18:10 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10) 09:18:10 executing program 5: r0 = socket$netlink(0xa, 0x6, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10d, 0xf, &(0x7f0000001ffc), 0xe69a333) 09:18:10 executing program 7: socketpair$unix(0x1, 0x800000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) sendto(r1, &(0x7f0000000980)="e9", 0x1, 0x0, 0x0, 0x0) recvfrom$llc(r2, &(0x7f0000000080)=""/244, 0xf4, 0x40000100, 0x0, 0x0) sendmsg(r0, &(0x7f000003c000)={0x0, 0x0, &(0x7f000005dfe0)=[{&(0x7f000002ff67)='}', 0x1}], 0x1, &(0x7f000003ae30)}, 0x0) close(r0) 09:18:10 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)={0x8}, 0x0) 09:18:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/fib_trie\x00') sendfile(r1, r2, &(0x7f0000000040), 0x10000000000441) 09:18:10 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10) 09:18:10 executing program 1: r0 = memfd_create(&(0x7f0000049000)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, "636c69656e743100fffc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008", 0xffffffff80000004, "7fd82d5e02ca3901", "88e7ed00007fff051eaa961ef6c6992b6900000000f9ffff7711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0xffffffbd) 09:18:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8004, 0x37, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000100)=0x1) dup3(r1, r2, 0x0) 09:18:10 executing program 5: r0 = socket$netlink(0xa, 0x6, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10d, 0xf, &(0x7f0000001ffc), 0xe69a333) 09:18:10 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x400000001, 0x4) recvmmsg(r3, &(0x7f0000008300)=[{{&(0x7f0000004a80)=@rc, 0x80, &(0x7f0000007f00), 0x0, &(0x7f0000007f80)=""/229, 0xe5}}, {{0x0, 0x0, &(0x7f00000081c0), 0x0, &(0x7f0000008200)=""/222, 0xde}}], 0x2, 0x0, &(0x7f0000008440)={0x0, 0x989680}) 09:18:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc80700145f8f764070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x2, 0x0) 09:18:10 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10) 09:18:10 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)={0x8}, 0x0) 09:18:10 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x400000001, 0x4) recvmmsg(r3, &(0x7f0000008300)=[{{&(0x7f0000004a80)=@rc, 0x80, &(0x7f0000007f00), 0x0, &(0x7f0000007f80)=""/229, 0xe5}}, {{0x0, 0x0, &(0x7f00000081c0), 0x0, &(0x7f0000008200)=""/222, 0xde}}], 0x2, 0x0, &(0x7f0000008440)={0x0, 0x989680}) 09:18:11 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)={[{@heap='heap'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 87.862928] ion_buffer_destroy: buffer still mapped in the kernel 09:18:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0x7, 0x4) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000000)="130000001000ffdde200f49ff60f050000230a009d0000001100c53022e5f9ec364fe86bc337747a04cb1c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db75411543e1226408e88cac1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e5de7e4f28bca763acd06f40ad03226af559bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c000000000000000000000000000000", 0xb1) 09:18:11 executing program 0: r0 = inotify_init1(0x0) r1 = getpid() fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x5, 0xffffffffffffffff, &(0x7f0000000340)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x0, 0x0) 09:18:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc80700145f8f764070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x2, 0x0) 09:18:11 executing program 5: r0 = socket$netlink(0xa, 0x6, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10d, 0xf, &(0x7f0000001ffc), 0xe69a333) 09:18:11 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f00000004c0)='./control\x00', 0x0) creat(&(0x7f0000000280)='./control/file0\x00', 0x0) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') 09:18:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000), 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1}, {@in6=@loopback, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 87.984761] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 87.991891] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 09:18:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0x7, 0x4) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000000)="130000001000ffdde200f49ff60f050000230a009d0000001100c53022e5f9ec364fe86bc337747a04cb1c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db75411543e1226408e88cac1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e5de7e4f28bca763acd06f40ad03226af559bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c000000000000000000000000000000", 0xb1) [ 88.073837] attempt to access beyond end of device [ 88.078928] loop2: rw=12288, want=8200, limit=20 [ 88.117402] kasan: CONFIG_KASAN_INLINE enabled [ 88.122117] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 88.129508] general protection fault: 0000 [#1] SMP KASAN [ 88.135059] CPU: 1 PID: 7108 Comm: syz-executor2 Not tainted 4.18.0-rc7-next-20180801+ #29 [ 88.143454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.152825] RIP: 0010:validate_checkpoint+0x66d/0xec0 [ 88.158032] Code: e8 58 05 7f fe 4c 8d 6b 80 4d 8d 74 24 08 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 c6 04 02 00 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 f4 06 00 00 4c 89 ea 4d 8b 7c 24 08 48 b8 00 00 [ 88.176923] RSP: 0018:ffff88019a11ebe8 EFLAGS: 00010246 [ 88.182282] RAX: dffffc0000000000 RBX: ffff88019a11ef30 RCX: ffffc90003610000 [ 88.189561] RDX: 0000000000000000 RSI: ffffffff82fd9658 RDI: 0000000000000005 [ 88.196820] RBP: ffff88019a11ef58 R08: ffff88019ad86340 R09: fffff94000e4ad36 [ 88.204077] R10: fffff94000e4ad36 R11: ffffea00072569b7 R12: fffffffffffffffb [ 88.211332] R13: ffff88019a11eeb0 R14: 0000000000000003 R15: ffff880192178280 [ 88.218595] FS: 00007f8e6d7b2700(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 [ 88.226809] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.232679] CR2: 00007ffe17993519 CR3: 00000001cbc07000 CR4: 00000000001406e0 [ 88.239936] DR0: 000000000000b8c4 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.247189] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.254441] Call Trace: [ 88.257029] ? get_checkpoint_version+0x620/0x620 [ 88.261863] ? save_stack+0xa9/0xd0 [ 88.265476] ? save_stack+0x43/0xd0 [ 88.269177] ? kasan_kmalloc+0xc4/0xe0 [ 88.273053] ? __kmalloc+0x14e/0x760 [ 88.276761] ? f2fs_get_valid_checkpoint+0x390/0x1ec0 [ 88.281938] ? f2fs_fill_super+0x2d42/0x8110 [ 88.286333] ? mount_bdev+0x314/0x3e0 [ 88.290118] ? f2fs_mount+0x3c/0x50 [ 88.293736] ? vfs_get_tree+0x1cb/0x5c0 [ 88.297699] ? do_mount+0x6f2/0x1e20 [ 88.301399] ? ksys_mount+0x12d/0x140 [ 88.305184] ? __x64_sys_mount+0xbe/0x150 [ 88.309318] ? do_syscall_64+0x1b9/0x820 [ 88.313367] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 88.318728] ? lock_acquire+0x1e4/0x540 [ 88.322689] ? cache_grow_end.part.37+0x95/0x170 [ 88.327433] ? lock_downgrade+0x8f0/0x8f0 [ 88.331571] ? kasan_check_read+0x11/0x20 [ 88.335708] ? do_raw_spin_unlock+0xa7/0x2f0 [ 88.340102] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 88.344672] ? kasan_check_write+0x14/0x20 [ 88.348893] ? do_raw_spin_lock+0xc1/0x200 [ 88.353114] ? kasan_unpoison_shadow+0x35/0x50 [ 88.357680] ? kasan_kmalloc+0xc4/0xe0 [ 88.361556] ? __kmalloc+0x315/0x760 [ 88.365261] ? f2fs_get_valid_checkpoint+0x390/0x1ec0 [ 88.370441] f2fs_get_valid_checkpoint+0x436/0x1ec0 [ 88.375450] ? _raw_spin_unlock+0x22/0x30 [ 88.379588] ? f2fs_recover_orphan_inodes+0x1180/0x1180 [ 88.384942] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 88.390466] ? f2fs_iget+0x4f5/0x4fa0 [ 88.394259] ? lock_downgrade+0x8f0/0x8f0 [ 88.398393] ? lock_downgrade+0x8f0/0x8f0 [ 88.402535] ? f2fs_inode_chksum_set+0xf0/0xf0 [ 88.407101] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 88.411675] ? zap_class+0x740/0x740 [ 88.415381] ? trace_hardirqs_on+0xd/0x10 [ 88.419526] ? lock_acquire+0x1e4/0x540 [ 88.423488] ? debug_object_activate+0x41a/0x690 [ 88.428231] ? lock_downgrade+0x8f0/0x8f0 [ 88.432362] ? save_stack+0x43/0xd0 [ 88.435981] ? kasan_check_read+0x11/0x20 [ 88.440125] ? lock_acquire+0x1e4/0x540 [ 88.444087] ? __percpu_counter_init+0x2ad/0x370 [ 88.448831] ? lock_downgrade+0x8f0/0x8f0 [ 88.452967] ? kasan_check_read+0x11/0x20 [ 88.457105] ? do_raw_spin_unlock+0xa7/0x2f0 [ 88.461501] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 88.466071] ? kasan_check_write+0x14/0x20 [ 88.470293] ? do_raw_spin_lock+0xc1/0x200 [ 88.474524] ? trace_hardirqs_on+0xd/0x10 [ 88.478662] ? __percpu_counter_init+0x2b2/0x370 [ 88.483405] ? percpu_counter_cpu_dead+0x1c0/0x1c0 [ 88.488332] ? __init_waitqueue_head+0x9e/0x150 [ 88.492990] ? init_wait_entry+0x1c0/0x1c0 [ 88.497218] f2fs_fill_super+0x2d42/0x8110 [ 88.501441] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 88.506461] ? f2fs_commit_super+0x400/0x400 [ 88.510858] ? prealloc_shrinker+0x231/0x4a0 [ 88.515251] ? __init_waitqueue_head+0x9e/0x150 [ 88.519909] ? check_same_owner+0x340/0x340 [ 88.524218] ? __lockdep_init_map+0x105/0x590 [ 88.528701] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 88.533704] ? widen_string+0xe0/0x2e0 [ 88.537579] ? format_decode+0xaf0/0xaf0 [ 88.541635] ? string+0x225/0x2d0 [ 88.545077] ? widen_string+0x2e0/0x2e0 [ 88.549042] ? register_shrinker_prepared+0x15b/0x1c0 [ 88.554222] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 88.559747] ? bdev_name.isra.8+0x1a1/0x1f0 [ 88.564056] ? pointer+0x157/0x990 [ 88.567589] ? netdev_bits+0xb0/0xb0 [ 88.571291] ? format_decode+0x1b1/0xaf0 [ 88.575339] ? set_precision+0xe0/0xe0 [ 88.579214] ? do_raw_spin_unlock+0xa7/0x2f0 [ 88.583619] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 88.589139] ? vsnprintf+0x20d/0x1b60 [ 88.592942] ? vsprintf+0x40/0x40 [ 88.596383] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 88.601388] ? set_blocksize+0x2c1/0x340 [ 88.605441] mount_bdev+0x314/0x3e0 [ 88.609053] ? mount_bdev+0x314/0x3e0 [ 88.612843] ? f2fs_commit_super+0x400/0x400 [ 88.617239] f2fs_mount+0x3c/0x50 [ 88.620681] ? kill_f2fs_super+0x330/0x330 [ 88.624907] legacy_get_tree+0x131/0x460 [ 88.628960] vfs_get_tree+0x1cb/0x5c0 [ 88.632751] ? vfs_set_fs_source+0x12c/0x180 [ 88.637153] do_mount+0x6f2/0x1e20 [ 88.640687] ? copy_mount_string+0x40/0x40 [ 88.644908] ? kasan_kmalloc+0xc4/0xe0 [ 88.648787] ? kmem_cache_alloc_trace+0x318/0x780 [ 88.653625] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 88.659153] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 88.664680] ? copy_mount_options+0x285/0x380 [ 88.669166] ksys_mount+0x12d/0x140 [ 88.672786] __x64_sys_mount+0xbe/0x150 [ 88.676749] do_syscall_64+0x1b9/0x820 [ 88.680623] ? finish_task_switch+0x1d3/0x870 [ 88.685108] ? syscall_return_slowpath+0x5e0/0x5e0 [ 88.690024] ? syscall_return_slowpath+0x31d/0x5e0 [ 88.694943] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 88.699949] ? __switch_to_asm+0x34/0x70 [ 88.704001] ? __switch_to_asm+0x34/0x70 [ 88.708049] ? __switch_to_asm+0x40/0x70 [ 88.712107] ? __switch_to_asm+0x34/0x70 [ 88.716163] ? __switch_to_asm+0x40/0x70 [ 88.720212] ? __switch_to_asm+0x34/0x70 [ 88.724258] ? __switch_to_asm+0x40/0x70 [ 88.728310] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 88.733147] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 88.738323] RIP: 0033:0x45943a [ 88.741503] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 bd 8a fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 9a 8a fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 88.760391] RSP: 002b:00007f8e6d7b1a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 88.768086] RAX: ffffffffffffffda RBX: 00007f8e6d7b1b30 RCX: 000000000045943a [ 88.775352] RDX: 00007f8e6d7b1ad0 RSI: 0000000020000100 RDI: 00007f8e6d7b1af0 [ 88.782611] RBP: 0000000020000100 R08: 00007f8e6d7b1b30 R09: 00007f8e6d7b1ad0 [ 88.789866] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000013 [ 88.797122] R13: 0000000000000000 R14: 00000000004c8ea0 R15: 0000000000000000 [ 88.804384] Modules linked in: [ 88.807566] Dumping ftrace buffer: [ 88.811090] (ftrace buffer empty) [ 88.814856] ---[ end trace 310debb0cb0157e0 ]--- [ 88.819641] RIP: 0010:validate_checkpoint+0x66d/0xec0 [ 88.824857] Code: e8 58 05 7f fe 4c 8d 6b 80 4d 8d 74 24 08 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 c6 04 02 00 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 f4 06 00 00 4c 89 ea 4d 8b 7c 24 08 48 b8 00 00 [ 88.843791] RSP: 0018:ffff88019a11ebe8 EFLAGS: 00010246 [ 88.849180] RAX: dffffc0000000000 RBX: ffff88019a11ef30 RCX: ffffc90003610000 [ 88.856482] RDX: 0000000000000000 RSI: ffffffff82fd9658 RDI: 0000000000000005 [ 88.863778] RBP: ffff88019a11ef58 R08: ffff88019ad86340 R09: fffff94000e4ad36 [ 88.871078] R10: fffff94000e4ad36 R11: ffffea00072569b7 R12: fffffffffffffffb [ 88.878373] R13: ffff88019a11eeb0 R14: 0000000000000003 R15: ffff880192178280 [ 88.885675] FS: 00007f8e6d7b2700(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 [ 88.893929] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.899849] CR2: 00007ffe17993519 CR3: 00000001cbc07000 CR4: 00000000001406e0 [ 88.907147] DR0: 000000000000b8c4 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.914469] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.921761] Kernel panic - not syncing: Fatal exception [ 88.927509] Dumping ftrace buffer: [ 88.931030] (ftrace buffer empty) [ 88.934718] Kernel Offset: disabled [ 88.938336] Rebooting in 86400 seconds..