[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 33.967881] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 38.705697] random: sshd: uninitialized urandom read (32 bytes read) [ 39.091894] random: sshd: uninitialized urandom read (32 bytes read) [ 40.645992] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.195' (ECDSA) to the list of known hosts. [ 46.274416] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/10 01:34:30 fuzzer started [ 47.517888] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/10 01:34:33 dialing manager at 10.128.0.26:42717 2018/07/10 01:34:34 syscalls: 1589 2018/07/10 01:34:34 code coverage: enabled 2018/07/10 01:34:34 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: errno 524 2018/07/10 01:34:34 setuid sandbox: enabled 2018/07/10 01:34:34 namespace sandbox: enabled 2018/07/10 01:34:34 fault injection: enabled 2018/07/10 01:34:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/10 01:34:34 net packed injection: enabled [ 52.331953] random: crng init done 01:35:52 executing program 0: pipe(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setflags(r0, 0x2, 0x0) 01:35:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000000)="025cc83d6d345f8f762070") syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x44841) 01:35:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") shmctl$SHM_STAT(0x0, 0xf, &(0x7f0000000000)=""/248) 01:35:52 executing program 4: r0 = socket(0x10, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0xe1, [], 0x0, &(0x7f0000000000), &(0x7f0000000100)=""/225}, &(0x7f0000000280)=0x78) 01:35:52 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) socket$inet6(0xa, 0x7, 0x10000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x2}, 0x1c) 01:35:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:35:52 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fchown(r0, 0x0, 0x0) 01:35:52 executing program 6: r0 = getpid() pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x6) write$sndseq(r2, &(0x7f0000011fd2), 0xffffffee) read(r1, &(0x7f0000000000)=""/126, 0xfffffeab) [ 129.662650] IPVS: ftp: loaded support on port[0] = 21 [ 129.843733] IPVS: ftp: loaded support on port[0] = 21 [ 129.870493] IPVS: ftp: loaded support on port[0] = 21 [ 129.889142] IPVS: ftp: loaded support on port[0] = 21 [ 129.906257] IPVS: ftp: loaded support on port[0] = 21 [ 129.908331] IPVS: ftp: loaded support on port[0] = 21 [ 129.918848] IPVS: ftp: loaded support on port[0] = 21 [ 129.939333] IPVS: ftp: loaded support on port[0] = 21 [ 132.128128] ip (4742) used greatest stack depth: 53584 bytes left [ 133.709452] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.716103] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.753764] device bridge_slave_0 entered promiscuous mode [ 133.907823] ip (4855) used greatest stack depth: 53504 bytes left [ 134.005681] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.012205] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.064232] device bridge_slave_1 entered promiscuous mode [ 134.337376] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 134.362915] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.369423] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.387578] device bridge_slave_0 entered promiscuous mode [ 134.407667] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.414398] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.436925] device bridge_slave_0 entered promiscuous mode [ 134.449854] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.456333] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.490714] device bridge_slave_0 entered promiscuous mode [ 134.504933] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.511457] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.528867] device bridge_slave_0 entered promiscuous mode [ 134.540622] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.547257] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.563932] device bridge_slave_0 entered promiscuous mode [ 134.586435] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 134.597512] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.603985] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.614527] device bridge_slave_1 entered promiscuous mode [ 134.633229] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.639715] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.673259] device bridge_slave_1 entered promiscuous mode [ 134.698916] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.705448] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.741807] device bridge_slave_0 entered promiscuous mode [ 134.761022] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.767544] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.779419] device bridge_slave_0 entered promiscuous mode [ 134.805326] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.811858] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.833288] device bridge_slave_1 entered promiscuous mode [ 134.841178] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 134.849503] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.855931] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.899168] device bridge_slave_1 entered promiscuous mode [ 134.922687] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 134.950445] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.956938] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.997198] device bridge_slave_1 entered promiscuous mode [ 135.025693] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.032254] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.073525] device bridge_slave_1 entered promiscuous mode [ 135.093793] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.100289] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.121159] device bridge_slave_1 entered promiscuous mode [ 135.130317] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 135.141064] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 135.163349] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 135.172203] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 135.223204] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 135.324452] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 135.338213] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 135.436565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 135.446019] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 135.462429] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 135.485795] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 135.524734] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 135.548699] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 135.740657] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 135.988434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 135.995533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.046649] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 136.132018] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 136.192922] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 136.200199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.274107] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 136.294231] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 136.333527] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 136.361958] ip (4990) used greatest stack depth: 53440 bytes left [ 136.368303] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 136.385685] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 136.411545] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 136.444589] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 136.567694] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 136.577460] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 136.657021] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 136.665275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 136.672241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.723567] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 136.735894] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 136.743577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.770924] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 136.825150] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 136.832198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.855965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 136.865230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.934452] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 136.941479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.992519] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 136.999576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.018739] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 137.028667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 137.042294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.087781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.113900] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 137.133551] team0: Port device team_slave_0 added [ 137.160383] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 137.171362] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 137.178415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.187330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.217651] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 137.227885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.254790] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 137.261788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.309358] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 137.316462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.409290] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 137.445200] team0: Port device team_slave_1 added [ 137.478974] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 137.487526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.758107] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 137.765227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.780234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.864898] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 137.893804] team0: Port device team_slave_0 added [ 137.931299] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 137.953913] team0: Port device team_slave_0 added [ 137.976976] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 137.989748] team0: Port device team_slave_0 added [ 138.008192] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.026963] team0: Port device team_slave_0 added [ 138.042876] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 138.049850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.065096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.142466] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.167514] team0: Port device team_slave_1 added [ 138.192213] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.203114] team0: Port device team_slave_0 added [ 138.243238] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 138.252072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.266957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.295564] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.307302] team0: Port device team_slave_1 added [ 138.322974] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.334121] team0: Port device team_slave_0 added [ 138.348939] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.371003] team0: Port device team_slave_1 added [ 138.399774] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.416626] team0: Port device team_slave_0 added [ 138.441298] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 138.450309] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.478702] team0: Port device team_slave_1 added [ 138.531429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.547693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.579245] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 138.597671] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.606267] team0: Port device team_slave_1 added [ 138.613109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.626856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.645403] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 138.653123] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 138.671643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.696102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.715157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.734225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.752328] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.779311] team0: Port device team_slave_1 added [ 138.791781] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 138.799482] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.807848] team0: Port device team_slave_1 added [ 138.818287] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 138.833164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.867785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.893464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.925524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.958516] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 138.968018] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 138.981264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.990656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.012017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.032265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.057728] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 139.065484] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 139.073676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.091113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.130683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.150852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.184760] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 139.200924] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 139.215183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.229777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.255866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.274844] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.295095] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 139.302804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.319022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.343708] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 139.352161] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 139.359828] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 139.373297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.390253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.427808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.445092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.462205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.483381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.511864] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 139.521744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.540368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.558459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 139.569467] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 139.579138] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 139.593891] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 139.601746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.628587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.656832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.689813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.716239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.744487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.765682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.777293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.796622] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 139.807215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.834922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.871653] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 139.882442] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 139.891334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.910712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.930084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.956282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.965466] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 139.978188] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 139.993365] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 140.006533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.015963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.039699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.071618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.095844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.113399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.134742] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 140.146216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.163425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.201844] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 140.213921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.247364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.135069] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.141551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.148380] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.154799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.235128] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 142.243651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.802028] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.808553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.815366] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.821787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.833529] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 142.846893] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.853337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.860133] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.866554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.890896] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 142.914620] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.921115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.927935] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.934362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.033236] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 143.074628] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.081115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.087964] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.094420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.110675] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 143.141461] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.147960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.154751] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.161169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.182088] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 143.231807] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.238320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.245178] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.251615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.344471] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 143.351495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.371716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.401957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.422642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.437963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.446845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.522910] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.529378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.536273] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.542707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.642250] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 143.686273] ip (5380) used greatest stack depth: 53216 bytes left [ 144.352880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.630926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.799634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.842926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.000162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.190866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.387800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.462955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.679603] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 154.725796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.840981] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 154.909017] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.054714] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.242155] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.384256] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.477635] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.718314] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 155.724616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.738854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.787778] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.840377] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 155.846712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.863022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.892192] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 155.903518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.925430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.109345] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.115701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.129826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.252888] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.260744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.284886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.513559] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.519960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.533936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.618558] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.625930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.645278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.777206] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.856922] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.863276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.873343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.915231] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.953907] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.295617] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.315642] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.620315] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.747967] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.853660] 8021q: adding VLAN 0 to HW filter on device team0 01:36:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x101, 0x8000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000002c0)="97a62576abc811eb824b890d7c2e6af3", 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @dev, 0x0}, &(0x7f0000000200)=0xc) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={r2, @multicast1=0xe0000001, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000340)) ioctl$FICLONE(r0, 0x40049409, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@multicast1, @in6=@dev}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000300)={'ip6gretap0\x00', 0x1}) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000380)={0x7, 0x7f, 0x2}, 0x7) socket(0xf, 0x80003, 0x0) 01:36:27 executing program 1: r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000004fc4)=[{{&(0x7f0000003000)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x80, &(0x7f0000004fa0)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000002d30)}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000300)=0xe8) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x2e7, 0x7fb, 0x0, 0x1}, 0x157) connect(r0, &(0x7f0000000180)=@hci={0x1f, r1, 0x2}, 0x13) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xf03f}]}) r3 = socket(0x18, 0x0, 0x1) connect(r3, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) 01:36:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x10, &(0x7f0000000000), 0x4) close(r3) dup3(r1, r2, 0x0) 01:36:27 executing program 1: r0 = epoll_create1(0x0) r1 = dup(r0) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40000007, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000140)=r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup2(r4, r3) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) [ 163.611702] 9pnet: Unknown protocol version [ 163.611702] p2000 01:36:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:27 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x4000, 0x0) recvfrom$inet6(r1, &(0x7f00000001c0)=""/133, 0x85, 0x2000, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}, 0x1ff}, 0x1c) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000540)={0x5, 0x9, 0xed4, 0x6, 0x1, 0x3}) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000002c0)) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x6, 0x401c1e31}) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000500)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCGSID(r2, 0x80045432, &(0x7f00000000c0)) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x8, 0xc0) r3 = semget(0x2, 0x2, 0x4d8) semctl$SETVAL(r3, 0x0, 0x10, &(0x7f0000000080)=0x101) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8) ioctl$VT_ACTIVATE(r0, 0x5606, 0x228) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000300)='./file0\x00', r4, r5) [ 163.828602] 9pnet: Unknown protocol version [ 163.828602] p2000 01:36:27 executing program 1: r0 = epoll_create1(0x0) r1 = dup(r0) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40000007, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000140)=r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup2(r4, r3) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) 01:36:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:28 executing program 2: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000440)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x2fe, r0) keyctl$dh_compute(0x17, &(0x7f00000001c0)={0x0, r1}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000000100)={'rmd128\x00'}}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x100) bind$alg(r2, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ctr-blowfish-asm,sm4)\x00'}, 0x58) 01:36:28 executing program 5: mknod$loop(&(0x7f0000dceff8)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x7f, 0x80) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000040)) syz_fuse_mount(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x1000) nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)) [ 164.164852] 9pnet: Unknown protocol version [ 164.164852] p2000 01:36:28 executing program 1: r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, @dev}, &(0x7f00000000c0)=0x10) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000180)={'TPROXY\x00'}, &(0x7f00000001c0)=0x1e) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="290000001800190000003fffffffda0602000000fde80001024000040d000500000500000005000000", 0x29}], 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x240, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x2}) 01:36:28 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x80, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffff5ee8ff00000000000002d30000000000f07820bbbe4b0000000000414463c89f55cb61f60358ae039c"], &(0x7f00000002c0)={0x0, 0x0, [0x4]}) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x10000000001) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040), 0x4) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x5, r0}) 01:36:28 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x4000, 0x0) recvfrom$inet6(r1, &(0x7f00000001c0)=""/133, 0x85, 0x2000, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}, 0x1ff}, 0x1c) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000540)={0x5, 0x9, 0xed4, 0x6, 0x1, 0x3}) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000002c0)) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x6, 0x401c1e31}) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000500)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCGSID(r2, 0x80045432, &(0x7f00000000c0)) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x8, 0xc0) r3 = semget(0x2, 0x2, 0x4d8) semctl$SETVAL(r3, 0x0, 0x10, &(0x7f0000000080)=0x101) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8) ioctl$VT_ACTIVATE(r0, 0x5606, 0x228) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000300)='./file0\x00', r4, r5) 01:36:28 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000002c0)="74086e7500e4ff0000000000008c006d55a17a26c5d23f6189eafc3ff57bbb009e92a3eaf413fb58844d508502da9614fe097590c4b4af1d125e0ad36800cc118a7d101f3f579364dc8847e4834ca720d5ba558fcfacf23d92ca2be56c01354ed9d2629d0a05d98a91395df6d594aa66220ad846", 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[{0x2, 0x7}, {0x6}, {0xe, 0x2}, {0x4, 0x6d47}, {0x2, 0x3}], 0x5) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="ad", 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x8000) close(r0) 01:36:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) [ 164.345345] netlink: 'syz-executor1': attribute type 5 has an invalid length. [ 164.414906] netlink: 'syz-executor1': attribute type 5 has an invalid length. 01:36:28 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x1f) writev(r0, &(0x7f0000000080), 0x7794c62dbab7353) [ 164.519228] 9pnet: Unknown protocol version [ 164.519228] p2000 [ 164.532208] could not allocate digest TFM handle rmd128 01:36:28 executing program 4: geteuid() r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000240)=""/79, &(0x7f0000000000)=0x4f) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000640)={0x1, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xffffffffffffffbc, 0x20000000, &(0x7f0000000140)={0x2, 0x1000004e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000000c0)='S', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000100)=0x5, 0x4) 01:36:28 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x4, 0x0, [0x20000500, 0x0, 0x0, 0x20000628, 0x20000910], 0x0, &(0x7f0000000400), &(0x7f0000000440)=ANY=[]}, 0x78) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) recvmmsg(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/173, 0xad}, {&(0x7f00000000c0)=""/63, 0x3f}, {&(0x7f0000000100)=""/55, 0x37}], 0x3, &(0x7f00000002c0)=""/150, 0x96, 0x8000}, 0x9}, {{&(0x7f0000000380)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/85, 0x55}], 0x1, &(0x7f0000000500)=""/4096, 0x1000, 0xfffffffffffffffb}, 0x200}, {{&(0x7f0000001500)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001580)=""/21, 0x15}, {&(0x7f00000015c0)=""/38, 0x26}, {&(0x7f0000001600)=""/98, 0x62}], 0x3, &(0x7f00000016c0)=""/36, 0x24, 0x3}, 0x2}], 0x3, 0x40000000, &(0x7f00000017c0)={0x0, 0x989680}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001ac0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000001bc0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)=@gettfilter={0x5c, 0x2e, 0x800, 0x70bd2c, 0x25dfdbfc, {0x0, r2, {0xffeb}, {0xfff3}, {0x3, 0xffff}}, [{0x8, 0xb, 0x4ee7}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x3f}, {0x8, 0xb, 0xffff}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) 01:36:28 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x400) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff28918900280300002803f936ffffffff"], 0x1) [ 164.677786] could not allocate digest TFM handle rmd128 01:36:28 executing program 6: r0 = socket$inet6(0xa, 0x806, 0xfffffffffffffffe) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=""/21, 0x15}, {&(0x7f00000001c0)=""/10, 0xa}, {&(0x7f0000000200)=""/231, 0xe7}, {&(0x7f00000003c0)=""/227, 0xe3}, {&(0x7f00000004c0)=""/73, 0x49}, {&(0x7f0000000540)=""/226, 0xe2}], 0x6, &(0x7f0000000300)=""/11, 0xb, 0xa4c5}, 0x7}], 0x1, 0x12000, &(0x7f0000000700)) r1 = socket$inet(0x2, 0x1000000003, 0x88) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x100) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @multicast2, 0x0}, &(0x7f0000000780)=0xec) sendmmsg(r1, &(0x7f0000006780)=[{{&(0x7f0000000340)=@xdp={0x2c, 0x1, r2, 0x31}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000940)}}, {{&(0x7f0000000080)=@in={0x2, 0x0, @rand_addr}, 0x80}}], 0x2, 0xc8c0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x210000, 0x3d) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000840)={0x8, 0x9, 0x7fffffff, 0x0, 0x4}) 01:36:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) [ 164.852123] raw_sendmsg: syz-executor6 forgot to set AF_INET. Fix it! 01:36:28 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getpeername$inet(r0, &(0x7f0000000000)={0x0, 0x0, @local}, &(0x7f0000000100)=0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x7fff) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000024c0)={&(0x7f0000001240)='nq\x00'}, 0x10) utimensat(r1, &(0x7f0000002500)='./file0\x00', &(0x7f0000002540)={{0x77359400}, {0x0, 0x7530}}, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) preadv(r0, &(0x7f0000002440)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/179, 0xb3}, {&(0x7f0000001200)=""/31, 0x1f}, {&(0x7f0000001240)}, {&(0x7f0000001280)=""/96, 0x60}, {&(0x7f0000001300)=""/179, 0xb3}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/121, 0x79}], 0x8, 0x0) shutdown(r0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0x7f, @dev={0xac, 0x14, 0x14, 0x1f}, 0x4e22, 0x4, 'nq\x00', 0x2, 0x80000000, 0x1d}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e23, 0x4, 0x2e556bb2, 0x5, 0x7f}}, 0x44) 01:36:28 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x400) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff28918900280300002803f936ffffffff"], 0x1) 01:36:28 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000e8000)='/dev/cuse\x00', 0x2, 0x0) write$fuse(r0, &(0x7f0000000000)={0x30, 0x6, 0x0, @fuse_notify_retrieve_out={0x0, 0x0, 0x7}}, 0x30) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000180)) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000040)={'security\x00', 0xca, "06b10f03465ef288434443946ee91cf256856e457a965eb609a9ee44eb32cb750a13706e1200c75fd79e1afa5f8b663cd93862a8601b93c2c2e273781f91f923e57c575ef76ed7f01be6f5d431bc6cc1b95e754057981247e67e001970fa2350abcb489e3498d1aa62f5d8d743443c49b1c2535d9742f77891960bdad925f189de29b3bd3e12c4a802e671d9e9c8300f606229c935fb482e6a77fe40440776effea9c72b14f7eb2d7e7245c510f2a9e10b4586eaa4a16707e8fb67cd8494964dbb6055d0b8ba6d27ca43"}, &(0x7f0000000140)=0xee) 01:36:28 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5473, &(0x7f0000000100)=0x1) mknod(&(0x7f0000000140)='./file0\x00', 0x1040, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x800000002000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0xd5, @local={0xfe, 0x80, [], 0xaa}, 0x9}, @in={0x2, 0x4e21, @multicast2=0xe0000002}, @in={0x2, 0x4e21, @multicast1=0xe0000001}], 0x3c) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000004c0)) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r2) clone(0x0, &(0x7f0000000280), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) [ 165.083190] IPVS: set_ctl: invalid protocol: 127 172.20.20.31:20002 [ 165.147359] IPVS: set_ctl: invalid protocol: 127 172.20.20.31:20002 01:36:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:29 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000), 0x55) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000080)) 01:36:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffff}, 0x113, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x3, {0x6, 0x1f, "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", 0x75, 0x100, 0x317bd397, 0x1, 0x1, 0x400, 0x2}, r2}}, 0x128) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000602fe8)={0xaa, 0x40}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000c20000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f00006af000/0xf000)=nil, 0xf000, 0x3000, 0x3, &(0x7f00002e0000/0x3000)=nil) close(r3) 01:36:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000100)={'raw\x00', 0xe4, "a54a476c294f06c3b3f5898a286be797d53c82d0f6780e1047839ecec796a9b52ac9d8c7d5fcc261bca63c7653b3a4b78f81ec4afa16992038cf5c472187be3a5f04ea49d80e7dee606f27e9dabf7af35793be9364195d1fcb613d60aa43fa1a85c6900bfe3f91e56548035bdbcd0a66d418476e91c1a5e8e6b77f96bb5c100549340be31e16f87c9c37c86a3481c82c1c1795adefc4a267b35a1ebc33286835efa4479a26a7a8ec1be98424471f1a5865a47d5a5c472bdc42ba9f83f253712b24bcb58d725117e708964ba3b7612031266c60b9d26ba0ad48051e26232c3352b2db2b94"}, &(0x7f0000000000)=0x108) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 01:36:29 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x400) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff28918900280300002803f936ffffffff"], 0x1) 01:36:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x60100, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000004c0)=0xfd, 0x4) sendmmsg(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='#', 0x1}], 0x1}}], 0x1, 0x0) read(r2, &(0x7f0000000180)=""/153, 0x99) 01:36:29 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0xf, &(0x7f00006ed000), &(0x7f0000000200)=0x4) 01:36:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x57000)=nil, 0x57000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1423, 0x250400) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e20, @broadcast=0xffffffff}}, 0x8, 0x9, 0x3, "0639e8dc21ffd1988047a5b17a362da59dc8010b2a50089b6de8e46e6425b0c9eb2449ca9dfe9029a4379f5440b5ddb5611e04a108eecc53357327eb42c9b1c611b1c3e154afba4138ffb3f4790d267e"}, 0xd8) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000002c0)=""/8, &(0x7f0000706ffc)=0xfe7a) 01:36:29 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x400) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff28918900280300002803f936ffffffff"], 0x1) 01:36:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:29 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@dev={0xfe, 0x80}, 0x400, 0x0, 0xff, 0x1}, 0x20) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x90001, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={0x0, 0xd7f, 0x30, 0x4, 0x7}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x100, 0x7}, &(0x7f00000000c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000a1fe0)={@dev={0xfe, 0x80}, 0x400, 0x0, 0xff}, 0x20) close(r0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000040)={'tunl0\x00', {0x2, 0x4e23}}) 01:36:29 executing program 5: socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f00006c4f60)=[{&(0x7f0000317fa3)="b5c5242e283536f05dfcf3c925d43c6cf1eb17fde04dfbf2b3", 0x19}], 0x1) write(r0, &(0x7f0000805000)="346bd71b3c015b53c0833e97df6312f9b0659db5b29837caa9", 0x19) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x4) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x0, 0x0, &(0x7f00000fff80), 0x0, &(0x7f00001e1e78)}], 0x1, 0x0) 01:36:29 executing program 6: io_setup(0x3, &(0x7f0000000080)=0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x4006) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x701000) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000040), 0x2) io_submit(r0, 0x0, &(0x7f00000007c0)) 01:36:29 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r1, 0x8000000000002}, 0x15) 01:36:29 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff28918900280300002803f936ffffffff"], 0x1) 01:36:30 executing program 0: syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x400000000000002) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1fff8, 0xb) 01:36:30 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:30 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40000, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000140)={'bond_slave_1\x00', {0x2, 0x4e20}}) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="0499d47cd1f80a4a7ba0f029dd5343d9eba0800dba7805d4be6612538a90e885d3f58c3da819994c63d60c720ec6d47134833aaeafdce2c7890f00c61aac52639929c1e336bae0830fdfe15998ddb81301a0e23f348c0a33fe06527a7c6119f666c0b35e39c9bc1c152be075c9559abeff6cba0dfa543ee4", 0x78) 01:36:30 executing program 5: socket$netlink(0x10, 0x3, 0x6) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000000c0)) getpeername$inet6(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c) [ 166.084261] 9pnet: Unknown protocol version [ 166.084261] p2000 01:36:30 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000240)=0x0) io_destroy(r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x29, 0x1}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r3, 0x5}, &(0x7f0000000180)=0xc) pause() io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)}, &(0x7f0000000140)) 01:36:30 executing program 7: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff28918900280300002803f936ffffffff"], 0x1) 01:36:30 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:30 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4000000000000009}, 0x1c) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x9, 0x81) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000200)={0x3, 0xfffffffffffffffb, 0x7, 0x8, [], [], [], 0x1, 0x0, 0x1, 0x3, "54c91389c56ea575ad28286b919fb143"}) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x10) accept(r0, &(0x7f00000000c0)=@l2, &(0x7f0000000040)=0x80) r2 = socket$inet6(0xa, 0x1000000000003, 0x7) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a80)="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", 0xa75}], 0x1, &(0x7f00000005c0)}, 0x0) [ 166.310505] 9pnet: Unknown protocol version [ 166.310505] p2000 01:36:30 executing program 4: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x101, 0x3}, 0x10) r0 = socket(0x11, 0x80002, 0x0) readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000380)=""/184, 0xb8}], 0x1) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) sendmmsg$inet_sctp(r0, &(0x7f0000000700)=[{&(0x7f0000000200)=@in6={0xa, 0x0, 0x1}, 0x1c, &(0x7f0000000580), 0x0, &(0x7f0000000680)}], 0x492492492492682, 0x0) 01:36:30 executing program 7: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff28918900280300002803f936ffffffff"], 0x1) [ 166.380280] 9pnet: Unknown protocol version [ 166.380280] p2000 01:36:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00008c6000)="e315555af7ee49914ade74e3e3690d91", 0x10) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000000)=""/150, &(0x7f00000000c0)=0x96) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00003acff2)="a88ef8a66ad1a8e7fc50faa27f245004", 0x10) 01:36:30 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:30 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x80000002) fcntl$getflags(r0, 0x40a) [ 166.618189] 9pnet: Unknown protocol version [ 166.618189] p2000 01:36:30 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040)) dup2(r0, r1) r3 = add_key$keyring(&(0x7f00000011c0)='keyring\x00', &(0x7f0000001200)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0)="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", 0x1000, r3) io_setup(0x4, &(0x7f0000000000)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000040)}]) 01:36:30 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)="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", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000280)="6e64738b45fe759b2f1ca39818af2eb91f57f35faf89c8fa2e46138a55a1b09521708b570da8c6a68cf967e4bcc3fd44cff88b5171c2d606d8c5b2bd5c01c13cda394b2d8eed7a34c92c2a1bdebd4cee8daf1b04f2d2cce52def712233d39cd9bf77f6b01f13c9803814", 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180)=0x100000001, 0x12) 01:36:30 executing program 7: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff28918900280300002803f936ffffffff"], 0x1) 01:36:30 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x9, 0x4) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0xfffffffffffffe99) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = shmget(0x3, 0x14000, 0x104, &(0x7f0000feb000/0x14000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) 01:36:30 executing program 5: semget(0x3, 0x3, 0x10) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206020200a84309c02623692500060000c90200f0ff56039848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/163, &(0x7f0000000140)=0xa3) 01:36:30 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40000, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x3, 0x7]) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$binfmt_elf32(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xe7, 0x80000001, 0x6, 0x200, 0x3, 0x3e, 0x7e, 0x3a8, 0x38, 0x27b, 0x1, 0x101, 0x20, 0x2, 0x9, 0x9, 0xa60}, [{0x70000006, 0x1, 0x7f, 0x1, 0x6, 0x9, 0x100000000, 0xcd5}, {0x5, 0x1, 0xf47, 0xfffffffffffffffc, 0x8, 0x400, 0x8, 0xffd}], "7b6cf0acb353cb7434bf2a39ad31354de73b15a49db7c460182745549fd48be3cd5d287a41575bf6ba77c2445e75b4274df23d1e418897a43eb0d5ea22ec107ea7c923cc98be79cc25d771d63d38fa65cd64e512fac50e0ac9cfc01fff6a12e2db6f5bed820cd4b252b2c730f3726decb0c07449458579b0e9bf5db67c8714320cb62a19e4ef003031e9ce163969911359a5fd9c6b6d338d31f8be86d01dfeedd0b2c036e0f6fa0e44ac"}, 0x122) socket$inet(0x10, 0x3, 0x6) 01:36:30 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) [ 167.019230] netlink: 'syz-executor5': attribute type 6 has an invalid length. [ 167.045527] 9pnet: Unknown protocol version [ 167.045527] p2000 [ 167.085139] netlink: 'syz-executor5': attribute type 6 has an invalid length. 01:36:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000800)=""/142, 0x8e}], 0x2, &(0x7f00000008c0)=""/165, 0xa5}}], 0x1, 0x0, &(0x7f00000009c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000300)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=@deltaction={0x14, 0x31, 0x1}, 0x14}, 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0xc000, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8, 0xf, 0x6, 0x10, "ceb995426ff377c3bb3c757ce7259625cb8e7ccead1ad25d2912333ee19d424fb7e662f3ea4c659bc5f7320b489c9439b3e4a86a72f90e5302880338c38f29c7", "e1e63df2ca582e8fd88de451c60eead9d34369174c346592171232c06093f88a", [0x10001]}) 01:36:31 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff28918900280300002803f936ffffffff"], 0x1) 01:36:31 executing program 4: r0 = socket$inet6(0xa, 0x40000000080803, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0xa, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x3}}, 0x178) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_keyring_id(0x0, r1, 0x9) 01:36:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") prctl$setmm(0x23, 0x17, &(0x7f0000ffc000/0x3000)=nil) unshare(0x1ffffffd) clone(0x0, &(0x7f0000000140), &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) clone(0x40000, &(0x7f0000000180)="dee0fb27ced9881b580d7294931228b946bffd38fbbf6262692f797ade86d11d2536e8f1276e2d2c1d633b870701289275531571a9c0b757588d64dcd4404ee76bf6343c448a8dd29419fa949710e41d3268b96d6c87ed1afb4ea902a7392d32bb85470bf55e9ebe5ab2d745f8dff16548e3a0389e35fef3db47031acb16ea8a3b6d15e4b61069b5156f983872d6c225a446bff755e13bab44a291555c03bc763fcefd", &(0x7f0000000240), &(0x7f00000002c0), &(0x7f00000003c0)="12545f2a0dbec6b0ad0346ae04c17907e8e19e58ea40b2a4ea9dbf0fd016f5ab6a6faaae1013eea74503daa5ee60b908ac7bc8bf31ab499fe62e6d758f00b5231767291d5d8c877878673b4d5b89cbf40fc03fafadfe32cb9e17ee8cddf0a15dd4d616a6f2e9f9f931e936c8cfd7a149c83d56072eaa927e3e73521e29b802c3475eb33068b05800acb4469074ba5ee7") clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000000140), &(0x7f0000000000)="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") wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 01:36:31 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0xfffffffd}}, @icmp=@parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @local={0xac, 0x10, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000040)) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)=0xffffffff, 0x4) r1 = dup2(r0, 0xffffffffffffff9c) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000000c0)) 01:36:31 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@bridge_newneigh={0x34, 0x1c, 0x21, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_LLADDR={0xc, 0x2, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @NDA_DST_MAC={0xc, 0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x34}, 0x1}, 0x0) 01:36:31 executing program 6: openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x80, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ptrace$setsig(0x4203, r0, 0x1126, &(0x7f0000000280)={0x4, 0x9, 0x1, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000c97ff8)) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f00000003c0)=0x6, 0x19a) renameat2(r2, &(0x7f0000000340)='./file0\x00', r2, &(0x7f0000000380)='./file0\x00', 0x4) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000440)={0x1, 0x1, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150, 0xfffffffffffffffc}) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000480)=""/175) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000400)={0x1}) [ 167.416215] 9pnet: Unknown protocol version [ 167.416215] p2000 01:36:31 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0), 0x164) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x10000) ioctl$TIOCCONS(r1, 0x541d) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000100)=""/233) 01:36:31 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x0) socket$inet(0x2, 0x4, 0x5) 01:36:31 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x80000080045007, &(0x7f0000000040)) 01:36:31 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff28918900280300002803f936ffffffff"], 0x1) 01:36:31 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x400000002, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x400000, 0x2) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000001600)=[{}, {&(0x7f0000000240)}, {&(0x7f0000000300)='Z', 0x1}], 0x3, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000080)) 01:36:31 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) [ 167.750405] 9pnet: Unknown protocol version [ 167.750405] p2000 01:36:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025c000000000000000070") r1 = semget(0x0, 0x2, 0x80) semctl$IPC_INFO(r1, 0x4, 0x3, &(0x7f00000000c0)=""/4096) r2 = dup2(r0, r0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000010c0)=0x2, 0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001100)=""/126) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) 01:36:31 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff28918900280300002803f936ffffffff"], 0x1) 01:36:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dgeOs ave_0\x00', r1}) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xfffffffffffffffc}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@getaddr={0x14, 0x16, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1}, 0x80000000000) 01:36:32 executing program 6: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000009, 0x53, r0, 0x80000000) sync_file_range(r0, 0x8628, 0x8, 0x6) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x4, 0xde0, 0x2, 0x9, 0xffffffff, 0x1, 0x5, 0x6, 0x4, 0x2}) 01:36:32 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:32 executing program 5: gettid() socketpair(0x1, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r0, &(0x7f0000bce000), 0xffffff36) io_setup(0x20f, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) io_pgetevents(r1, 0x7ff, 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000140)={r2, r3+10000000}, &(0x7f00000001c0)={&(0x7f0000000180)={0x3}, 0x8}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000280)) getsockopt$inet_dccp_int(r0, 0x21, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 01:36:32 executing program 0: r0 = socket(0xa, 0x802, 0x88) r1 = socket$netlink(0x10, 0x3, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x3, @loopback={0x0, 0x1}}, 0xffffffffffffff5d) writev(r1, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001200000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000658764e1a63a91062e5815b7d3d2eaf60d", 0x48}], 0x1) 01:36:32 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[], 0x0) 01:36:32 executing program 4: munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) mlock2(&(0x7f000053a000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000548000/0x4000)=nil, 0x4000) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xff, 0x200000) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000040)={0x4, 0x9, 0x7, 0x1, 0x1, 0x1}) 01:36:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00004cfff8)) sendto$inet(r1, &(0x7f0000f7db7f)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r1, &(0x7f0000002500)=""/40, 0x28, 0x40, 0x0, 0x0) socketpair(0x10, 0x0, 0xfffffffffffff000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000040)={0x7, 0x80000000}) sendto$inet(r1, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) poll(&(0x7f0000406fd8), 0x0, 0x5) openat$ptmx(0xffffffffffffff9c, &(0x7f00000025c0)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000002580)={'HL\x00'}, &(0x7f0000002600)=0x1e) 01:36:32 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[], 0x0) 01:36:32 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x184) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000140)={0x7, 0x2, 'client1\x00', 0x0, "a9eb964206611e73", "c3e26549d3e0be42e91ea6a2c4a29a7ceba7302dd42335c15cb998405a8778dc", 0xff, 0x3}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)=0x7) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x401, 0x4) 01:36:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000080)=0x54) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) tkill(r2, 0x22) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'vcan0\x00', {0x2, 0x4e22, @loopback=0x7f000001}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000005c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f00000006c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', r3}) 01:36:32 executing program 6: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000867000)=@fragment, 0x8) connect$inet6(r0, &(0x7f000000cfe4)={0xa}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0xfffffffffffffee5) [ 168.434332] 9pnet: Unknown protocol version [ 168.434332] p2000 01:36:32 executing program 0: r0 = memfd_create(&(0x7f0000000040)='mime_typevboxnet0eth1}\x00', 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x78, 0x3, 0x1000, 0x2, 0x80000000, 0x48, 0x9, 0x8, 0x9, 0x42, 0x7}, 0xb) r1 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x6, &(0x7f0000000240)=0x0) io_getevents(0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x77359400}) io_submit(r3, 0x20000081, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000340), 0x0, 0x505}]) 01:36:32 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000588ff1)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r1 = eventfd(0x800) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x80032, r0, 0x40000000) mmap(&(0x7f0000015000/0xaa6000)=nil, 0xaa6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0xe000}, {r0}], 0x2, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={0x9}, 0x8) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000857ff8)={0x0, r1}) read$eventfd(r1, &(0x7f0000000000), 0x1f4) 01:36:32 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:32 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[], 0x0) [ 168.659370] IPVS: ftp: loaded support on port[0] = 21 01:36:32 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000000)=""/117, 0x75}, 0x7}], 0x1, 0x0, &(0x7f0000000cc0)) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x0, 0x2) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000200)={@l2={0x1f, 0xfffffffffffffffb, {0xb0fb, 0x81, 0x3, 0x0, 0x4, 0x100020}, 0x1, 0x9}, {&(0x7f0000000140)=""/192, 0xc0}, &(0x7f00000000c0), 0x8}, 0xa0) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x8000) 01:36:32 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0xa, 0x803, 0x6) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xfffffffffffffeff}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000092780000"], &(0x7f00000002c0)) 01:36:32 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000300)={0x4, 0x8, 0xfa00, {r2}}, 0x10) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x5, 0x0) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344}, 0x3, 0x81) syz_emit_ethernet(0x1b7, &(0x7f0000000340)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [{[], {0x8100, 0x9, 0x2, 0x2}}], {@mpls_mc={0x8848, {[{0x0, 0xffffffffffff8001, 0xb5e4, 0x4}, {0x6, 0x9, 0x0, 0x6}, {0x6, 0x57, 0x6, 0x4}, {0x6, 0x278, 0xc6, 0xe8}, {0xeef9, 0x4, 0x400, 0x3}, {0xf87, 0x6, 0x2, 0x6}, {0x3, 0x7f, 0x4, 0x7}, {0x2, 0x0, 0xb911, 0x1}], @ipv6={0xffffffff, 0x6, "20cc0b", 0x15d, 0x6f, 0x400, @mcast2={0xff, 0x2, [], 0x1}, @empty, {[@fragment={0x33, 0x0, 0x1, 0x9, 0x0, 0x1d33, 0x65}, @hopopts={0x2f, 0xf, [], [@jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0xbc8f}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xc1}, @generic={0x7, 0x62, "c4eae7275643cf60e079ea732425bc5b897a9a3d5dd5a4114b84bafe4eaa4306f1812035f58a4f5630184c570d2ff3e82482f6c955e46813e4d02e2b6ebaee549ad24308b0097208c90cf23a065cab5b1ca427727df7add283f157bd9b1a9be3303c"}]}], @tcp={{0x4e22, 0x4e21, r3, r4, 0x2, 0x0, 0x1e, 0xc3, 0x10000, 0x0, 0x3f, {[@nop={0x1}, @nop={0x1}, @eol, @nop={0x1}, @sack={0x5, 0x16, [0x0, 0x6, 0x9fc, 0x3ff, 0x8]}, @generic={0x2, 0xb, "905049f58a9b351138"}, @md5sig={0x13, 0x12, "fc491a5f31c3b615ed7d1380d02c21fa"}, @md5sig={0x13, 0x12, "e17aad27049ec7293a30c930e794acb3"}, @sack={0x5, 0xa, [0xffff, 0x7ec7]}, @generic={0x0, 0xf, "d71bd49af1e7a1b75f2c19c1c7"}]}}, {"11e5bb5d87b6f68ccfb7eaa7be83990afa02c80c57b67a44ae303d1f9268f9b8f6eb9a75fc83af5ce4a91e1e906d28c4d0341f8310c00303369c2e60d3b60205ed90dcec1e91744bff743dbfa5246df84c2d54771d"}}}}}}}}, &(0x7f0000000080)={0x0, 0x4, [0x8a3, 0x42b, 0x2d0, 0xe21]}) [ 168.907670] 9pnet: Unknown protocol version [ 168.907670] p2000 [ 169.050787] IPVS: ftp: loaded support on port[0] = 21 01:36:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x3}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="4c0000000a000a00aaaaaaaaaaaa0000e8c2fe0d060cb1103f66072844f99f7c9a96b55b67d1d8b9faa07274750f47167ca9ac186cf27b0224531519525e7f08dc75f1b8a638676f79d5b29fffb8d3e79c936ce8fc72a2ba192aba6a625058002a01cda5456e4fdfc618f586e2be29d2373a6f6b4c074d3bd4b6423cf9cd"], 0x28}, 0x1}, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x40202, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xfff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r3, 0xfffffffffffffff7}, 0xfffffffffffffef1) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f00000001c0)=0x1, 0x4) 01:36:33 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1) 01:36:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000000)=""/117, 0x75}, 0x7}], 0x1, 0x0, &(0x7f0000000cc0)) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x0, 0x2) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000200)={@l2={0x1f, 0xfffffffffffffffb, {0xb0fb, 0x81, 0x3, 0x0, 0x4, 0x100020}, 0x1, 0x9}, {&(0x7f0000000140)=""/192, 0xc0}, &(0x7f00000000c0), 0x8}, 0xa0) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x8000) 01:36:33 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:33 executing program 6: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200)={0x1d}, 0x10) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) fcntl$getown(r1, 0x9) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@hyper}) sendmsg$can_bcm(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x1d}, 0x10, &(0x7f00000005c0)={&(0x7f0000000540)={0x6, 0x0, 0x0, {0x77359400}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8a248ce7b87316d5"}}, 0x48}, 0x1}, 0x0) 01:36:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_opts(r0, 0x0, 0x2000000015, &(0x7f0000000380)="63fa52b6", 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40000, 0x0) ioctl$TIOCEXCL(r1, 0x540c) sendto(r0, &(0x7f0000000040)="6e3998e47b85edab844f921151eb29b6a1d6d565ad5aa505b2930e0749ebb0bf9d38b565b4ea69732f422c40699568573b069ed75c293cf4a0a8b3c5a8bc0f484f7cef3750953cebb641b101fca993e4925283a254b613352dabb93ebad028a24e4758c298077a42a95e906b87642271", 0x70, 0x20000000, 0x0, 0x0) 01:36:33 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1) [ 169.741515] 9pnet: Unknown protocol version [ 169.741515] p2000 01:36:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x1abeaad0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) setsockopt$inet6_dccp_buf(r0, 0x21, 0x2, &(0x7f0000000180)="0e6aad0e336b039a8488037bcb281392a2e3c43e7bf51440b97da00c4918897aac392010bfa37f84d071d14157a5be4c41c367d1335b6a3fba9c0fe87b0da3ed9b1d734f436253cc639d49ffa8596bbe7a98b680506f4380b852ca021ab0e62e62e7f61155c8ed587e60c75c6580be9ec1a875ca0131356c724244df2f9716ae0dd6ce380e9c28c9b643bbcb71b11ddd8f72154e9be125978f1e0ce2437945ed69fb8f13a321d5e3ea5fc0e1ec7ef05904bb065aefc847207e32d3a0ca38213cb24f", 0xc2) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="2c79742368742d36ff6618dc049cceefaac67777b4af678e9d54e0f5742bf21a"}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000140)) 01:36:34 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x1) mmap(&(0x7f0000000000/0x24e000)=nil, 0x24e000, 0x2000000, 0x33, r0, 0x0) ioctl$int_out(r0, 0x40045731, &(0x7f0000000100)) socketpair(0x10, 0x7, 0x9, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000140)) 01:36:34 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x430aab05, 0x210000) setsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000000080)={@empty, @local={0xac, 0x14, 0x14, 0xaa}}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() sendmsg$netlink(r1, &(0x7f00000064c0)={&(0x7f0000000040)=@kern={0x10}, 0xc, &(0x7f0000005200)=[{&(0x7f00000051c0)={0x10, 0x24, 0x405}, 0x10}], 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 01:36:34 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000588ff1)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r1 = eventfd(0x800) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x80032, r0, 0x40000000) mmap(&(0x7f0000015000/0xaa6000)=nil, 0xaa6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0xe000}, {r0}], 0x2, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={0x9}, 0x8) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000857ff8)={0x0, r1}) read$eventfd(r1, &(0x7f0000000000), 0x1f4) 01:36:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:34 executing program 5: restart_syscall() syz_emit_ethernet(0x26, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@generic={0x4305, "5bc83e5d92bfd61a3febb838d030cd5058c4afab0c2d7758"}}}, &(0x7f0000775000)) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x10000, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x80000000, 0x8000) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x1, r1}) syz_emit_ethernet(0x56, &(0x7f0000000000)={@random="0c7ffe2891dc", @empty, [], {@canfd={0xd, {{0x0, 0x0, 0x3, 0x19ad7254}, 0x3d, 0x84b9aec0fd52241d, 0x0, 0x0, "ed0f2f2a217f238958dbdbed5eb42af7edd3ccbff6fc255117d9b6616c4a0cc144c747094949e7a67fbae56fc888c0767e15ba9188472cf19c34cdfd29a43910"}}}}, &(0x7f0000000080)={0x0, 0x1, [0xfca, 0x659, 0x18f, 0xc3f]}) 01:36:34 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1) 01:36:34 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000001380)='/dev/snd/controlC#\x00', 0x0, 0x804) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x40) [ 170.595749] 9pnet: Unknown protocol version [ 170.595749] p2000 01:36:34 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e00000004000000000000"], 0x1) 01:36:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:34 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x1000000000006, 0x0) unshare(0x2000400) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r1) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000280)={0x7, 0x70, 0xffff, 0xff, 0x9039, 0x10000, 0x0, 0xffffffff, 0x8000, 0x7, 0xd0, 0x0, 0x0, 0x800, 0x1, 0x7, 0xfffffffffffffffc, 0x100000000, 0xffffffff, 0x9b, 0x100, 0x3, 0x1, 0x7fff, 0xfffffffffffffff8, 0x1, 0x1, 0x5, 0x5, 0x7dc, 0xa27, 0x7, 0xbc, 0x1, 0x8, 0x2, 0x658, 0x400, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x401, 0x1763c080, 0xfff, 0x4, 0x800, 0x2, 0x6d3}, r3, 0x0, r2, 0x2) recvmsg$kcm(r2, &(0x7f0000002500)={&(0x7f0000000040)=@xdp, 0x80, &(0x7f0000002440), 0x0, &(0x7f00000024c0)=""/38, 0x26}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x1d1, 0x8, 0x7f, 0x2, 0x6, 0xe295, 0x0, {0x0, @in={{0x2, 0x4e20, @broadcast=0xffffffff}}, 0x0, 0x81, 0x9, 0xffffffff, 0x9}}, &(0x7f0000000000)=0xb0) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000200)={0xfff, 0xa6cd, 0x100000000, 0xffff}, 0x8) setsockopt$inet6_int(r0, 0x29, 0xe890b0781e2db48d, &(0x7f0000000300)=0xfffffffffffffffa, 0x4) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={r4, 0x200}, 0x8) 01:36:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x1a8, [0x20000140, 0x0, 0x0, 0x20000170, 0x200002b8], 0x0, &(0x7f0000000080), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', 'bond_slave_1\x00', 'team_slave_1\x00', @empty, [], @empty, [], 0x70, 0xe0, 0x118}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2}, 0xffffffffffffffff}}}, @arpreply={'arpreply\x00', 0x10, {{@random="05abeb793a87"}}}]}, @arpreply={'arpreply\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x220) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7ff, 0x303000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000000c0)={0x20, 0x1, {0xffffffffffffffff, 0x2, 0x1, 0x2, 0x1f}}) 01:36:34 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xfffffffffffffffe, 0x4, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x6}, 0x3dc) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f}}, 0x20) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000004c0)={0x0, 0x6, 0x3, [0x7, 0x7, 0x100000001]}, &(0x7f0000000500)=0xe) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000580)={r2, 0xffffffff80000000, 0x30, 0x5c51}, &(0x7f00000005c0)=0x18) openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x20001, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000000c0)=0xe, 0x4) pselect6(0x40, &(0x7f0000000300)={0x80000000, 0x3ff, 0x3, 0x2, 0x0, 0x8, 0x7, 0xe116}, &(0x7f0000000340)={0x1, 0x6, 0x4, 0x9, 0x100, 0x8, 0x7, 0x100000000}, &(0x7f0000000380)={0x2, 0x9, 0x9, 0x9, 0x3, 0xfffffffffffffe00, 0x2, 0x81}, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400)={0x5}, 0x8}) write(r0, &(0x7f0000000040)="251ea6357dc80daec30bd075865b3db03a463c7c3f7f2f87f2c0613e9df4a475b5e4742391d0e23f1cc1fac8ac1c71070f77ea694f5a6c34a7d17230086ebbf9", 0x40) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x2) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000540), 0xfffffffffffffd27) fstat(r0, &(0x7f0000000240)) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x7) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000480), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000100)={0x7fffffff, 0x2, {0x0, 0x1, 0x3, 0x3, 0x80}}) 01:36:34 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x151) creat(&(0x7f0000000040)='./file0\x00', 0x1c) close(r1) 01:36:34 executing program 6: unshare(0x20400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, [], 0x14}, 0x5}, @in={0x2, 0x4e23, @rand_addr=0xb83f}, @in={0x2, 0x4e22, @broadcast=0xffffffff}, @in6={0xa, 0x4e24, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0x8000}, @in6={0xa, 0x4e22, 0x100000001, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x8000}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r1, 0x9}, 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x4008556c, 0x0) [ 170.888665] 9pnet: Unknown protocol version [ 170.888665] p2000 01:36:35 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e00000004000000000000"], 0x1) [ 171.006881] x_tables: eb_tables: arpreply target: used from hooks OUTPUT, but only usable from PREROUTING 01:36:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) [ 171.081313] x_tables: eb_tables: arpreply target: used from hooks OUTPUT, but only usable from PREROUTING 01:36:35 executing program 1: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000013c0)="ee", 0x1}], 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000180)={0xfffffffffffffffe, 0x800a, 0x2, 0x5, 0x0}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000200)={r3, 0x7f, 0x0, 0x20, 0x6}, &(0x7f00000002c0)=0x18) preadv(r1, &(0x7f0000000080), 0xf2, 0x0) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 01:36:35 executing program 4: r0 = eventfd2(0x0, 0x80800) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000d4a000)={0xa0000014}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000cd5000)) epoll_wait(r1, &(0x7f0000f74fdc)=[{}], 0x1, 0x0) [ 171.194383] 9pnet: Unknown protocol version [ 171.194383] p2000 01:36:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r1, 0x110000000012) r2 = accept(r1, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x7fffffff, {{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x88) 01:36:35 executing program 0: unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents(r0, &(0x7f0000000180)=""/69, 0x45) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000000c0)=""/144) 01:36:35 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) r1 = accept(0xffffffffffffff9c, &(0x7f0000000400)=@sco, &(0x7f0000000480)=0x80) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x2, 0x10}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000680)={r2, @in={{0x2, 0x4e24}}, [0x1, 0x8001, 0x0, 0x8, 0x7, 0x7fff, 0xfff, 0x8001, 0x1, 0x1ff, 0x10000, 0x101, 0x0, 0x5, 0x1]}, &(0x7f0000000140)=0x100) dup2(r0, r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb8, r3, 0x2, 0x70bd28, 0x25dfdbfd, {0x10}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc1}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5f5bdc84}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x412}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0a85322, &(0x7f0000000280)={0x8000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000001c0)={{}, 'port1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x0, 0x0) 01:36:35 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e00000004000000000000"], 0x1) 01:36:35 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000840)='./file0\x00', &(0x7f0000000800)="045b898f73", 0x1004, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 01:36:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000004c0)=0xfd, 0x4) r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x20000000000000, 0xa000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='#', 0x1}], 0x1}}], 0x1, 0x0) fsync(r0) read(r1, &(0x7f0000000040)=""/153, 0x39) link(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 01:36:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000007) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000000540)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="9e8d"]}, 0x18}, 0x1}, 0x0) [ 171.605504] 9pnet: Unknown protocol version [ 171.605504] p2000 01:36:35 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x5, 0x40040) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = epoll_create1(0x0) r2 = dup2(r1, r1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)=ANY=[@ANYBLOB="1c000000320001020000000000000000000000fa0700010004000100"], 0x1c}, 0x1}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000240)=""/84) r4 = add_key(&(0x7f00000000c0)='trusted\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000200)="9a078a52aac60fbd1d0aa0f6a18ce019b23c1587292646298a52781933e4a7572885c0c97f", 0x25, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r4) r5 = epoll_create1(0x0) close(r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000180)={0x4}) epoll_pwait(r5, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140), 0x8) 01:36:35 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c3"], 0x1) 01:36:35 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7e) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = gettid() capset(&(0x7f0000000040)={0x20071026, r1}, &(0x7f0000000080)={0x1000, 0x5633, 0x0, 0x0, 0x401, 0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_mreqn(r2, 0x0, 0x13, &(0x7f0000000100)={@local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x4, @empty, 0x80000000}, {0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0x1a}, 0x6}, 0x1267, [0x6, 0x6, 0x9, 0x3, 0x2, 0x0, 0xcb, 0x49a]}, 0x5c) 01:36:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:35 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000080)={0x0, 0x0}) r1 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(r0, r1, 0x12, &(0x7f0000000140)={0x20, 0x200, 0x7, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) r4 = socket$nl_xfrm(0x11, 0x3, 0x6) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6}, 0x14) io_getevents(0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x0, 0x1c9c380}) io_submit(r3, 0x2b1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r2, &(0x7f0000000140)}]) 01:36:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00004bb000)={0xa, 0x2}, 0x1c) listen(r1, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x2000000000000002) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00009d8000), 0x4) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x17, 0x3, 0x0, 0x10, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2c}, @sadb_x_nat_t_port={0x1, 0x0, 0x4e24}, @sadb_x_nat_t_type={0x1, 0x14, 0xffff}, @sadb_x_sa2={0x2, 0x13, 0x81, 0x0, 0x0, 0x70bd26, 0x3505}, @sadb_x_sa2={0x2, 0x13, 0x1ff, 0x0, 0x0, 0x70bd28, 0x3505}, @sadb_x_sa2={0x2, 0x13, 0xfff, 0x0, 0x0, 0x70bd28, 0x3505}, @sadb_lifetime={0x4, 0x7, 0x50bc623, 0x0, 0x5, 0x9}]}, 0x80}, 0x1}, 0x8040) sendto$inet6(r0, &(0x7f0000eb9fff), 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x2}, 0x1c) shutdown(r0, 0x1) [ 171.831896] tc_dump_action: action bad kind [ 171.882811] capability: warning: `syz-executor4' uses deprecated v2 capabilities in a way that may be insecure [ 171.900582] 9pnet: Unknown protocol version [ 171.900582] p2000 [ 171.917136] tc_dump_action: action bad kind 01:36:36 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c3"], 0x1) 01:36:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) [ 172.103933] 9pnet: Unknown protocol version [ 172.103933] p2000 01:36:36 executing program 2: unshare(0x200) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x301000) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x4, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'team_slave_1\x00'}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)="885fb240885f2a45347a0ee4445e5f69a6fe72e68ff0cf190d391e297c2bf0eef657808fc14748168780fb57491c0434fb1f5ba7ae95c1ed36af988aeaab59950c590ad54e3434780d52d8363ce8dfa4a9b4bcc541ae98ba249782e6b74aedd268863d2a39f4c87da561c16ed675f8bba053534a246b", 0x76}], 0x1, &(0x7f00000003c0)=[{0xf0, 0x11f, 0x9, "0c1d1a5b21a6fa7a51d75171ab6fa12508670b403fd024ded84fa48acd5a53ec5c26b4be48a6f2b2d9b920cc1c0d60500594b2ed99b8ce1bd4f13184776a508608a14b0956a544d7b395d914d18067187a331cdbfa69b880dabe4e91feea9cccb7e4cf1637752fb597484ea0a0417d89db708ab5cb19e78ec09369224b6f2acc490cbb693a4214866fafc6f23c30900b2d094890d68fd4603d52b9ed601ec916d90fac4d5ba186b18565ca8679b9eb6740cf71f54648531e1246d6f9f4d558f332bd5587aae630e081c1b37b30375621482c5563de0a8c914c885a11"}, {0x147, 0x0, 0x9, "122543362d47bea8314f9d7290e24a52af252f136c390758d4d764a8c5f9ee4b83dc4197b8708f02af4d01b83322931ae8b47d1b707ec32ba9d2806a71a7b5f93be5bf038f391be9"}, {0x48, 0x187, 0xffff, "b27e5f4f76b0a02d634f940f1223a9bd59563af50ec9ea9b0c4ac85e6bc011fef6bc88db49709bb4296ccaea58a015d569df449df08da8"}, {0x38, 0x10b, 0x80000001, "61bb481e5f810529b8d0034e83d7f6f0bcc10e1602e2c9273b3b3484ba3dc24f0473"}, {0x80, 0x3a, 0x80000001, "005420f919814ebbe2895ccd63358751214492fc1ab3bd990b59d938ea6b2779657a4f7857afb9008be3a9f4eb520502869d2a0390e997aaa8569b97581871d6aae8c3b89518548b0b488b2581314fc0611d36b4ffb1df5ebad9f8d2d3ab7d782f716e0377307f123d86e625fb1b672c"}, {0x100, 0x0, 0x7, "689ba16dc0eab9044f236de06598c1190961da90bdcc764d7d0c8370d98199b889e77778ca5a0e27761bf0ca03ea52ce27fa480beee99403ceb9f6dca5f7b826a5ea05663a62d6482e344aea96a41b34ac09bb7d7eed250d6912f7437a052cdb819ed704be373dac4ce12fc10c4eb2126e9ee186ecd740b55c6d5b0d4817b84eeb1fcd7f13e819935193cf6b8bea4d00436ec6a6d487d9be92520b96e639338af9c1d2fc19cccf9fc1e5d37aa38e2d23c125f320782cbbe387c6bfa223f8c5bbf51dec0972c2b5c979d95b949c17a1f2392c2a6bb955c48f9748e181abf1633859a32dab33b6b48be896ef9f67"}], 0x348, 0x800}, 0x10000}], 0x1, 0x800) write(r1, &(0x7f0000000200)="0592d16843de5e2bdbbabfd2b9e356d3550b59dd1c6a0015c2eaa645a13c827d5f2852ae4ea33dc695ad99a7c43b70b59dfcc391d0ef709d472180c18b44452d7baa6a3645a8546181ac57dfdf7e09a4a16f9a046a1fb45617eb9c0edb7b3e671d5c82e0b49b0cfc89bb0acc3080a54c94c223a11b98030f324d79f5f66ffc04b1d34487ceb926db8fe33059208e2dff77187e4dcaae807e144f2680d8872a5618", 0xa1) getsockname(r0, &(0x7f0000000340)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000180)) 01:36:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000052001f0014f9f407000904ff0200070208000100feffffff0800000000000006", 0x24) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={r2, 0xffff}, &(0x7f0000000140)=0x8) 01:36:36 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000001ffc), &(0x7f0000012000)=0x4) r3 = accept4(r2, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80, 0x80000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000e7f000/0x4000)=nil, 0x4000}, &(0x7f0000000140)=0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 01:36:36 executing program 1: r0 = socket$inet6(0xa, 0x807, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'security.selinux\x00'}], 0xa}, 0x1d) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000eed000)={0x2, 0x1}, 0x10) syz_emit_ethernet(0x423, &(0x7f0000000cc0)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1=0xe0000001}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "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"}}}}}, 0x0) sendto$inet(r1, &(0x7f0000000440)="68c165ea1904e29d32ce13eb10bac19251bcd73c4e79e777d75f71eae225e9f0c62b18b191ce2bb173283e9e01e1d89b15dd231891a2be4e8abefa518d85713702418dc3ebe617941eec8b50714f25b3672dff95cd52c68422b243ee6aa5c5c071f7a57dbbaffa9f970bdbe5b240c47f63239b15d38bf344d1974a481850e3f7cf7f41b72ad6af7c533702a7825dd88d387b990045d44549ec520260defde6796530349db24a58aa24eacd6c746aac34e0f364b62c60161af6277f", 0x0, 0x0, &(0x7f0000000400)={0x2, 0x1, @loopback=0x7f000001}, 0x5) r2 = accept4(r1, &(0x7f0000000100)=@hci, &(0x7f0000000180)=0x80, 0x80000) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x2000, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000300)=""/216) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000001c0)=0x3, &(0x7f0000000200)=0x4) r4 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x100000001, 0x400) ioctl$TCSBRK(r4, 0x5409, 0x7) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00') poll(&(0x7f0000000000)=[{r1}], 0x20000000000001e6, 0x0) 01:36:36 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c3"], 0x1) 01:36:36 executing program 5: r0 = socket$inet(0x2, 0x200000000000003, 0x1ff) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaa0000080045000030000000000009907800000000ffffff00000000450000000000000000000000ac14ffbbe00000010000000000"], &(0x7f0000ea3000)) accept4(r0, 0x0, &(0x7f0000000040), 0x80000) 01:36:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:36 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) r1 = accept(0xffffffffffffff9c, &(0x7f0000000400)=@sco, &(0x7f0000000480)=0x80) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x2, 0x10}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000680)={r2, @in={{0x2, 0x4e24}}, [0x1, 0x8001, 0x0, 0x8, 0x7, 0x7fff, 0xfff, 0x8001, 0x1, 0x1ff, 0x10000, 0x101, 0x0, 0x5, 0x1]}, &(0x7f0000000140)=0x100) dup2(r0, r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb8, r3, 0x2, 0x70bd28, 0x25dfdbfd, {0x10}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc1}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5f5bdc84}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x412}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0a85322, &(0x7f0000000280)={0x8000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000001c0)={{}, 'port1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x0, 0x0) [ 172.746393] 9pnet: Unknown protocol version [ 172.746393] p2000 01:36:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:36 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff289189002803"], 0x1) 01:36:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x800000000020000, 0x0) fallocate(r0, 0x0, 0x1, 0x0) 01:36:36 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x12000, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x3, 0x9}, 0x8) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, {0xa}}, 0x5c) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x80483f, 0x0) 01:36:36 executing program 2: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400080000f4ffffffbc7000ffffffff0000dffc0c00000000000000000000005b659a62290ffc380c2dbfdc5e9f13e1a04810d464fbc3f4c1b4e2bf501fb1bb949869c2984d914d9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}, 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}, 0x0, 0x3f, 0x0, "099d4229519f6e4fec9a4a13251551c57def2567646053845cc9d4aaf6f7c12652e366ad84d000312581134a4c0a9a88e9db29cefd2046a14b81cd655220c89c2f0419a4785594ccf842df9cb66245f3"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x400, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f00000000c0)=0x9, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) [ 172.990808] 9pnet: Unknown protocol version [ 172.990808] p2000 01:36:37 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff289189002803"], 0x1) 01:36:37 executing program 1: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2, 0x0, 0x0, 0xfffffffffffffff8}) fcntl$setlease(r0, 0x400, 0x0) mq_unlink(&(0x7f00000005c0)='-$\x00') 01:36:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TCFLSH(r1, 0x540b, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000001600)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000002000000000000000013d8d9e8000000000000000000000000000000000000000000000000000000"], 0x48) close(r2) close(r1) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000011000/0x600000)=nil, 0x600000}, 0x1}) 01:36:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:37 executing program 2: r0 = memfd_create(&(0x7f0000000040)="21288a47504c6b657972696e672b00", 0x1) read(r0, &(0x7f0000000080)=""/140, 0x8c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0x0, &(0x7f0000000000)) [ 173.318158] 9pnet: Unknown protocol version [ 173.318158] p2000 01:36:37 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff289189002803"], 0x1) 01:36:37 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x8, 0x501800) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) alarm(0x4) exit(0x0) r2 = semget(0x1, 0x7, 0x40) semctl$GETZCNT(r2, 0x7, 0xf, &(0x7f0000000000)=""/117) alarm(0x0) r3 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x20, 0x105000) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f00000000c0)=0x80, 0x4) 01:36:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:37 executing program 1: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000028000)='./control\x00', 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x6, &(0x7f0000000040)={r1, r2+10000000}) name_to_handle_at(r0, &(0x7f000003bff6)='./control\x00', &(0x7f0000041f20)={0x81, 0x0, "0352931ac464048d1290b280fae4ad967afce5f5a3d446848184c39cb8ce2f10b824ad4cb36dfb6f8332811af41066621463ab46905805b6af105235480cffe4333e49a1d04c18720833b4224e6efc3bbde5432e9d983e3ff5e55be3c0e32138a4a99328296b186e8d507a032eab9ba8e70f17b8ec63dd6f8d"}, &(0x7f000001dffc), 0x0) 01:36:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000f4dff4)={0x10}, 0xc, &(0x7f00005ad000)={&(0x7f00000005c0)=@acquire={0x134, 0x17, 0xf11, 0x0, 0x0, {{}, @in=@multicast1=0xe0000001, {@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@rand_addr}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@mark={0xc, 0x15}]}, 0x134}, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x10001, 0x4) [ 173.650105] 9pnet: Unknown protocol version [ 173.650105] p2000 01:36:37 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x200000df, &(0x7f0000000380)=@raw, &(0x7f00000003c0)='GPL\x00', 0x2, 0xffffffffffffffe2, &(0x7f00000000c0)=""/17, 0x41eff, 0x1}, 0x48) r1 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x240) r2 = dup2(r0, r1) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) pipe(&(0x7f0000942000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000c85000)) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000080)={0x7, 0x3ff, 0x2, 0xfffffffffffffff8, 0x7, 0x6e2}) ioctl$VT_ACTIVATE(r5, 0x5606, 0x800) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000040)={0x40000004}) epoll_pwait(r4, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140), 0x8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000240)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) sysfs$3(0x3) bind$packet(r6, &(0x7f0000000340)={0x11, 0xc, r7, 0x1, 0x5, 0x6, @random="e88219440cfa"}, 0x14) 01:36:37 executing program 2: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) splice(r0, &(0x7f0000000040)=0x4b, r0, &(0x7f0000000080)=0xfffffffffffffffc, 0x8000, 0x6) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x32}, 0x0, @in=@multicast2=0xe0000002}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 01:36:37 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff28918900280300002803f9"], 0x1) 01:36:37 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x8, 0x20000) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000080)) pwritev(r0, &(0x7f0000001540)=[{&(0x7f0000000080)}, {&(0x7f00000014c0)="48b1b220b6242b043a9548fcfd4209282f27fa394613bfdcb79705b7ed0ad86d6d2b3c661ed4f848812439fb195f4b5a243a584e419b12ca76cea13deddea426139eb00079af1923", 0x48}], 0x2, 0x0) 01:36:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x103, 0x0, 0x35) [ 173.875987] 9pnet: Unknown protocol version [ 173.875987] p2000 01:36:37 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff28918900280300002803f9"], 0x1) 01:36:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) [ 173.957737] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:36:38 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x8000) 01:36:38 executing program 2: sched_setattr(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}, 0x0) 01:36:38 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240)={0x0, 0x0, 0x800}, 0x14) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000300), 0x4) 01:36:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) [ 174.273421] 9pnet: Unknown protocol version [ 174.273421] p2000 01:36:38 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff28918900280300002803f9"], 0x1) 01:36:38 executing program 1: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)) 01:36:38 executing program 4: r0 = socket(0x10, 0x80002, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080), 0x4) 01:36:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000440)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 01:36:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x3, 0x1006, 0x7, 0x0, 0x1}, 0x2c) 01:36:38 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="e92be282e09b542ad5"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x7, 0x199352, 0x0, 0x0, 0x0, 0x0, 0xeac31c00}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 174.680702] 9pnet: Unknown protocol version [ 174.680702] p2000 01:36:38 executing program 1: mkdir(&(0x7f0000000500)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x8) 01:36:38 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff28918900280300002803f936ffff"], 0x1) 01:36:38 executing program 0: rt_sigaction(0x400000000000007, &(0x7f0000000180)={0x4224be, {0xffffffbfffbff270}}, &(0x7f0000000600), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) 01:36:38 executing program 2: r0 = socket(0x10, 0x80002, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040), 0x4) 01:36:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:38 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) 01:36:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000240)={0x10}, 0x33, &(0x7f0000000000)={&(0x7f0000000200)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, [{0x4}]}]}, 0x28}, 0x1}, 0x0) [ 175.042910] 9pnet: Unknown protocol version [ 175.042910] p2000 [ 175.105605] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.112159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.190635] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.197198] bridge0: port 1(bridge_slave_0) entered forwarding state 01:36:39 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x100000000005, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100100001, 0x0, r0}, 0x2c) 01:36:39 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000b90ffc), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x10, "9974e4118382839b3db9f114fb6985a8"}, &(0x7f00000001c0)=0x18) 01:36:39 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff28918900280300002803f936ffff"], 0x1) 01:36:39 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) close(r0) 01:36:39 executing program 2: 01:36:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) 01:36:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:39 executing program 5: request_key(&(0x7f0000000400)="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", &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3, 0x1000500}, &(0x7f0000000680)="af2019dcc2380b4623dc8c7a581973a96d57452035fca47b18e7992f4c82e608a92c747d40fbe115201e8a326e80519f2f5a436783ee4e3264245238b946a4a11d39b7873e5f3296185625d49ae13974d13940d0c01a5029b35aec2234864afd4648", 0x0) [ 175.398183] 9pnet: Unknown protocol version [ 175.398183] p2000 01:36:39 executing program 2: rt_sigpending(&(0x7f0000000180), 0x8) 01:36:39 executing program 5: r0 = socket$inet6(0xa, 0x1200000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") read(r1, &(0x7f0000000040)=""/21, 0x15) pread64(r1, &(0x7f0000003c00)=""/4096, 0xffffff4b, 0x0) 01:36:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000040)={@multicast1=0xe0000001, @loopback=0x7f000001, @loopback=0x7f000001}, 0xc) 01:36:39 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x8}, 0x6) 01:36:39 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff28918900280300002803f936ffff"], 0x1) 01:36:39 executing program 1: 01:36:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:39 executing program 6: 01:36:39 executing program 2: 01:36:39 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff28918900280300002803f936ffffff"], 0x1) 01:36:39 executing program 1: 01:36:39 executing program 4: [ 175.831600] 9pnet: Unknown protocol version [ 175.831600] p2000 01:36:39 executing program 6: 01:36:40 executing program 5: 01:36:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:40 executing program 2: 01:36:40 executing program 0: 01:36:40 executing program 1: 01:36:40 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff28918900280300002803f936ffffff"], 0x1) 01:36:40 executing program 4: [ 176.155534] 9pnet: Unknown protocol version [ 176.155534] p2000 01:36:40 executing program 6: 01:36:40 executing program 5: 01:36:40 executing program 2: 01:36:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_9p2000='version=\np2000', 0x2c}]}}) 01:36:40 executing program 1: 01:36:40 executing program 0: 01:36:40 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff28918900280300002803f936ffffff"], 0x1) 01:36:40 executing program 4: 01:36:40 executing program 5: [ 176.493109] 9pnet: Unknown protocol version [ 176.493109] p2000 01:36:40 executing program 6: 01:36:40 executing program 2: 01:36:40 executing program 1: 01:36:40 executing program 0: 01:36:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) 01:36:40 executing program 2: 01:36:40 executing program 4: 01:36:40 executing program 7: [ 176.825535] 9pnet: Insufficient options for proto=fd 01:36:40 executing program 6: 01:36:40 executing program 5: 01:36:40 executing program 0: 01:36:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) 01:36:41 executing program 1: 01:36:41 executing program 7: 01:36:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) readv(r1, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f0000000540)=""/101, 0x65}], 0x2) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000080)=""/53, 0x35}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="17", 0x1}], 0x1) 01:36:41 executing program 4: mkdir(&(0x7f0000000500)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4400, 0x8) 01:36:41 executing program 6: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RCREATE(r0, &(0x7f00000000c0)={0x18, 0x73}, 0x18) 01:36:41 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x20000000000002, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x8) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x399) 01:36:41 executing program 5: r0 = socket(0x10, 0x80002, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000040)=""/166, &(0x7f0000000100)=0xa6) [ 177.208425] 9pnet: Insufficient options for proto=fd 01:36:41 executing program 1: delete_module(&(0x7f0000000000)='/dev/dsp#\x00', 0x0) 01:36:41 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x46, &(0x7f0000000700)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0xb, 0x2c, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x2c00, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, &(0x7f0000000000)) 01:36:41 executing program 6 (fault-call:1 fault-nth:0): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff28918900280300002803f936ffffffff"], 0x1) 01:36:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) [ 177.511178] ================================================================== [ 177.512102] FAULT_INJECTION: forcing a failure. [ 177.512102] name failslab, interval 1, probability 0, space 0, times 1 [ 177.518639] BUG: KMSAN: uninit-value in ipv6_skip_exthdr+0x156/0x910 [ 177.518658] CPU: 1 PID: 7561 Comm: syz-executor7 Not tainted 4.18.0-rc4+ #23 [ 177.518668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.518674] Call Trace: [ 177.518698] dump_stack+0x185/0x1e0 [ 177.518747] kmsan_report+0x195/0x2c0 [ 177.562943] __msan_warning_32+0x7d/0xe0 [ 177.567006] ipv6_skip_exthdr+0x156/0x910 [ 177.571161] ipv6_get_l4proto+0x1be/0x2f0 [ 177.575311] nf_conntrack_in+0x54a/0x2070 [ 177.579471] ? ipv6_invert_tuple+0xf0/0xf0 [ 177.583709] ipv6_conntrack_in+0xc3/0xf0 [ 177.587764] ? ipv6_hooks_unregister+0x200/0x200 [ 177.592512] nf_hook_slow+0x15d/0x3e0 [ 177.596320] ipv6_rcv+0x1df5/0x2250 [ 177.599954] ? local_bh_enable+0x40/0x40 [ 177.604025] __netif_receive_skb_core+0x4a7a/0x4fc0 [ 177.609052] ? ip6_rcv_finish+0x6e0/0x6e0 [ 177.613205] netif_receive_skb_internal+0x475/0x660 [ 177.618223] netif_receive_skb+0x246/0x270 [ 177.622457] tun_get_user+0x80f6/0x89c0 [ 177.626455] tun_chr_write_iter+0x1d4/0x330 [ 177.630776] ? tun_chr_read_iter+0x460/0x460 [ 177.635175] do_iter_readv_writev+0x81a/0xac0 [ 177.639672] ? tun_chr_read_iter+0x460/0x460 [ 177.644083] do_iter_write+0x30d/0xd50 [ 177.647972] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 177.653415] ? import_iovec+0x3e0/0x640 [ 177.657392] do_writev+0x3d8/0x860 [ 177.660961] __x64_sys_writev+0xe1/0x120 [ 177.665023] ? __ia32_sys_readv+0x120/0x120 [ 177.669342] do_syscall_64+0x15b/0x230 [ 177.673230] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 177.678411] RIP: 0033:0x455ce1 [ 177.681597] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 54 bb fb ff c3 48 83 ec 08 e8 da 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 23 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 177.700845] RSP: 002b:00007fbe0ead2ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 177.708546] RAX: ffffffffffffffda RBX: 0000000000000046 RCX: 0000000000455ce1 [ 177.715808] RDX: 0000000000000001 RSI: 00007fbe0ead2bf0 RDI: 00000000000000fc [ 177.723065] RBP: 0000000020000700 R08: 00000000000000fc R09: 0000000000000000 [ 177.730334] R10: 0000000000000046 R11: 0000000000000293 R12: 00000000ffffffff [ 177.737593] R13: 00000000004c2440 R14: 00000000004d3ca0 R15: 0000000000000000 [ 177.744868] [ 177.744901] CPU: 0 PID: 7564 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #23 [ 177.746480] Uninit was stored to memory at: [ 177.746510] kmsan_internal_chain_origin+0x13c/0x240 [ 177.753688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.757982] kmsan_memcpy_origins+0x11d/0x170 [ 177.758005] __msan_memcpy+0xe7/0x150 [ 177.763083] Call Trace: [ 177.772434] skb_copy_bits+0x1f9/0xd80 [ 177.772460] ipv6_get_l4proto+0x105/0x2f0 [ 177.776967] dump_stack+0x185/0x1e0 [ 177.780724] nf_conntrack_in+0x54a/0x2070 [ 177.780747] ipv6_conntrack_in+0xc3/0xf0 [ 177.783358] should_fail+0x8a7/0xae0 [ 177.787179] nf_hook_slow+0x15d/0x3e0 [ 177.787201] ipv6_rcv+0x1df5/0x2250 [ 177.791348] __should_failslab+0x278/0x2a0 [ 177.794934] __netif_receive_skb_core+0x4a7a/0x4fc0 [ 177.794959] netif_receive_skb_internal+0x475/0x660 [ 177.799122] should_failslab+0x29/0x70 [ 177.803123] netif_receive_skb+0x246/0x270 [ 177.803146] tun_get_user+0x80f6/0x89c0 [ 177.806851] __kmalloc_node+0x23c/0x1240 [ 177.810610] tun_chr_write_iter+0x1d4/0x330 [ 177.810632] do_iter_readv_writev+0x81a/0xac0 [ 177.814251] ? _raw_spin_unlock_bh+0x57/0x70 [ 177.818445] do_iter_write+0x30d/0xd50 [ 177.818466] do_writev+0x3d8/0x860 [ 177.823478] ? kvmalloc_node+0x19d/0x370 [ 177.828453] __x64_sys_writev+0xe1/0x120 [ 177.828476] do_syscall_64+0x15b/0x230 [ 177.832392] kvmalloc_node+0x19d/0x370 [ 177.836555] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 177.836578] kmsan_internal_chain_origin+0x13c/0x240 [ 177.840549] xt_alloc_table_info+0xbe/0x180 [ 177.844564] kmsan_memcpy_origins+0x11d/0x170 [ 177.844587] kmsan_memmove_origins+0x9/0x10 [ 177.848905] do_ipt_set_ctl+0x46b/0xa80 [ 177.853362] __msan_memmove+0xe7/0x150 [ 177.853388] nf_ct_frag6_gather+0x436a/0x5870 [ 177.857879] ? cleanup_entry+0x620/0x620 [ 177.861702] ipv6_defrag+0x501/0x5c0 [ 177.861725] nf_hook_slow+0x15d/0x3e0 [ 177.865285] nf_setsockopt+0x47c/0x4e0 [ 177.869311] ipv6_rcv+0x1df5/0x2250 [ 177.869337] __netif_receive_skb_core+0x4a7a/0x4fc0 [ 177.873462] ip_setsockopt+0x24b/0x2b0 [ 177.877291] netif_receive_skb_internal+0x475/0x660 [ 177.877316] netif_receive_skb+0x246/0x270 [ 177.881200] udp_setsockopt+0x108/0x1b0 [ 177.886355] tun_get_user+0x80f6/0x89c0 [ 177.886378] tun_chr_write_iter+0x1d4/0x330 [ 177.891479] ? udp_lib_setsockopt+0xc20/0xc20 [ 177.895765] do_iter_readv_writev+0x81a/0xac0 [ 177.895795] do_iter_write+0x30d/0xd50 [ 177.900283] sock_common_setsockopt+0x13b/0x170 [ 177.904563] do_writev+0x3d8/0x860 [ 177.904589] __x64_sys_writev+0xe1/0x120 [ 177.908554] ? sock_common_recvmsg+0x2a0/0x2a0 [ 177.912403] do_syscall_64+0x15b/0x230 [ 177.912429] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 177.916938] __sys_setsockopt+0x496/0x540 [ 177.920961] [ 177.924728] __x64_sys_setsockopt+0x15c/0x1c0 [ 177.928443] Uninit was created at: [ 177.928471] kmsan_internal_alloc_meta_for_pages+0x157/0x730 [ 177.932379] ? __ia32_sys_recv+0x180/0x180 [ 177.935941] kmsan_alloc_page+0x80/0xe0 [ 177.935967] __alloc_pages_nodemask+0x105b/0x6320 [ 177.941004] do_syscall_64+0x15b/0x230 [ 177.944835] alloc_pages_current+0x6b1/0x970 [ 177.944860] skb_page_frag_refill+0x3be/0x5f0 [ 177.949878] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 177.954065] tun_get_user+0xede/0x89c0 [ 177.954088] tun_chr_write_iter+0x1d4/0x330 [ 177.958064] RIP: 0033:0x455e29 [ 177.962015] do_iter_readv_writev+0x81a/0xac0 [ 177.962040] do_iter_write+0x30d/0xd50 [ 177.966341] Code: [ 177.970816] do_writev+0x3d8/0x860 [ 177.970841] __x64_sys_writev+0xe1/0x120 [ 177.975306] 1d [ 177.979170] do_syscall_64+0x15b/0x230 [ 177.979196] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 177.983837] ba [ 177.987369] ================================================================== [ 177.991409] fb [ 177.995971] Disabling lock debugging due to kernel taint [ 177.995988] Kernel panic - not syncing: panic_on_warn set ... [ 177.995988] [ 177.999861] ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 178.137765] RSP: 002b:00007fe50076cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 178.145501] RAX: ffffffffffffffda RBX: 00007fe50076d6d4 RCX: 0000000000455e29 [ 178.152790] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000013 [ 178.160065] RBP: 000000000072bea0 R08: 0000000000000001 R09: 0000000000000000 [ 178.167339] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000014 [ 178.174609] R13: 00000000004c1612 R14: 00000000004d1d20 R15: 0000000000000000 [ 178.181894] CPU: 1 PID: 7561 Comm: syz-executor7 Tainted: G B 4.18.0-rc4+ #23 [ 178.190475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.199834] Call Trace: [ 178.202450] dump_stack+0x185/0x1e0 [ 178.206104] panic+0x3d0/0x9b0 [ 178.209335] kmsan_report+0x2bf/0x2c0 01:36:42 executing program 4: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f00000001c0)) mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000000000), &(0x7f00000088c0)) r0 = inotify_init1(0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x91) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x4, 0xffffffffffffffff, &(0x7f0000000100)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) r3 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x100000000, 0x20002) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x8001, 0x8, 0xffffffffffffffe0, 0x8, 0x5, 0x5, 0x4}, 0x1c) [ 178.213177] __msan_warning_32+0x7d/0xe0 [ 178.217266] ipv6_skip_exthdr+0x156/0x910 [ 178.221446] ipv6_get_l4proto+0x1be/0x2f0 [ 178.225612] nf_conntrack_in+0x54a/0x2070 [ 178.229789] ? ipv6_invert_tuple+0xf0/0xf0 [ 178.234060] ipv6_conntrack_in+0xc3/0xf0 [ 178.238136] ? ipv6_hooks_unregister+0x200/0x200 [ 178.242903] nf_hook_slow+0x15d/0x3e0 [ 178.246725] ipv6_rcv+0x1df5/0x2250 [ 178.250378] ? local_bh_enable+0x40/0x40 [ 178.254450] __netif_receive_skb_core+0x4a7a/0x4fc0 [ 178.259487] ? ip6_rcv_finish+0x6e0/0x6e0 01:36:42 executing program 6 (fault-call:1 fault-nth:1): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000e9ffffff0000000000000000000e0000000400000000000000efebffffffff09673fa644cc9d57e89b86d523c34714ffffff28918900280300002803f936ffffffff"], 0x1) 01:36:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000040)={&(0x7f0000000400)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003400)=""/153, 0x99}], 0x1, &(0x7f0000000940)=""/42, 0x2a}, 0x202) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f00000004c0), 0x1000002c0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000003c0)={0x7, 0x4, 0x8201, 0x0, 0x1, 0x9, 0x2, 0x8, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000680)={r6, 0xe1}, &(0x7f00000006c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}, 0x6f382692, 0xe95, 0x4, 0x200, 0x7}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000500)=ANY=[@ANYRES32=r7, @ANYBLOB="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"], 0xa) sendmmsg(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='#', 0x1}], 0x1}}], 0x1, 0x0) recvfrom(r2, &(0x7f0000000080)=""/174, 0xae, 0x2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x20000000) close(r1) [ 178.263658] netif_receive_skb_internal+0x475/0x660 [ 178.268705] netif_receive_skb+0x246/0x270 [ 178.272959] tun_get_user+0x80f6/0x89c0 [ 178.276995] tun_chr_write_iter+0x1d4/0x330 [ 178.281337] ? tun_chr_read_iter+0x460/0x460 [ 178.285759] do_iter_readv_writev+0x81a/0xac0 [ 178.290289] ? tun_chr_read_iter+0x460/0x460 [ 178.294714] do_iter_write+0x30d/0xd50 [ 178.298618] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 178.304105] ? import_iovec+0x3e0/0x640 [ 178.308104] do_writev+0x3d8/0x860 [ 178.311682] __x64_sys_writev+0xe1/0x120 [ 178.315765] ? __ia32_sys_readv+0x120/0x120 [ 178.320096] do_syscall_64+0x15b/0x230 [ 178.324012] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 178.329923] RIP: 0033:0x455ce1 [ 178.333114] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 54 bb fb ff c3 48 83 ec 08 e8 da 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 23 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 178.352442] RSP: 002b:00007fbe0ead2ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 178.360159] RAX: ffffffffffffffda RBX: 0000000000000046 RCX: 0000000000455ce1 [ 178.367435] RDX: 0000000000000001 RSI: 00007fbe0ead2bf0 RDI: 00000000000000fc [ 178.374711] RBP: 0000000020000700 R08: 00000000000000fc R09: 0000000000000000 [ 178.382003] R10: 0000000000000046 R11: 0000000000000293 R12: 00000000ffffffff [ 178.389281] R13: 00000000004c2440 R14: 00000000004d3ca0 R15: 0000000000000000 [ 178.398597] Dumping ftrace buffer: [ 178.402134] (ftrace buffer empty) [ 178.405824] Kernel Offset: disabled [ 178.409430] Rebooting in 86400 seconds..