[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 26.932334] kauditd_printk_skb: 7 callbacks suppressed [ 26.932347] audit: type=1800 audit(1539632130.356:29): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 26.958135] audit: type=1800 audit(1539632130.356:30): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.75' (ECDSA) to the list of known hosts. 2018/10/15 19:35:38 fuzzer started 2018/10/15 19:35:40 dialing manager at 10.128.0.26:44941 2018/10/15 19:35:40 syscalls: 1 2018/10/15 19:35:40 code coverage: enabled 2018/10/15 19:35:40 comparison tracing: enabled 2018/10/15 19:35:40 setuid sandbox: enabled 2018/10/15 19:35:40 namespace sandbox: enabled 2018/10/15 19:35:40 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/15 19:35:40 fault injection: enabled 2018/10/15 19:35:40 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/15 19:35:40 net packed injection: enabled 2018/10/15 19:35:40 net device setup: enabled 19:38:55 executing program 0: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0xa0202) syzkaller login: [ 232.589759] IPVS: ftp: loaded support on port[0] = 21 19:38:56 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000001, &(0x7f0000e68000)={0x2, 0x4004e23, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0x96, 0x4, 0x70, 0x0, 0x1}, 0x3cc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000100), 0x8) [ 232.847281] IPVS: ftp: loaded support on port[0] = 21 19:38:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0xffffffffffffff70, &(0x7f00000002c0)}}], 0x388, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x18, &(0x7f00000001c0)='-mime_typeselinux,@em0!\x00'}, 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) [ 233.228710] IPVS: ftp: loaded support on port[0] = 21 19:38:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x3d, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x54) [ 233.712563] IPVS: ftp: loaded support on port[0] = 21 19:38:57 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000100)) [ 234.156442] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.166905] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.180834] device bridge_slave_0 entered promiscuous mode [ 234.248848] IPVS: ftp: loaded support on port[0] = 21 [ 234.341847] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.348332] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.359432] device bridge_slave_1 entered promiscuous mode [ 234.488082] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 234.524593] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.534908] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.550739] device bridge_slave_0 entered promiscuous mode 19:38:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000001c0)=""/198) [ 234.639187] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 234.697366] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.728466] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.742352] device bridge_slave_1 entered promiscuous mode [ 234.889096] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 234.930783] IPVS: ftp: loaded support on port[0] = 21 [ 235.058939] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 235.101739] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 235.210754] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 235.471399] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 235.544847] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.557238] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.566361] device bridge_slave_0 entered promiscuous mode [ 235.606443] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 235.677680] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.694572] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.702482] device bridge_slave_1 entered promiscuous mode [ 235.741919] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 235.748757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.878154] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 235.886739] team0: Port device team_slave_0 added [ 235.894077] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 235.903320] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 235.943863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.974631] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 235.991668] team0: Port device team_slave_1 added [ 236.033457] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 236.066472] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.086869] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.114713] device bridge_slave_0 entered promiscuous mode [ 236.140715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 236.156305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.172760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.214059] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.225246] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.233448] device bridge_slave_1 entered promiscuous mode [ 236.290200] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 236.306859] team0: Port device team_slave_0 added [ 236.339966] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.377025] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 236.408606] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 236.446034] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 236.460512] team0: Port device team_slave_1 added [ 236.484444] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 236.510281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.520006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.541284] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 236.551946] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 236.575007] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.583970] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.598440] device bridge_slave_0 entered promiscuous mode [ 236.612499] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 236.627699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.639324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.650833] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 236.683325] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 236.699781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.709869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.729469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.766441] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.775985] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.783959] device bridge_slave_1 entered promiscuous mode [ 236.793097] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 236.821413] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 236.829794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.837625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.868794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.915427] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 236.968917] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 236.977674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.994306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.058506] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 237.081820] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 237.131438] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 237.138782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.164673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.211064] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 237.254245] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 237.270456] team0: Port device team_slave_0 added [ 237.381615] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 237.399962] team0: Port device team_slave_1 added [ 237.495249] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 237.558424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.590581] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.597014] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.615727] device bridge_slave_0 entered promiscuous mode [ 237.652076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 237.670055] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 237.678579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.699728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.762292] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.768658] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.790245] device bridge_slave_1 entered promiscuous mode [ 237.806432] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 237.848469] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 237.877185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.899774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.909487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.923855] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 237.948023] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 237.960731] team0: Port device team_slave_0 added [ 237.981399] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 237.999889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.007940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.018346] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 238.039369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.050457] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 238.110499] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 238.125614] team0: Port device team_slave_1 added [ 238.188629] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.195151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.202139] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.208501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.235028] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 238.284085] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 238.302783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.319971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.390913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.411319] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 238.430564] team0: Port device team_slave_0 added [ 238.500332] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 238.507719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.525922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.557362] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 238.597942] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 238.614410] team0: Port device team_slave_1 added [ 238.630333] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 238.644347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.660747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.686751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.721337] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 238.735187] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 238.759556] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.765922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.772666] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.779064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.798888] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 238.805342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.818945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.888786] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 238.904157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.915647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.943824] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 238.974201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.002377] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 239.029815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.041146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.095783] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 239.113317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.150185] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 239.157320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.189848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.456163] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 239.489766] team0: Port device team_slave_0 added [ 239.565997] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.572530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.579255] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.585629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.595366] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 239.617841] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 239.640454] team0: Port device team_slave_1 added [ 239.649653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.661135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.793354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 239.819358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.829774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.966834] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 239.989742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.000366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.115255] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 240.141374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.150936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.183185] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.189668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.196368] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.202809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.280412] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 240.304602] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 240.334129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.349693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.659297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.827449] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.833876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.840595] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.846963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.873379] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 241.735371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.827467] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.833912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.840758] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.847121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.871291] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 242.759542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.557296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.068895] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 244.278261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.670087] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 244.676286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.689743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.712542] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 244.753158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.159444] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.168686] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 245.175284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.182792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.227306] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 245.515030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.657249] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.846472] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 245.862518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.890487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.968028] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 245.999554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.342111] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.431809] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 246.479846] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 246.486042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.494069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.878268] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 246.889147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.904944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.037714] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.369988] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.476280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.970046] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 19:39:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000280)="fc", 0x1, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x100) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000000c0)={0x2, 0x0, [0x0, 0x0, 0x100000001, 0x0, 0x9, 0x36, 0x514f, 0x7fff]}) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/63, 0x3f}, 0x2) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="d40000002f943f2a120f8d41a2e55110ebdac8097e968f0c432b611eea5d3f46ac74d03282bf5dba775af59ca819d3b275751525b7feb24657df735756d735dccd51d2ee6350a9a242e4bd00f6631b34283e1fd4acf141f11c7d2542cdb1cc4db17010e13016fd34e2d72e50e5ce8207000000f634193a1b93d3c8a3d5684c77a9e920ae873c7377cfce3bd54cf1a8c675820b1f7608571460b7f26b816a98bb9839cc2628297b1923e48d1f34497f5cf5ff87cb917f632e871d18739cb471b2ac7870744cefd34a6ef4f57714133cd1a534b2fefd1b5b94"], &(0x7f0000000240)=0xdc) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e23, @multicast1}}}, 0x84) [ 248.330429] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:39:11 executing program 0: ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000800)='/dev/autofs\x00', 0x200000, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000840)={0x7, 0x7f, 0x2}, 0x7) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x7fff, 0x0, 0x9, 0x35, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0xb) sendmsg$rds(r0, &(0x7f0000000a40)={&(0x7f0000000300)={0x2, 0xe803000000000900, @dev={0xac, 0x14, 0x14, 0x1a}, [0x4000000003000000, 0xe00000000000000, 0x9]}, 0x87, &(0x7f0000000480), 0x1, &(0x7f00000006c0)=[@rdma_args={0x0, 0x114, 0x1, {{0x2, 0xf95}, {&(0x7f00000005c0)=""/197}, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/95}], 0x0, 0x8, 0x3}}, @fadd={0x0, 0x114, 0x6, {{0x7, 0x3}, &(0x7f0000000140)=0x8, &(0x7f00000003c0)=0x1, 0x7ff, 0x80000000, 0xffffffffffffff01, 0x1, 0x2, 0x4}}], 0x58, 0x44}, 0x20) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0xc001) write$uinput_user_dev(r2, &(0x7f0000000a80)={'syz1\x00', {0x7, 0x9, 0x9}, 0x23, [0x4, 0x8001, 0x6, 0x6, 0x5, 0xfffffffffffffffd, 0x53, 0xfffffffffffffff8, 0x3, 0x3, 0x9, 0x9, 0x5, 0xfffffffffffffffa, 0x400, 0x7, 0x4, 0x4bd, 0x40, 0x0, 0xd8, 0x2, 0x6, 0x3, 0x100000000, 0x6, 0x0, 0x6, 0x7, 0x7, 0x3ff, 0x100, 0x5, 0x1, 0x2, 0x8, 0x1000, 0xd8, 0x100, 0xd07, 0xffffffffffffff01, 0x3, 0x1, 0x6, 0x1, 0x1, 0x6, 0x11aa, 0x81, 0x81, 0x6, 0x4, 0x7ff, 0x81, 0x200, 0x3, 0x7, 0x9, 0xfffffffffffffeff, 0x400, 0x4, 0x8, 0x9a08, 0x80000000], [0xa2d7, 0x9, 0xff, 0x5, 0x7, 0x8, 0xfffffffffffffff7, 0x7, 0x5, 0x0, 0xffff, 0xfffffffffffffff7, 0x1, 0x877, 0x7, 0x3, 0x5, 0x7f, 0x81, 0x200, 0xd179, 0xff, 0x8000, 0x3, 0x7, 0x7f, 0x3ff, 0xfff, 0x3, 0x2, 0x11, 0xcaa, 0x6, 0x0, 0x6, 0x81, 0xfffffffffffffff9, 0x3542, 0x400, 0xffffffff, 0x1, 0x2, 0x0, 0x25e, 0x7, 0x2, 0xf51, 0x2, 0x8, 0x4, 0x8, 0x5, 0x9, 0x3, 0x4, 0x5, 0x1f, 0x2, 0x3f, 0x2, 0x8, 0x7, 0xd3b, 0x101], [0xff, 0x2, 0x8, 0x5f, 0x6, 0x5, 0x4, 0x8, 0x5, 0x0, 0x8001, 0xff, 0x800, 0x9e, 0x100, 0xfffffffffffffff7, 0x100000001, 0x10001, 0x7478, 0xfffffffffffffffe, 0x4, 0x0, 0x5, 0x10000, 0x1d0, 0x1000, 0x8, 0x10001, 0x9, 0xff, 0xd36, 0x80000001, 0x400, 0x400, 0xffffffff00000000, 0x6, 0x3, 0xfffffffffffffffc, 0x2, 0x0, 0x9, 0x9, 0x9, 0x9, 0x9b80000000000000, 0x10001, 0x8000, 0x8000, 0x6, 0x0, 0x6, 0x8, 0x7, 0xfffffffffffffffa, 0x20, 0x2, 0x3, 0x4, 0x3f, 0x2, 0x2, 0x3, 0x6, 0x200], [0x4, 0x0, 0x0, 0x3, 0x10000, 0xfffffffffffff21d, 0x8, 0xff, 0x1, 0xffffffffffff4de5, 0x2, 0x9, 0x4, 0x9, 0x3ff, 0x2, 0x3, 0x6, 0x1c0000, 0x0, 0x80, 0x0, 0xffffffff80000001, 0x0, 0x1a6, 0x9, 0x7, 0x8, 0x4, 0x6, 0x0, 0x8, 0x800, 0xffff, 0x0, 0x2, 0x8, 0x2, 0x5, 0xc44, 0x3, 0x80000001, 0x6, 0x7, 0x0, 0x4, 0x2f, 0x3, 0x80000001, 0x1, 0x773, 0x5, 0x1, 0x4, 0x80000001, 0x4, 0x9, 0xff, 0xffffffffffffff81, 0x6, 0x8001, 0xffff, 0x4, 0x7fff]}, 0x45c) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8000, 0x0) recvmsg$kcm(r3, &(0x7f00000007c0)={&(0x7f00000001c0)=@in, 0x80, &(0x7f0000000240)=[{&(0x7f0000000400)=""/183, 0xb7}, {&(0x7f00000004c0)=""/195, 0xc3}, {&(0x7f0000000080)=""/34, 0x22}, {&(0x7f0000000340)=""/121, 0x79}], 0x4, &(0x7f0000000780)=""/51, 0x33, 0x4}, 0x40) [ 248.475449] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 248.489672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.502065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.581409] hrtimer: interrupt took 39357 ns 19:39:12 executing program 1: setxattr$security_ima(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000240)=@sha1={0x1, "142856b833fe48a845e8e885d875834c919f51ba"}, 0x15, 0x1) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000080)=0x80) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f00000000c0)={0x3, "d9699b"}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT]) 19:39:12 executing program 0: ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000800)='/dev/autofs\x00', 0x200000, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000840)={0x7, 0x7f, 0x2}, 0x7) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x7fff, 0x0, 0x9, 0x35, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0xb) sendmsg$rds(r0, &(0x7f0000000a40)={&(0x7f0000000300)={0x2, 0xe803000000000900, @dev={0xac, 0x14, 0x14, 0x1a}, [0x4000000003000000, 0xe00000000000000, 0x9]}, 0x87, &(0x7f0000000480), 0x1, &(0x7f00000006c0)=[@rdma_args={0x0, 0x114, 0x1, {{0x2, 0xf95}, {&(0x7f00000005c0)=""/197}, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/95}], 0x0, 0x8, 0x3}}, @fadd={0x0, 0x114, 0x6, {{0x7, 0x3}, &(0x7f0000000140)=0x8, &(0x7f00000003c0)=0x1, 0x7ff, 0x80000000, 0xffffffffffffff01, 0x1, 0x2, 0x4}}], 0x58, 0x44}, 0x20) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0xc001) write$uinput_user_dev(r2, &(0x7f0000000a80)={'syz1\x00', {0x7, 0x9, 0x9}, 0x23, [0x4, 0x8001, 0x6, 0x6, 0x5, 0xfffffffffffffffd, 0x53, 0xfffffffffffffff8, 0x3, 0x3, 0x9, 0x9, 0x5, 0xfffffffffffffffa, 0x400, 0x7, 0x4, 0x4bd, 0x40, 0x0, 0xd8, 0x2, 0x6, 0x3, 0x100000000, 0x6, 0x0, 0x6, 0x7, 0x7, 0x3ff, 0x100, 0x5, 0x1, 0x2, 0x8, 0x1000, 0xd8, 0x100, 0xd07, 0xffffffffffffff01, 0x3, 0x1, 0x6, 0x1, 0x1, 0x6, 0x11aa, 0x81, 0x81, 0x6, 0x4, 0x7ff, 0x81, 0x200, 0x3, 0x7, 0x9, 0xfffffffffffffeff, 0x400, 0x4, 0x8, 0x9a08, 0x80000000], [0xa2d7, 0x9, 0xff, 0x5, 0x7, 0x8, 0xfffffffffffffff7, 0x7, 0x5, 0x0, 0xffff, 0xfffffffffffffff7, 0x1, 0x877, 0x7, 0x3, 0x5, 0x7f, 0x81, 0x200, 0xd179, 0xff, 0x8000, 0x3, 0x7, 0x7f, 0x3ff, 0xfff, 0x3, 0x2, 0x11, 0xcaa, 0x6, 0x0, 0x6, 0x81, 0xfffffffffffffff9, 0x3542, 0x400, 0xffffffff, 0x1, 0x2, 0x0, 0x25e, 0x7, 0x2, 0xf51, 0x2, 0x8, 0x4, 0x8, 0x5, 0x9, 0x3, 0x4, 0x5, 0x1f, 0x2, 0x3f, 0x2, 0x8, 0x7, 0xd3b, 0x101], [0xff, 0x2, 0x8, 0x5f, 0x6, 0x5, 0x4, 0x8, 0x5, 0x0, 0x8001, 0xff, 0x800, 0x9e, 0x100, 0xfffffffffffffff7, 0x100000001, 0x10001, 0x7478, 0xfffffffffffffffe, 0x4, 0x0, 0x5, 0x10000, 0x1d0, 0x1000, 0x8, 0x10001, 0x9, 0xff, 0xd36, 0x80000001, 0x400, 0x400, 0xffffffff00000000, 0x6, 0x3, 0xfffffffffffffffc, 0x2, 0x0, 0x9, 0x9, 0x9, 0x9, 0x9b80000000000000, 0x10001, 0x8000, 0x8000, 0x6, 0x0, 0x6, 0x8, 0x7, 0xfffffffffffffffa, 0x20, 0x2, 0x3, 0x4, 0x3f, 0x2, 0x2, 0x3, 0x6, 0x200], [0x4, 0x0, 0x0, 0x3, 0x10000, 0xfffffffffffff21d, 0x8, 0xff, 0x1, 0xffffffffffff4de5, 0x2, 0x9, 0x4, 0x9, 0x3ff, 0x2, 0x3, 0x6, 0x1c0000, 0x0, 0x80, 0x0, 0xffffffff80000001, 0x0, 0x1a6, 0x9, 0x7, 0x8, 0x4, 0x6, 0x0, 0x8, 0x800, 0xffff, 0x0, 0x2, 0x8, 0x2, 0x5, 0xc44, 0x3, 0x80000001, 0x6, 0x7, 0x0, 0x4, 0x2f, 0x3, 0x80000001, 0x1, 0x773, 0x5, 0x1, 0x4, 0x80000001, 0x4, 0x9, 0xff, 0xffffffffffffff81, 0x6, 0x8001, 0xffff, 0x4, 0x7fff]}, 0x45c) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8000, 0x0) recvmsg$kcm(r3, &(0x7f00000007c0)={&(0x7f00000001c0)=@in, 0x80, &(0x7f0000000240)=[{&(0x7f0000000400)=""/183, 0xb7}, {&(0x7f00000004c0)=""/195, 0xc3}, {&(0x7f0000000080)=""/34, 0x22}, {&(0x7f0000000340)=""/121, 0x79}], 0x4, &(0x7f0000000780)=""/51, 0x33, 0x4}, 0x40) 19:39:12 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)}}], 0x1, 0x0, &(0x7f0000003280)) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000240)={0x0, 0x0, @ioapic}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/dev_snmp6\x00') preadv(r4, &(0x7f00000017c0), 0x1c4, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000340)=""/182) semget(0x3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x0, 0x0) getpid() 19:39:12 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8000, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)={0x0, 0x3, 0x400, &(0x7f00000000c0)=0x5}) write$FUSE_OPEN(r2, &(0x7f0000000040)={0x20, 0xfffffffffffffffe, 0x3, {0x0, 0x5}}, 0x20) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, r1, r3) [ 249.020144] 8021q: adding VLAN 0 to HW filter on device team0 19:39:12 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) 19:39:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x100}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0xffffff85, 0x7, 0x2, 0x1, 0x8}]}, &(0x7f0000f6bffb), 0x0, 0xfffffe21, &(0x7f00001a7f05)=""/251}, 0x18) 19:39:12 executing program 2: getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000280)=0x80) getsockopt$netlink(r0, 0x10e, 0xf, &(0x7f00000002c0)=""/130, &(0x7f0000000380)=0x82) syz_read_part_table(0x0, 0x1, &(0x7f0000001640)=[{&(0x7f0000000000)="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", 0x200}]) [ 249.511070] Dev loop2: unable to read RDB block 1 [ 249.516178] loop2: unable to read partition table [ 249.529862] loop2: partition table beyond EOD, truncated [ 249.541104] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 19:39:13 executing program 3: r0 = socket$inet6(0xa, 0x80006, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x100, 0x3, 0x1, 0x100, 0x0, 0x400, 0x5}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000004c0)={@loopback, 0x0, 0x0, 0x2, 0x1}, 0x2c) 19:39:13 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000010061183000ecff000000000000000000009591e92c6f6e9da399060abcd4a4929aa6d95a000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) [ 250.075478] EXT4-fs warning (device sda1): ext4_resize_fs:1917: can't read last block, resize aborted 19:39:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000001c0)=""/198) 19:39:14 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f0000000240)=[{r0, 0x402}, {r0, 0x4400}, {r0}, {r1, 0x12}, {r0, 0x2}, {r1, 0x10000100}, {r0, 0xfff}], 0x7, &(0x7f0000000340), &(0x7f0000000300)={0x2}, 0x8) accept$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', r2}) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}]}, 0x30}}, 0x0) 19:39:14 executing program 1: getpgrp(0x0) r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f00000002c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed5544eb6e0c8e659b339d25dfa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60bb655b2ab5366bac90000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34cf117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74c") fcntl$setstatus(r1, 0x4, 0x6800) preadv(r1, &(0x7f00000075c0)=[{&(0x7f0000006200)=""/220, 0x100000}, {&(0x7f0000000000)=""/90, 0xfffffec3}, {&(0x7f0000006300)=""/247, 0x98}, {&(0x7f0000006400)=""/4096}, {&(0x7f0000007400)=""/204}, {&(0x7f0000007500)=""/192}], 0x1000000000000212, 0x0) 19:39:14 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) listen(r0, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x400000000000003}]}, 0x10) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x800, 0x0) write$P9_RREADDIR(r3, &(0x7f00000000c0)={0x68, 0x29, 0x2, {0xb2b2, [{{0x8, 0x4, 0x5}, 0x7, 0x10000, 0x7, './file0'}, {{0x0, 0x4}, 0x98f, 0x20, 0x7, './file0'}, {{0x4, 0x2, 0x7}, 0x0, 0xbbf8, 0x7, './file0'}]}}, 0x68) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xb) shutdown(r2, 0x1) 19:39:14 executing program 3: r0 = socket$inet(0x2, 0x800, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x20) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0xb6, "3370c50f0500e67eccd391c87ac6c5b8d93becff06a0e83e53192a536a9a8c2e1cce5c619e3d96e76a439edf6000979851a4e6a15e9420fabdf9f65d56bd2f64722c38bfdf25ae14f8725d86fb2343ebb2287b353806736d1de6d1634a931ed4bee7787a5ffa1cc335582c98834f20272807489587b61d3a0c8f22370b3426efa32842f923bf9342f53358f75cb0ebcf02a179bd3c5cec11591388d0ad8e245255d05f09de250459f675b6a1b63dbc57efbd2826fbd4"}, &(0x7f0000000000)=0xda) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000004c0)="8f86204db89e52c3b93d88cd587369d4", 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000200)={{0xa, 0x4e21, 0x100000000, @mcast1, 0x8}, {0xa, 0x4e21, 0xa2, @remote, 0x749}, 0xc2, [0x1, 0x5, 0x33, 0x5, 0x8, 0x1f, 0x0, 0xa9]}, 0x5c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x10020002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x181140, 0x0) execveat(r3, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000380)='%userwlan1trusted\\GPL$\x00', &(0x7f00000003c0)='security\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00'], 0x1000) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="fffc50a440589ff69e9c61583d637e33fb74a623", 0x14, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000280)='./file0\x00', 0x200, 0x22) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000180)='security\x00', r4}, 0x10) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) 19:39:14 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x328, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x3a0) [ 250.601127] kernel msg: ebtables bug: please report to author: bad policy [ 250.625111] kernel msg: ebtables bug: please report to author: bad policy 19:39:14 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xffffff89, 0x3}}}}}, &(0x7f0000000040)) exit(0x2) 19:39:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x400000, 0x0) write$P9_RSTATFS(r2, &(0x7f00000000c0)={0x43, 0x9, 0x1, {0x0, 0x3, 0x80, 0x5, 0x4, 0x4, 0xffffffffffffff79, 0x4, 0x100}}, 0x43) write$P9_RSTATFS(r1, &(0x7f0000000140)={0x43}, 0x43) 19:39:14 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f00000000c0)=0x1) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname(r0, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000000180)=0x80) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f00000001c0)) [ 250.716827] Invalid option length (170) for dns_resolver key 19:39:14 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000000003, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r1}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) capset(&(0x7f0000000040)={0x20080522, r2}, &(0x7f0000000100)={0xfa71, 0x5, 0x8, 0x0, 0x0, 0x24d3}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f0000000080)={&(0x7f0000003080)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 19:39:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r1 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @remote}, 0x10) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={'bridge_slave_0\x00', {0x2, 0x0, @rand_addr}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000240)={"626f6e645f736c6176655f30000e00", {0x2, 0x0, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'nr0\x00', {0x2, 0x0, @multicast1}}) 19:39:14 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x400000000000001b, &(0x7f0000000400)={@dev}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xd}}, 0xf0) [ 250.889742] overlayfs: missing 'lowerdir' [ 250.918464] overlayfs: missing 'lowerdir' 19:39:14 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001240)={0x0, 0x16, 0x0, 0x200, 0x5}, 0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x800) sendto(r3, &(0x7f00005c8f58), 0xfffffffffffffeee, 0xffffffff00000000, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) fchmod(r1, 0x4) creat(&(0x7f00000001c0)='./file0\x00', 0x4) dup3(r3, r1, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x0, 0x4, 0x3}, 0x2c) creat(&(0x7f0000000040)='./file0\x00', 0x3bdeaf17a7b5035a) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10) ioctl$sock_ifreq(r5, 0x89bb, &(0x7f00000011c0)={'vlan0\x00', @ifru_data=&(0x7f0000001180)="aeac652d08ee3fe74b5b61ddaeac25501f5deb28ce7166159e202642a2319f7e"}) [ 250.999438] device veth0_to_bridge entered promiscuous mode 19:39:14 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000006c0)={{{@in6, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000007c0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'syz_tun\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/64, 0x40}], 0x4, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000033c0)=""/137, 0x89}], 0x1}, 0xca}, {{&(0x7f0000003800)=@hci, 0x80, &(0x7f0000003940)=[{&(0x7f0000003880)=""/155, 0x9b}], 0x1, 0x0, 0x0, 0xc1}}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0), 0x0, &(0x7f0000006f00)=""/245, 0xf5}, 0x5}, {{0x0, 0x0, &(0x7f0000007000), 0x0, &(0x7f0000007040)=""/66, 0x42, 0x800}, 0x7}], 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000200)="822fa66399134f88f2e37c7fd97dc7a56b5c376f5b3fa42f9deca599a5d3d1cc2fb366628718909875f090917b6dfb065c2c923e01845237d0b4b738b6dd597fc339ed09c2fb57429ac5e09ce86662a9aeb9e75cfd25a7f1768d81ea13eff7295a7129ed7624cdad86e186d167d86aab07a0ed0422b147d25f2755bfa3d7cf5a9500f3b06088f9cff616bbc6b0a56d58fee73487c1a644ff7c3874d1f2c772bd95c5143b9303f514ad19fbcd29ee3ade6538c6297f4b01cdb6cf8073dbea6413e9fd53b3f061747c81fa725819a70b91154ae1a14dba2239a9b07ca957", 0xdd}, {&(0x7f0000000300)="7c360faf19b029f69d28cd0ae87755a41de3e6ab6c62e3edb3e054c8e4ecfca086f47958106f7bc0ef4f4110e6a6b7ad96dd0a7f4eecfc73ecff53581f20b0d12318382a4449afede2723b5f97f06aab20b29a3bd64e2b368ca93f0fba9bcb0b53efc72440da875669480685a69e47f1814bab41f309c7daa7d7cbfd02ed044fa1cfcfe0521cbb278c0e0bcf78f16f22e840d1bd3c82b048635e20e621b08d12d61bc86378b1711d4c73fd37498738a99550c04d7437d3d2b014e459ba0d9d284d9cc2052b82a5d1508098deb9786e48054498a5a2d5afb29cba236c4eee6c2bc6249f677983629abb7ce85a09", 0xed}, {&(0x7f0000000400)="8efa13858d33206effcf95ccdcddb66bbbbd95c286f153751ad9e770b423327eb88a592f2f76bba72e068c984c016364a1d22f91559812c16ce7326f8a8bdeed2e8a8b86f10bdb590bc4bd7b137854bea304562fb6b8a689fab24522f4b2f47827a3ce69dccdb7f7cb5d2438833ce89140e82f0394684fb76f8be8ab867c4ad901ede01a4221f2ac2d743a4c39707cc92028ae45544292babd2457", 0x9b}, {&(0x7f00000004c0)="9370acd83f2b20f64b581332a8b0a34abe9ed54ea358d5cc1a2539f4f09c531cb7ea3f695ac9e8cae842d204abb414a206fbe2825a8249cb796d9790b0ccbf1cb64be234f8bf2bd2731b5ed16aacceb0a1c8b92f320fc970823693238b8b44b89a74cbb428c219c156c1c1113b8c32d950d39c82ab730e87021784ba9545724936b452ef455769caf0cfad8fabda3726e1c743cdc5ec32258b68c12ad3b68787dfc99c68fbafdd5765c890ec5b0e59ee9ec8ea823e7ce866885d547e1dd7221f0a690984a5a3ead9f1", 0xc9}, {&(0x7f00000005c0)="5c9c622ea070af3752e71a06c3541f99680dafd8e0057427949c6578560398c353cc97831cd1ce7b46f189bde1e1fb6f8521f3f11e13a62aa7fd3151b57eb9117c76c52b9bb788e5038474d0e42dcb4f9140a10ef5de51708a7aa70003a7cf7903aa371e270ad9068d9aa46f20518ad88952535b938746", 0x77}, {&(0x7f0000003980)="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", 0x1000}, {&(0x7f0000000640)="ce253b5adaaf1e24e0dfefa41b5d57d0aae440f1e769061e5c97da244311364d", 0x20}, {&(0x7f0000000840)="821f08e4eac0c7b251726558811edb9924d807ab1007afff8186544a50543d987dda9f06b466497c691df6e60a96b61fec9055fb026ec5e31a51b9269804eaeb467f2ecd5dbb788bed58c0de527d1b93c9ea7dac49f55fa2bc69a3e9e6d16dedc360a2acbe16b68faeb5db636bf748797fbf1d28735cf46d7bcd1e61e1570dc88a810004f3fb2b8e", 0x88}, {&(0x7f0000000900)="88d1153c0a554a640d5cb0c4409e9ce3e442f05f18d98505a29ba36662c1051a447332098b4ca91bd1fbd5326eb0fb1d43887a18fdd38f52cddd4a86f5e9587bdf27215cfce3284be20ab4018d32e7c99eb470a390bf7ed4e1685e27cc8076b41461f629ae5601dd4b4fe851e34a1b3eb30a183d40542375a945fd4f327b718d11b22453d26d6ea9179367c103bb522842aed77ee9c82442d2a4ac70e65703b06b5a6b0baf0bb55bec46b0d97759d6aec334f47ab1845703041b57fa17bd89c1960a5cc9e3e3", 0xc6}], 0x9, &(0x7f0000004980)=[{0x1010, 0x108, 0x9, "f3253b2c2aff56b82dd022c23358913c5681c4c7d255ee8fd5222a045ff3488dd4a71d0ed3a7ed48c3a473264143aabd67d0ee5bfcec806ab1d75443dcd80a4ab4b121928d005d72802fc15fc14993f9d92932b10ccddc719418e9973affab33ec751613c7c9c97e0b40ccebe104bab25c32c87290ae64b273ba289fa2dbc0afee29414dcc9fc7536608cdc7e05beb1a4a9e46aa961510000fad0853a9adcecb0c2a1885062b9e42abdbfd55827afdfa172f95f81cdb10d9f317f8a79dbc6cc1128d1dbdea7f3dfe107cd5054283715ff0878c63826178eb7664d24cecd6d13a7fa76689bbd47fcd25a07e93b62e7e6d18346b99ee5e2260b2321e5acfbf0fe1d2e44c02eb8ee62f7be84b9d42f580b1f98d491333d60f5d682c51a9167ea8e579effe9f67d80a54d9518c48fa46fedf43f494ae64cfa95c0da7bfc5df68dcaea752166d8aca493be33dc5ad04bb2a8766487b0b10394a52d122ec2a03ab306466c6ed9354b88bf22824c79f729d6ba27b65f5d631f03d267278bc9a0943e611c025bd4a7395a260de01d91a652badd5ebf97f8bb1d9fc7717a6a66aabc59ddc7a6278cbaf39b1b367726e0d6dee2101d49776c2a1d8267474198cf972c60278131502254beab85b5fe90151237ce48d1e0e704608cd8af2009eaebccee137e10381460a3764cad71343e449010137c7642efd67670624671f09eb99d16a3997ab58888e0e97a31fb0e4ae90e8e1723434a452baac02224ef17fa49ec684a35830e3556e56057abbcd4e84555982d813f128fbb4fa541eba2d50ab63f6be7af259f578ebb168ea015625654886757238778b36c169f97e7f360e1a61ac97d91eada174a60a66f27722f4e51f8395e787e62b8ebfe84248611552282792bb2b40499974c87d1e3800cae69efedeb4004de1ae80ba36f30053373245b6f3707661870d8c0c8c0e4c7ca7d90568b43ebe7605ac1484998baa46cb5009a90d18210d77ebaa3e8b6a5631b441046dfe2c785fabdc8793d4af9c2b158888a42ce32bd3b75f5b3ce5cf21f0face668f18bafc8280492bdd204864da841b968ef7cfcc43f27cb304930549cf431c5e6d14cf6550c64151a46a1f719737a98c4b4c54a384c152613d3ae90133cac785e62137e494dfbc47d8cfcff0f020a09b712b2abc58bb58b2b6897a21445babe36292752c9326c58e6749d3c99c34758035089657441dc38d21505029fa6781ab5c572c49d3abf6b5a87c1ac35ba4749dfc9d2b7b6177e4caf597f29621b2a29b236d909a6e34dd48d897277b45a78aab7e66ba63a8a0f81c0b84802fe390fcdf49711ef7dcaa03189c46d6611e9e93040913e5a3253df23f683c247ed26a92ef7c4679ba9d736cc1db2ec890c9a970db0eb1e43e38846826fb2976107b2defa2edd0d9b917cc37eb0d16e2473896a1391254b69676e4f815da16d1fbcc4cf328047d18d1a1db693f55dcba79bee9d015d03316477865c9679d8e227ad18039faafc831e2c2923198690ac4dc01d2798454c85919e71525c77f3c9aa6043405ea9c7263f22186b9c01abdade2404d4645b5cccb0dd8ecaf549dffedf37a81e20568167aca8be9707e3a24739e1b7a0c2072e1fb8479b601640baef6d691aa28c9f77f763f6d8a7299c549b6adc4725e0691e1e783f463acc9f9418129d16b0cd332f4d8f3da33d6ba860403ff66f1aa5e8ce14b3ca47d1ea92302384e841284b3879efb6d8a50cbb128ab8585942592b9823872b90437e8343ffa66c95baf486eb9c3b13220e705225cef29ca47ad72a6965d463b40245843771c625eee129c09ed51122d9c22f97cae66c117c71c569c361c9e26488c85a7cabf33eb2effee3e13fdac76f255ed5d3b4d2b4e905908dd2693f4049a22ee6e7e392bb5d6d038089c0ec4db99314102e7c7a1742b1fcb93e16c3fa7e49d3abd531f067d255dabb45984311cd41a3d54bebc70842b230d2d52bdbafe8bdd4aadb82425a669e300f342aac6906436fdd934db9fe7f6324699f4223bcefbc53d29223f6bfa097055c098070e7aa9b9f21313cd0b1e5d47eb41dbc84b1c119ec0f80ad62efd67e79d07b6b82a1ee79b32c6253ec694f2f8b08051b31a5ce46f1bc1491a42a63836c0b52713d2e1ede27fc0cc6676ac70e65bc6d5742659d2190310a7dd1f0d5b448dbc18b45523e5433df4894e7d80fd8216a61dd3f4376a8f6262b9d3e494815a0cd2e3afd73c99b44d61d69350fc959fdbfdeff83be5fb5b7be886b25da67c80fcf6ad004c0bd0d10dfb846080644c77094a5c52a53ac091471c19b9c26dc01f48cf10f93ee0824ddc8f9a0d99c567f6727be870ccaa819d81dae3e1374104641dbdf6839f7c91bd75b4b87d002779e26754bb9bc3ada689fd7d15ce82a31bfb1ce20c58145d54b48557e6d021ac474fb50b8c6314e766590d8f1300c1859f3f4c54585692d605811dfb1c7e754a78740710e9b13da4d4e8003e741c15573e1bc1a8ffc8f387e65608e00a00c80618963c52970f96c6459aab79024e8f48177db98dbaad68018ca8d38a15aadd85ff06a3199d63f0faa104ed61f7c29c029382369e4519407f8836418b0d3e5879b914138e0a5568dc7381e98d5c3d5cacabdd0e95c0a02a5ccc017ed8d7b07ca454ef269254f43c8d3029158518e7be6f76e981f79b6f80425dba0df682dbd1898916bb7eecaf1f866c08f5a74ecdf9c8c45634867994e6bfff6ffbbd270f30c79b0d414451ea87399e802bf3eee433d6f8b1eb046380775cdfe78ce544b643aec2e68ffd4f4bfff9fa8f72d977ed4e4709f3040e90be7fe801a4adcc4b8385eca8ad6d9f1112541eb4502fd61f4225de2d786749baaf42a1dad2c2351a13030b8984b4b6ca3b96ee4c237f2b2076fad1766e57d559a68a407f37aebe460d6cec8f03bf955505ca79a04da0de6144a7446d9c0e59d2c881d795d4cb129fbd578ffa430287515f7524eea3f78aa64fe591b07ac93ba1dd3755bef242b6f3d2eacd9207a4e309e7fafc75d01225b5f6bed8e9e1ab3e46aa1822d16e1e9fd39668bcf18d8f9fca90a6ead1c01cc7c9676f52e395e99f2dc3ebb93aba6acc3a9fc98f679f54237eb479e21b7b57816f84b6ac479704ef459ef6580bab7bb0546e487f4e01fc485709ba38ee2703a69e072403cd0bb6a0f68d2b8247d71e0ce710b3b53d7b6fec7f5d690186827f91ad82c58a50c66b6322b08ee6db2a04e8541f6a9ec194cd22e57e5de82bd84fd7049cb71f07a567c10ede98eba2d27b66fc422242212c7ae4386e8df1998dc6c1bf08920c2bdc5717ebe8dccffbbd48bd5cd68e20b874adf70b106c56c09613402eb51495aabceb024f45e65c7af684028b6e55fd28edcc614a37a37cef6a6b4404831b024a4c945e9071e887a5485a27cf927bbdde8cfb49a236a4b926becf15617098fb3e272cd4b80a0f2f20134b290522e12966f724f4f596a05f3b2447c709974b756d753414c4a81146e399532f32ec290a9b6e2958e4812c27812031949813debf69d0f998b7d74b18f2fc1d86816f91ae1a8889a2501614988a3c7f6ddae0d8770c7202e881651c6970823fa7a0dd4a6097920abc4ea9ea2c66071df2cc87f6624fad9931a25ddb3ccfb8bd948e474a790597a3b70d0ed8937a14abf2544a8a2b35253b0aa2b8578e954659124445f43bb9997b682a400690202b9467ff81b5bb9820be67a64db1462982cb2d5432c09e1a5f72b63de6333280fa22a5788540cc6c7fc22607d47723b39d29b252716faa050ae2ea645aeb88d44626bb6b77d7e85aede5cd11230e3a8ef1d16fd2b9ff933f41af7d332e2ffdd2189ef178eab491a43033c5d12ceb5e517dda3b9af364de7c11593efcbfa58616f5be0825f0c413ec47ad6f02fca4fd959fbf052a00cfcf4df870c3285ec21dd80fc3e7eef1c275430328b7663bcf4e53f509ba0ca36f40176095809dfb4738e4c803af2c568a92f79b82505b4502f6d8e2b87261150745644bf5f03a5d96c963d35e5c9bb34a1884bc37994538901f6b992192030700c7a7a512ba670cbade1115d8079509cf450225fc9d19b827e2bb2413e8876a1f77506642a4e60435dd1e785acfca0b51c84482208194d6d1d604fb601ee79ac861f9e663fb9494c511b17a5ee8bae57e9b875d21ced2402ae7461d048391fa97905d07e4f1dd7d7acfd0a1310024e74ea94f2b43ffc31a8baaf4571a295fcee8dc7e71917dfd75a8dbc8bdc2dfbeb5f6af2b116fe9b0e4464bce701d8e9aa1ada39fe8904fa6a7b6cabb64b52175c2fc0ef779cd28ce388de3302338c90acf1a296d67f71d4d069a0a739abc12515819ddb54b755a29ae412bd137f7369b5661250120f466d2876c84160a7651853fd571155de4adc8867589c68159e0cc2c6165a10e5e87b059d11b5ceb06fb72db7e0c39a98d932084752a6051bc78e4e06a67d80de24b4704e58de9d917e0707dcc6f24e997e502c1400595dc0ce9161584575fe7392d8f6d6a4ceab0edb56871c6fe8734f006b3ec225b570b8da32eaf21383402c54b0fd8d14a12da85040447b530b01c6f8b3e8fc4a3529ccf8532e5866908c2e181e5f64d0ba416fc93aea09b545b4097995274995c79f16f15512d5ffbb90dfbd4449b6d1a92f52b8905718a089085b5a273b4e144bc8cd487da75553c4fa6f70157fd3660fbce14b1b4be60bf59a02dc84a3965ec884dd55606b63696ee0e8a7119ce345720903f1d2660694d6dae90f76376840124d60fa151540f226a85200c0b8aa34d98896847d18ea1a568c9c6c5c37fa7241065a5139fe21c966ccf2a2a8f67bc5af36300e8ce6f7261035b5d3d904afbbe70a24b79f578c230bb1adad142988ba4d8f438a89c612d091397817e66208cd5e60b42f1bc68396da399ee58126dca34702f1223adfef5235d31a0df0436ba8c6f26c30c6e24be0596f3c1558f746de31bac6b9a9084adcaeb29447658b7cc51070535e42d7601943abe3b2c2d18854ad7d8da2afacfc9e658dbdbcd146f82b4389678bd839c02e80f7476931fed84b2e5ed8cf86f291fa56893a6ba1be2a72bb716f774809c9ade30eb1e2a3ef3142ea94b2d940bfc6561a75ef83a565f1903c83e1edabfd4030836fdfe369e1a404066d9f784634e63079c37aeee45986dd471d0527317ecb70e0d5fe713cb5e8a1bbfcd78f76bb8bfd1e1e22a53d9d0938e92ea9a9c3e30947382f7c22fc4fcce12c8e6f3d0b9cae9d88d9fc7a257b821512632d404d5fdc6cf18721e31d7373ce8c0ec06b5cd3b757317302d0edc88982a852da8f7031765ce303f7ce8e4eac3a4658706338a3a93e2ef2ed8c417d07903bf289681af15db0db22556d4e4c203b701f5ba9d55f37489c92bc4ef185074dd56647b09da1b07fee91e27eba6e6b9958ebd9a7d0439cdb2057f00b523e490d64eb573bfddf59327674a158bb168ee4c42b4a9a6151bf1f51fc784709fd74f8e1f19607ec16bf81e6fa2323dd5c37aacf9f4c7234c49dc948eeb9f71eb805efccd3a61d2f9b98bb3ae943905ec7cf968a28682073177ab11af3a28314d314b126895237eada24eaee06b5343210d28b31ed208c0fca87e022212ee25a549fef3e8d7874524c9ed535daeabd22cfb05b9da8f7aa69376a22e98de37e2b17f5c4c4e6600a597e9d1e143415bbc7699e38b8e86167766767968298d7c0c32dfa83446b001fbac4c6a4efcc9ff1b5ca27452f7f7d132e3dd1fefa433a3bdf47098e9c344e677068e611822b783d75de384e40d"}, {0x40, 0x118, 0x1, "21617229bc52ca08a1c23e64a5c6d48f2990c7ac83ba4f04438bbf7e51acc06d427ebaf5517798d71d16b0"}, {0x38, 0x11, 0x9, "66fa445a4d8b5150f94b7046ac5878b24272b14bc04e32ec09057fbf5e6f3344ea5933d0fb19"}, {0xb8, 0x10e, 0x7, "b17f9afb02a3cb56dbfdcd656624625ff55e96292e7b1204f60cd8a6a9a33b11f0f23cacc79400b0b4ff20498d3fe68a65cce05ceb9388d0898b0c9df16b99cf768a2d0291934a85af8e7ff103413b9a1b19c65d6b5e57bab3c46d94348d09277576282254a7fbeafc60ebbd410900f1711a3981bac69524f8edc36b57d37ef39a84ccfca630a9ac3762c3657bf4305959d6c9f9b3b37b0278484fc6605ff60d0a12b6608c416c"}, {0xb8, 0x13f, 0x2, "2e927d8beb5fa39386d4193cff191f9871a4a880a4304635bceb0c14eecb92a07957784a0c03fd03788be2031f7654893a6f2036162d65ee0670dcefb6848d01376b09baa3a3ef4581f95d1811c58e40c73d5bdf00bed6e0e9652840101d95c075a3823e043d74f07e0ebe14eb99733173993e167b6d1de70ae4b960f91170953fa09f91340d9ee3579f2eb256a51f3b7f1dc412896d640172fd0c3433083f5c35eab6b13f"}, {0x30, 0x102, 0x68c7, "17b1b642b5bd46477ee81ffd25fd0d0f4e10628b08f4da48a27ea584b3e982"}], 0x1228, 0x1}, 0x20000000) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r4 = accept$alg(r2, 0x0, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'exec ', 'veth0\x00'}, 0xb) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0\x00', r1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0xaf82, 0x8, 0x400, {0x77359400}, 0x2, 0x80000000}) recvmmsg(r4, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) connect$llc(r0, &(0x7f0000000ac0)={0x1a, 0x33e, 0xffffffff, 0xfffffffffffffffc, 0x4, 0x5, @local}, 0x10) 19:39:14 executing program 5: r0 = semget(0x3, 0x0, 0x100) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000040)=""/123) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r2, 0xff}, &(0x7f00000001c0)=0x8) r3 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x8) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) socket$inet(0x2, 0x800, 0x1) keyctl$update(0x2, 0x0, &(0x7f00000003c0)='"', 0x1) [ 251.099679] device veth0_to_bridge left promiscuous mode 19:39:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r1 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @remote}, 0x10) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={'bridge_slave_0\x00', {0x2, 0x0, @rand_addr}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000240)={"626f6e645f736c6176655f30000e00", {0x2, 0x0, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'nr0\x00', {0x2, 0x0, @multicast1}}) 19:39:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f00000003c0)="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", 0x121, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00'}, &(0x7f0000000180)}) [ 251.261167] device veth0_to_bridge entered promiscuous mode 19:39:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x0, 0x40) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000340)={r2, 0x1, 0x6, @local}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x2}, [@typed={0x4, 0x3}]}, 0x18}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f00000000c0)=0x68) [ 251.306295] device veth0_to_bridge left promiscuous mode 19:39:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640)='/dev/hwrng\x00', 0x4100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000001c0)=0x4, 0x4) r2 = dup3(r0, r0, 0x80000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x2) r3 = syz_open_pts(r1, 0x40000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x600000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r2) fcntl$setsig(r2, 0xa, 0x1e) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x102, 0x0) accept$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000600)=0x1c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x10000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r4, 0x0, 0x1, &(0x7f0000000140)='\x00'}, 0x30) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000002c0)={0x83, 0x1fffe000, 0x6, 0x0, 0x0, [{r2, 0x0, 0x1}, {r3, 0x0, 0x4}, {r2, 0x0, 0x400}, {r4, 0x0, 0x7}, {r0, 0x0, 0x81}, {r3, 0x0, 0x7f}]}) r6 = getuid() accept4$unix(r1, &(0x7f0000000500)=@abs, &(0x7f0000000580)=0x6e, 0x80800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) write$FUSE_ATTR(r1, &(0x7f0000000480)={0x78, 0x0, 0x5, {0x1ff, 0x3f, 0x0, {0x5, 0xb20, 0x0, 0x9, 0x2, 0xfffffffffffffff7, 0x70000, 0x1, 0x0, 0x7f, 0x2dd1, r6, r7, 0x5, 0x37f4}}}, 0x78) fcntl$setsig(r3, 0xa, 0x1a) ioctl$TCFLSH(r3, 0x540b, 0x2) openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cuse\x00', 0x2, 0x0) 19:39:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x15, &(0x7f0000000140)={0x2, 'bridge_slave_0\x00'}, 0x18) fchmod(r0, 0x40) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000480)=@buf={0x0, &(0x7f0000000440)}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f00000002c0)="000000008c00000000000000000000", 0x1) pwritev(r3, &(0x7f0000f50f90), 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f00000ddff8), 0x102001400) dup2(r3, r2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000400)=0x5) 19:39:15 executing program 5: r0 = socket(0x11, 0x2006, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f00000000c0)={'bridge0\x00', {0x2, 0x4e24, @multicast1}}) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000240)={0x8000, 0x0, 0x1}) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x5, 0x7, 0x100000000], 0x3, 0xc0, 0x73c, 0xd0, 0x2, 0x2, {0xffff, 0x81, 0x800, 0x8001, 0x3, 0x401, 0x40, 0x5, 0x4, 0x4, 0x5, 0xd4, 0x5, 0x8, "ce9cfad2da63773e33ed89e9cc628a78c5746f24b3f91476187c1058ebf29fd3"}}) 19:39:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fsetxattr$security_ima(r0, &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@md5={0x1, "f0e131a379a8d4ba40110727e5a2551d"}, 0x11, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x1, 0x5ed, &(0x7f000000cf3d)=""/195}, 0x48) 19:39:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, &(0x7f0000000180), 0x10013c93e) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x80000000005, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x114) r3 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x5, @local}, 0xfffffffffffffe98) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 19:39:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x101000, 0xc0) r2 = openat(r1, &(0x7f0000000240)='./file0\x00', 0x0, 0xc) r3 = socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0xeb}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000300)={r5, 0x4, 0x10}, &(0x7f0000000340)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r4, &(0x7f0000000240), 0x5c3, 0xe) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020700090000000000000000be"], 0x10}}, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000140)={0x7e, "d35327cc7a3dd901655627ef217e232d2dc6354524b69ff542fe73c955fdb8b2f370d289776787aac3bdbf8861204b3c3f5b3f1d59e761793397ed2648185e10963b060e46cc5d58e7c85141e0d57d531666cd24cd5baada3fceca088686e18f0bdff43ef277c9540ca8070186bbecdac08b367f8ccc0e8c5067a39ab363"}) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58) openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x602, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) [ 251.965418] input:  as /devices/virtual/input/input5 19:39:15 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000), 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b100"}}, 0x48}}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x400000) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x10) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000200)={r2, 0x2}) sendmsg$can_bcm(r0, &(0x7f0000000440)={&(0x7f00002ccff0), 0x10, &(0x7f00000017c0)={&(0x7f00000aef80)={0x5, 0x900, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080), 0x285, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="050000003f75df3036f7abef9600000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000d300692ddfae1e24"], 0x48}}, 0x0) 19:39:15 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000140)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "67054d343a87ca16291b01c1406383f770d5144c7771ccbf27517709485be94634e977e17267e3974c88b1bcaf648b6d65be2f34b2d1844ffbbf00f6dcdf4b", 0x4}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000), 0x4) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x1, 0x0, 0x7, 0x7, 0x3, "7cdc4f240d50fea9afff0c3006937eb216df2551767194941622c44c707571ef7997b1046455bab47f7fce7c86aa343374cecc2e51f5874fe54c3d64cffb13", 0x1f}, 0x60) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x400240, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000440)) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000001540)={0x3, 0x1ff}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x8001}, &(0x7f00000001c0)=0x8) pwrite64(r1, &(0x7f00000002c0)="da9ef77ef003a4140c1ac6f395a457d51e9837b4368fa8d126de7336d0308ca1d779c895a1aa80034c2a86807563bd679ec38bb757f5c2400e897a73e22891ff3d07cf02a2064e598a22d64f3dcf8c7cf2ab01dc29ee6e03b6d741eae6da419dbfc82a325d8c027d", 0x68, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r2, @in={{0x2, 0x4e21, @multicast1}}}, 0x84) r3 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000001500)="56e387fae294e80008000000000000779d6819148967acada876f7891a8a6f9aad0400dd8de1b6fee49476564b70", 0x3b, r3) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000001580)=0x2, &(0x7f00000015c0)=0x1) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000500)="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") bind$nfc_llcp(r0, &(0x7f0000000340)={0x27, 0x0, 0x1, 0x7, 0x8000, 0x5, "81311196c0dc95e087b4f647c4daf7bb82022b599bdd71ef4887c5e3401aad489fdba4fa50c9dce491fd79a277b8b756ba669ade01bbb2256565e9d3b6bae1", 0x32}, 0x60) 19:39:15 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@mcast2}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xffffffffffffff65) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x1a1, 0xf0ffff00000000) 19:39:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x15, &(0x7f0000000140)={0x2, 'bridge_slave_0\x00'}, 0x18) fchmod(r0, 0x40) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000480)=@buf={0x0, &(0x7f0000000440)}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f00000002c0)="000000008c00000000000000000000", 0x1) pwritev(r3, &(0x7f0000f50f90), 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f00000ddff8), 0x102001400) dup2(r3, r2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000400)=0x5) 19:39:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x101000, 0xc0) r2 = openat(r1, &(0x7f0000000240)='./file0\x00', 0x0, 0xc) r3 = socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0xeb}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000300)={r5, 0x4, 0x10}, &(0x7f0000000340)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r4, &(0x7f0000000240), 0x5c3, 0xe) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020700090000000000000000be"], 0x10}}, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000140)={0x7e, "d35327cc7a3dd901655627ef217e232d2dc6354524b69ff542fe73c955fdb8b2f370d289776787aac3bdbf8861204b3c3f5b3f1d59e761793397ed2648185e10963b060e46cc5d58e7c85141e0d57d531666cd24cd5baada3fceca088686e18f0bdff43ef277c9540ca8070186bbecdac08b367f8ccc0e8c5067a39ab363"}) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58) openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x602, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) 19:39:15 executing program 4: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000016c0), 0x0, &(0x7f0000001700)=""/4096, 0x1000}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x56e, 0x4000) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="03b77b9781fc8bc17a1fa8cec0b3af6414efc0ffb4f9cc7b2ab94ffa28fcae954b3310f943aae1583906a88ba68c5468523a848c589c9377aae7ea17ce638fba2ef09941b506c3b566048b888500247aea530fd52f01a941cccd9837c20cd4d437663ce1bfb748a6932d") 19:39:15 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040), 0x4) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @remote}}) 19:39:15 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xff3f, 0x0, 0xffffff80}, 0xc) [ 252.316355] dccp_invalid_packet: P.Data Offset(66) too large [ 252.348945] dccp_invalid_packet: P.Data Offset(66) too large [ 252.386338] input input6: cannot allocate more than FF_MAX_EFFECTS effects 19:39:15 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@mcast2}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xffffffffffffff65) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x1a1, 0xf0ffff00000000) 19:39:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, &(0x7f0000000180), 0x10013c93e) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x80000000005, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x114) r3 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x5, @local}, 0xfffffffffffffe98) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 19:39:15 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@mcast2}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xffffffffffffff65) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x1a1, 0xf0ffff00000000) 19:39:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, &(0x7f0000000180), 0x10013c93e) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x80000000005, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x114) r3 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x5, @local}, 0xfffffffffffffe98) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 19:39:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000300)={"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"}) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0xfffffffffffff1d8}, 0x8) fchdir(r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000080)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1f00000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x26) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f00000002c0)=0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000080), 0x4) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x63, 0x2000) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000007c0)={@un=@abs={0x0, 0x0, 0x4e20}, {&(0x7f0000000700)=""/144, 0x90}, &(0x7f00000001c0), 0x5}, 0xa0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, [{0x0, 0xf, 0x0, [], 0x17}]}}) 19:39:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x800, 0x0) ioctl$UI_DEV_SETUP(r0, 0xc06855c8, &(0x7f0000000300)={{0x69310100}, "73797a3000000000000200"}) [ 252.685039] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 19:39:16 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf625, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x200, 0x6b, 0x0, 0x1, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, @perf_config_ext={0x1ff, 0x80}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000bf0000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mmap(&(0x7f0000941000/0x2000)=nil, 0x2000, 0x0, 0x4011, r0, 0x0) mremap(&(0x7f000079c000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 19:39:16 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 19:39:16 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@mcast2}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xffffffffffffff65) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x1a1, 0xf0ffff00000000) 19:39:16 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x4000000000000000, &(0x7f0000000380)={&(0x7f0000000300)={0x2, 0x2, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0x11e, 0x17, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x17}}}]}, 0x70}}, 0x0) [ 253.038032] input:  as /devices/virtual/input/input8 19:39:16 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) [ 253.075001] input:  as /devices/virtual/input/input7 19:39:16 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@mcast2}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xffffffffffffff65) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x1a1, 0xf0ffff00000000) 19:39:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x5c, 0x0, &(0x7f00000001c0)=[@request_death, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000280)}) [ 253.406867] binder: 7246:7247 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 253.426974] binder_alloc: 7246: binder_alloc_buf, no vma [ 253.438398] binder: 7246:7247 transaction failed 29189/-3, size 0-0 line 2970 [ 253.448387] binder: BINDER_SET_CONTEXT_MGR already set [ 253.454956] binder: 7246:7247 ioctl 40046207 0 returned -16 [ 253.461494] binder: 7246:7250 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 253.470864] binder_alloc: 7246: binder_alloc_buf, no vma [ 253.476484] binder: 7246:7250 transaction failed 29189/-3, size 0-0 line 2970 [ 253.488608] binder: undelivered TRANSACTION_ERROR: 29189 [ 253.495795] binder: undelivered TRANSACTION_ERROR: 29189 19:39:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, &(0x7f0000000180), 0x10013c93e) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x80000000005, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x114) r3 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x5, @local}, 0xfffffffffffffe98) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 19:39:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000ce8000)={0x9, 0x1, 0x5, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000e82fe0)={r0, &(0x7f0000d9df52), &(0x7f000034f000)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f000032afe8)={r0, &(0x7f0000b74000), &(0x7f0000c5e000)=""/149}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000bc2000)={r0, &(0x7f00009f8f49)="01", &(0x7f0000271000)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000035bfe0)={r0, &(0x7f0000918ff8), &(0x7f00003db000)}, 0x20) 19:39:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = eventfd(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000001c0), 0xffffffff) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@local, @empty, @mcast2}) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) lseek(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000640)={0x0, {{0xa, 0x4e20, 0x1, @mcast1}}, {{0xa, 0x0, 0x1000, @loopback}}}, 0x108) 19:39:17 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r0, &(0x7f0000001140)=""/4096, 0x1000) read(r0, &(0x7f0000000000)=""/17, 0x14f) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) 19:39:17 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) 19:39:17 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100)=0x7ff) 19:39:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, r0}}, 0x23e) 19:39:17 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe00000000850000001f000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0xd7, &(0x7f0000000080)="3c08003f00f08b41637c2fee86dd", &(0x7f0000000380)=""/215, 0x7ff}, 0x28) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 19:39:17 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000a00)}}, &(0x7f0000044000)) io_setup(0x5, &(0x7f0000002800)=0x0) io_getevents(r1, 0x3, 0x3, &(0x7f00000003c0)=[{}, {}, {}], &(0x7f0000000100)={0x77359400}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r0, 0x401004000000016) 19:39:17 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), &(0x7f0000000ec0)}}], 0x58}, 0x0) 19:39:17 executing program 4: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)="bc8710fb0b9f0933a62c1da04b5ed293742915224f034d4ef0", 0x19) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000080)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) [ 253.887659] input:  as /devices/virtual/input/input10 19:39:17 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r0, &(0x7f0000001140)=""/4096, 0x1000) read(r0, &(0x7f0000000000)=""/17, 0x14f) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) [ 253.966688] input input11: cannot allocate more than FF_MAX_EFFECTS effects [ 253.977552] atomic_op 00000000974cbf05 conn xmit_atomic (null) [ 254.041508] input input13: cannot allocate more than FF_MAX_EFFECTS effects 19:39:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, &(0x7f0000000180), 0x10013c93e) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x80000000005, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x114) r3 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x5, @local}, 0xfffffffffffffe98) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 19:39:17 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r0, &(0x7f0000001140)=""/4096, 0x1000) read(r0, &(0x7f0000000000)=""/17, 0x14f) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) [ 254.416107] input:  as /devices/virtual/input/input14 19:39:17 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40286608, &(0x7f0000000100)) 19:39:17 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB]}, 0x0) 19:39:17 executing program 4: syz_read_part_table(0x0, 0x0, &(0x7f0000000180)) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 19:39:17 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r0, &(0x7f0000001140)=""/4096, 0x1000) read(r0, &(0x7f0000000000)=""/17, 0x14f) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) 19:39:17 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, r0}}, 0x18) [ 254.514190] EXT4-fs warning (device sda1): ext4_group_add:1637: No reserved GDT blocks, can't resize 19:39:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4), 0x1c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100), 0x4) 19:39:18 executing program 1: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) 19:39:18 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40286608, &(0x7f0000000100)) 19:39:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000001080)={{}, {0x0, 0x1c9c380}}, &(0x7f00000010c0)) tkill(r3, 0x1000000000016) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, &(0x7f0000000180), 0x10013c93e) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x80000000005, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x114) r3 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x5, @local}, 0xfffffffffffffe98) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) [ 254.671155] EXT4-fs warning (device sda1): ext4_group_add:1637: No reserved GDT blocks, can't resize 19:39:18 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r0, &(0x7f0000001140)=""/4096, 0x1000) read(r0, &(0x7f0000000000)=""/17, 0x14f) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) 19:39:18 executing program 5: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4800) io_setup(0x1, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000001500)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000004c0)='U', 0x1}]) 19:39:18 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000002c0)={0x7, 0x8}, 0x10) 19:39:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x2000800a, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x3e9538, 0x0, 0x35) sendto$inet(r0, &(0x7f0000000200)="c86484092d413148b52ce7ac9663e8a6d42948c9fe1139d5353461d0a3cb012b7d3cdd095c8ce94beef07242e8815f", 0x2f, 0x801, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) 19:39:18 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r0, &(0x7f0000001140)=""/4096, 0x1000) read(r0, &(0x7f0000000000)=""/17, 0x14f) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 19:39:18 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x810, &(0x7f0000ffd000/0x3000)=nil) [ 254.996373] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 255.021822] input:  as /devices/virtual/input/input15 19:39:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1}, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/47, &(0x7f0000000080)=0x2f) 19:39:18 executing program 2: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000080)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_script(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB='#'], 0x1) fcntl$setstatus(r1, 0x4, 0x4000) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7}, 0x7) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) [ 255.264937] IPVS: length: 47 != 8 19:39:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x3e9538, 0x0, 0x35) 19:39:18 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r0, &(0x7f0000001140)=""/4096, 0x1000) read(r0, &(0x7f0000000000)=""/17, 0x14f) [ 255.411186] audit: type=1804 audit(1539632358.836:31): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir021302132/syzkaller.XK3yRh/13/file0/file0" dev="sda1" ino=16571 res=1 [ 255.438166] audit: type=1804 audit(1539632358.836:32): pid=7403 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir021302132/syzkaller.XK3yRh/13/file0/file0" dev="sda1" ino=16571 res=1 19:39:19 executing program 4: 19:39:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, &(0x7f0000000180), 0x10013c93e) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x80000000005, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x114) r3 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x5, @local}, 0xfffffffffffffe98) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 19:39:19 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1}, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/47, &(0x7f0000000080)=0x2f) 19:39:19 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) 19:39:19 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) [ 255.673909] IPVS: length: 47 != 8 19:39:19 executing program 5: 19:39:19 executing program 4: 19:39:19 executing program 5: 19:39:19 executing program 1: 19:39:19 executing program 2: 19:39:19 executing program 5: [ 255.962252] input:  as /devices/virtual/input/input16 19:39:19 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/17, 0x14f) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 19:39:19 executing program 4: 19:39:19 executing program 1: 19:39:19 executing program 5: 19:39:19 executing program 2: 19:39:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, &(0x7f0000000180), 0x10013c93e) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x80000000005, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x114) r3 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x5, @local}, 0xfffffffffffffe98) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 19:39:19 executing program 4: 19:39:19 executing program 2: 19:39:19 executing program 5: 19:39:19 executing program 1: 19:39:19 executing program 4: 19:39:19 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/17, 0x14f) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 19:39:19 executing program 1: 19:39:19 executing program 5: 19:39:19 executing program 2: 19:39:19 executing program 4: [ 256.507506] input:  as /devices/virtual/input/input17 19:39:20 executing program 5: 19:39:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, &(0x7f0000000180), 0x10013c93e) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x80000000005, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x114) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 19:39:20 executing program 1: 19:39:20 executing program 4: 19:39:20 executing program 2: 19:39:20 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/17, 0x14f) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 19:39:20 executing program 5: 19:39:20 executing program 5: 19:39:20 executing program 4: 19:39:20 executing program 1: 19:39:20 executing program 2: 19:39:20 executing program 0: read(0xffffffffffffffff, &(0x7f0000001140)=""/4096, 0x1000) read(0xffffffffffffffff, &(0x7f0000000000)=""/17, 0x14f) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 19:39:20 executing program 2: [ 257.137031] input:  as /devices/virtual/input/input18 19:39:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, &(0x7f0000000180), 0x10013c93e) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x80000000005, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x114) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 19:39:20 executing program 5: 19:39:20 executing program 1: 19:39:20 executing program 4: 19:39:20 executing program 0: read(0xffffffffffffffff, &(0x7f0000001140)=""/4096, 0x1000) read(0xffffffffffffffff, &(0x7f0000000000)=""/17, 0x14f) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 19:39:20 executing program 2: 19:39:20 executing program 2: 19:39:20 executing program 4: 19:39:20 executing program 1: 19:39:20 executing program 0: read(0xffffffffffffffff, &(0x7f0000001140)=""/4096, 0x1000) read(0xffffffffffffffff, &(0x7f0000000000)=""/17, 0x14f) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 19:39:20 executing program 5: 19:39:21 executing program 4: [ 257.701161] input:  as /devices/virtual/input/input19 19:39:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, &(0x7f0000000180), 0x10013c93e) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x80000000005, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x114) socket$inet6(0xa, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 19:39:21 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000001140)=""/4096, 0x1000) read(r0, &(0x7f0000000000)=""/17, 0x14f) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 19:39:21 executing program 1: 19:39:21 executing program 2: 19:39:21 executing program 5: 19:39:21 executing program 4: 19:39:21 executing program 4: 19:39:21 executing program 1: 19:39:21 executing program 5: 19:39:21 executing program 2: 19:39:21 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000001140)=""/4096, 0x1000) read(r0, &(0x7f0000000000)=""/17, 0x14f) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 19:39:21 executing program 2: [ 258.262862] input:  as /devices/virtual/input/input20 19:39:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, &(0x7f0000000180), 0x10013c93e) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x80000000005, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x114) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x5, @local}, 0xfffffffffffffe98) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 19:39:21 executing program 4: r0 = eventfd(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000001c0), 0xffffffff) 19:39:21 executing program 5: 19:39:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 19:39:21 executing program 2: 19:39:21 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000001140)=""/4096, 0x1000) read(r0, &(0x7f0000000000)=""/17, 0x14f) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 19:39:21 executing program 2: 19:39:21 executing program 1: 19:39:21 executing program 5: 19:39:22 executing program 2: 19:39:22 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r0, &(0x7f0000001140)=""/4096, 0x1000) read(0xffffffffffffffff, &(0x7f0000000000)=""/17, 0x14f) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) [ 258.643958] input:  as /devices/virtual/input/input21 19:39:22 executing program 5: 19:39:22 executing program 2: 19:39:22 executing program 5: 19:39:22 executing program 1: 19:39:22 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r0, &(0x7f0000001140)=""/4096, 0x1000) read(r0, &(0x7f0000000000)=""/17, 0x14f) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) 19:39:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, &(0x7f0000000180), 0x10013c93e) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x80000000005, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x114) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x5, @local}, 0xfffffffffffffe98) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 19:39:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="153f6234488dd25d766070") r1 = socket(0x4000000000000a, 0x1, 0x0) unshare(0x400) getsockopt$inet_tcp_buf(r1, 0x6, 0x18, &(0x7f0000000600)=""/227, &(0x7f00000002c0)=0xe3) 19:39:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="240000001000070c1dfffd946fa2830020200a0009000108000000680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18b0400000000000000db2406b208d37ed01cc0", 0x4c}], 0x1}, 0x0) 19:39:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000180)={0x10, 0x0, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, &(0x7f0000000140)}}, {0x0, 0x0, 0x0, {}, {}, @ramp}}) 19:39:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001640)) flock(0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000001280)={0xfc0, 0x0, 0x4, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x8000000, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) mmap(&(0x7f0000011000/0x6000)=nil, 0x6000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000001240)={0x0}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000380)={r4, 0x1}) [ 259.351844] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. 19:39:22 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 19:39:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x9}) [ 259.549292] input:  as /devices/virtual/input/input22 19:39:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000001700)=""/214) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() socketpair$unix(0x1, 0x4000000000000, 0x0, &(0x7f0000001640)) flock(0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000001280)={0xfc0, 0x0, 0x4, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x8000000, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) mmap(&(0x7f0000011000/0x6000)=nil, 0x6000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000001240)={0x0}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000380)={r4, 0x1}) 19:39:23 executing program 2: mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', &(0x7f0000000400), &(0x7f0000000b40)) ioctl$TCFLSH(r0, 0x540b, 0x1ff) 19:39:23 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4b, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f0000000080)) 19:39:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, &(0x7f0000000180), 0x10013c93e) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x80000000005, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x114) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x5, @local}, 0xfffffffffffffe98) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 260.137709] input:  as /devices/virtual/input/input24 19:39:23 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") bind$inet(r0, &(0x7f0000000980)={0x2, 0x1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000cc0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) 19:39:23 executing program 1: mount(&(0x7f00008deff8), &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)="6e66c952", 0x0, &(0x7f000000a000)) 19:39:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000800)=[{0x408, 0x1, 0x1, "79db8cfc88ca854b6f41578bc67025be65a58358d7e010839a5d6c83064fa1cad80d06786d1e41cad758ab6f0654d8e8ef1692a77d6f505a5809f55f37d8a1b627f41ec149b05708e7ed8219d338fec1da51aa21149fba7f2989a9629be89eeffad48967debf0986b7d2b783cbdbf609de61b753ad05f233aec9d8c0f9548dda5495cfddd601ac2355a80f799dde498d85a42cfb03ff047d28097e9838021922842fccab439e802e4891275883973627c5d7e8d49b2c39759bae7797a8e73b52d90ed3e39c6edffdc937ed655471245a346be36c143379f74daa485d5f1191bed7eb93dd6e8a9e587c65d069a9add1af8d9061d85bdee7afdb0151ed3c7319ec1153767e0715221cefbf19a837e405db4ac5df479a08028277ea144f949f89861c059365c918d7503c8bbbd6fb14b57f0d700f9f195aa8bf150421e02201c8dae489cf52fa67470a2db4a61a78fe8203ccd818e5d24b82c12de667af84d3e4a3d077433c4529629d11436505e12388be891d8652124f9fb4674f4df8bcfa9016f7bbd6faecb6203d67555b5ba9a20f22a2909e34b407bf546d2c2981abe5adfcc3211c30d32de6815e17e3da128c95d8286b8c3bf1200038cf3afa60edf1b2b3124cc781c07cdec87bcbdbdc53f62e20c2e592f0cdbb903700561ab110d04bd98f2144a5def30bee51f828599a7175cf28fbd0ddc33278771b73d72c2a8c512c24d5c9f932a030b044463502248e5cb47dba0070cc1d0026e7a58022173a411869822a4aec8ac46d1e40b57d3c020464d87b3659af233fd082dfe49997b799b5a42d58bf0f29407516da42d960b6b268dd074b345e1715f914d991b6b914e2fcde59d4a0b05797f10285712d1faa92494854cf1b1c55adfdfa7ec66b5483ee61cb8f95f3705419760c12bf534d94e27f2c896253693d1078465cb492344b583617c152e8e40c10a742ef45fdbaaaa7884e6d4331cf8eac0f0a07797fc3b17b8fadb1d36bfbfaa6b70b87bdc53be3fb9114c9a07486b3b08d91538bd530e1d183b591c269f279dfe5df10cfb8905a5dd17ebb1c47a5e37134f8cf90605bb394fafef5a6147b4461c00942cb5ac361b317040ca965256b15cb5fbcdedde960e136c3509d9cdfab1aca5ed40ad5943c9475834cef3e7d66821217679d148ecdc1dc506c58a4e44e7cbb3653498d46686726450605b39ef6d81b7668c87e4c7aa2c4bc53855349813404b92e81c89abef02cc2bea06fa8b2da0fdc17d406cda830af4edcb99934f3a6e989b654c1800902fbd1da2faf4e19142f7a2ef3e155156ec708fcdb5cbbb1473e2ded762d90b64e250f2fa6243367cd3d8eaa9ec9d19e4d77ff91aa885a322cbe536f0c5ba34b6f04ac3303e5ba9aaf0d07597f79c0ccfaf24deac38c2ba7f017e2ecaf347740037314"}], 0x408}, 0x0) 19:39:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x5, 0x4) flistxattr(0xffffffffffffffff, &(0x7f00000001c0)=""/29, 0x1d) 19:39:23 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, &(0x7f00000000c0)) 19:39:23 executing program 1: socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ppoll(&(0x7f0000000300)=[{}], 0x1, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380)={0x851}, 0x8) 19:39:23 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) 19:39:23 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000240)={0x28}, 0x28) 19:39:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, &(0x7f0000000180), 0x10013c93e) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) r3 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x5, @local}, 0xfffffffffffffe98) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 19:39:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x12) 19:39:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf", 0xc) socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000021ff0)={0x2, &(0x7f0000016000)=[{0x28, 0x0, 0x0, 0xfffffffffffff00c}, {0x6}]}, 0x10) 19:39:24 executing program 4: shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 19:39:24 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x20, &(0x7f0000000640)={[{@journal_async_commit='journal_async_commit'}, {@barrier_val={'barrier'}}]}) [ 260.751694] input:  as /devices/virtual/input/input25 19:39:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000003640)) 19:39:24 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xff, 0x3}, 0x20) [ 260.849963] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 260.929096] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,barrier=0x0000000000000000,,errors=continue 19:39:24 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='statm\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffffffffffff008}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000006e00), 0x4000054, 0x0) 19:39:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, &(0x7f0000000180), 0x10013c93e) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) r3 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x5, @local}, 0xfffffffffffffe98) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 261.037459] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 261.122966] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,barrier=0x0000000000000000,,errors=continue 19:39:24 executing program 1: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 19:39:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0x65, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) clock_gettime(0x0, &(0x7f0000003b80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003a40)=[{{&(0x7f0000002500)=@hci, 0x80, &(0x7f0000003700)=[{&(0x7f00000002c0)=""/225, 0xe1}], 0x1, &(0x7f0000003780)=""/232, 0xe8}}, {{&(0x7f0000003880)=@xdp, 0x80, &(0x7f0000003980), 0x8a, &(0x7f00000039c0)=""/111, 0x6f}}], 0x2, 0x2, &(0x7f0000003bc0)={0x0, r1+30000000}) [ 261.353403] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:39:24 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x20, &(0x7f0000000640)={[{@journal_async_commit='journal_async_commit'}, {@barrier_val={'barrier'}}]}) 19:39:24 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b70200001a4b0000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001035800b7080000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe, 0xf8, &(0x7f0000000080)="7a0001000000e8ffffe35c0008ff", &(0x7f0000000380)=""/248}, 0x28) 19:39:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0x7fffffff, 0x20001f, 0x0, 0x0, "23c3bc29de93143c772d109b38f6d22eb1dd9a874dee3827997d469b1a3014b4"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 261.568730] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 261.592413] input:  as /devices/virtual/input/input28 [ 261.597837] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,barrier=0x0000000000000000,,errors=continue 19:39:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf", 0xc) socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000021ff0)={0x2, &(0x7f0000016000)=[{0x28, 0x0, 0x0, 0xfffffffffffff00c}, {0x6}]}, 0x10) 19:39:26 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c3d023c126285718070") r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0xabd, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r2 = socket(0x100000010, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x8924, &(0x7f0000000000)={"626f6e6430000000000600000100", @ifru_settings={0x1, 0x8, @fr_pvc=&(0x7f0000000040)}}) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x9) 19:39:26 executing program 1: syz_emit_ethernet(0x152, &(0x7f00000000c0)={@link_local, @dev, [], {@arp={0x806, @ether_ipv4={0x6, 0x800, 0x6, 0x4, 0x1, @random="f8bf88df5b1b", @remote={0xac, 0x223}, @dev, @rand_addr=0xac1414bb}}}}, &(0x7f0000000000)) 19:39:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, &(0x7f0000000180), 0x10013c93e) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) r3 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x5, @local}, 0xfffffffffffffe98) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 19:39:26 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x20, &(0x7f0000000640)={[{@journal_async_commit='journal_async_commit'}, {@barrier_val={'barrier'}}]}) 19:39:26 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040), 0x4) 19:39:26 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, &(0x7f00000000c0)) mount(&(0x7f00008deff8), &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 263.253091] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 263.271884] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,barrier=0x0000000000000000,,errors=continue 19:39:26 executing program 1: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, &(0x7f00000000c0)) syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='nfs\x00') mount(&(0x7f00008deff8), &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 19:39:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000180)=0x1, 0x4) [ 263.473095] ================================================================== [ 263.480740] BUG: KASAN: slab-out-of-bounds in fscache_alloc_cookie+0x7ad/0x880 [ 263.488117] Read of size 4 at addr ffff8801c3a14f14 by task syz-executor2/7815 [ 263.495476] [ 263.497121] CPU: 0 PID: 7815 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #62 [ 263.504315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.513671] Call Trace: [ 263.516349] dump_stack+0x1c4/0x2b4 [ 263.520029] ? dump_stack_print_info.cold.2+0x52/0x52 [ 263.525291] ? printk+0xa7/0xcf [ 263.528590] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 263.533399] print_address_description.cold.8+0x9/0x1ff [ 263.538780] kasan_report.cold.9+0x242/0x309 [ 263.538801] ? fscache_alloc_cookie+0x7ad/0x880 [ 263.538821] __asan_report_load4_noabort+0x14/0x20 [ 263.538839] fscache_alloc_cookie+0x7ad/0x880 [ 263.538868] ? fscache_cookie_init_once+0x80/0x80 [ 263.552906] ? rpcauth_cache_shrink_scan+0x180/0x180 [ 263.552948] ? __kmalloc_track_caller+0x14a/0x750 [ 263.553005] ? kstrdup+0x39/0x70 [ 263.562337] ? nfs_alloc_client+0x383/0x760 [ 263.562354] ? nfs_get_client+0x8e8/0x14d0 [ 263.562368] ? nfs_init_server+0x357/0x1010 [ 263.562388] ? nfs_create_server+0x86/0x5f0 [ 263.572310] ? nfs_fs_mount+0x17f8/0x2f1c [ 263.572371] ? mount_fs+0xae/0x31d [ 263.572396] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 263.572413] ? do_mount+0x581/0x31f0 [ 263.576026] input:  as /devices/virtual/input/input29 [ 263.580079] ? ksys_mount+0x12d/0x140 [ 263.580092] ? __x64_sys_mount+0xbe/0x150 [ 263.580137] ? do_syscall_64+0x1b9/0x820 [ 263.580162] __fscache_acquire_cookie+0x230/0xb60 [ 263.580186] ? fscache_cookie_put+0x880/0x880 [ 263.580243] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 263.580301] ? check_preemption_disabled+0x48/0x200 [ 263.580344] ? rcu_lockdep_current_cpu_online+0x1f0/0x2d0 [ 263.588867] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 263.588886] ? rcu_pm_notify+0xc0/0xc0 [ 263.588905] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 263.588970] nfs_fscache_get_client_cookie+0x463/0x600 [ 263.589008] ? nfs_readpage_from_fscache_complete+0x200/0x200 [ 263.589036] nfs_alloc_client+0x563/0x760 [ 263.597593] ? register_nfs_version+0x280/0x280 [ 263.597639] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 263.597666] nfs_get_client+0x8e8/0x14d0 [ 263.606469] ? kmem_cache_alloc_trace+0x152/0x750 [ 263.606487] ? mount_fs+0xae/0x31d [ 263.606518] ? nfs_put_client+0x30/0x30 [ 263.606534] ? nfs_alloc_server+0x5ca/0x730 [ 263.606576] ? depot_save_stack+0x292/0x470 [ 263.606597] ? nfs_wait_client_init_complete+0x210/0x210 19:39:27 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x20, &(0x7f0000000640)={[{@journal_async_commit='journal_async_commit'}, {@barrier_val={'barrier'}}]}) [ 263.615567] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 263.615585] ? check_preemption_disabled+0x48/0x200 [ 263.615602] ? check_preemption_disabled+0x48/0x200 [ 263.615619] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 263.615638] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 263.615674] nfs_init_server+0x357/0x1010 [ 263.615707] ? nfs_clone_server+0x920/0x920 [ 263.615728] ? nfs_alloc_fattr+0x48/0x1d0 [ 263.615743] ? rcu_read_lock_sched_held+0x108/0x120 [ 263.623799] nfs_create_server+0x86/0x5f0 [ 263.623822] nfs_try_mount+0x180/0xa80 [ 263.623845] ? lock_downgrade+0x900/0x900 [ 263.623878] ? nfs_request_mount.constprop.18+0x920/0x920 [ 263.623896] ? kasan_check_read+0x11/0x20 [ 263.623913] ? do_raw_spin_unlock+0xa7/0x2f0 [ 263.623932] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 263.631034] kobject: 'input29::mail' (000000001965becc): kobject_add_internal: parent: 'input29', set: 'devices' [ 263.632817] ? kasan_check_write+0x14/0x20 [ 263.632834] ? do_raw_spin_lock+0xc1/0x200 [ 263.632885] ? _raw_spin_unlock+0x2c/0x50 [ 263.632903] ? find_nfs_version+0x138/0x190 [ 263.632925] nfs_fs_mount+0x17f8/0x2f1c [ 263.632948] ? nfs_show_options+0x250/0x250 [ 263.632971] ? nfs_clone_super+0x420/0x420 [ 263.641686] kobject: 'input29::mail' (000000001965becc): kobject_uevent_env [ 263.642984] ? nfs_parse_mount_options+0x2660/0x2660 [ 263.643002] ? lock_downgrade+0x900/0x900 [ 263.643027] mount_fs+0xae/0x31d [ 263.643071] ? digsig_verify+0x1530/0x1530 [ 263.643097] vfs_kern_mount.part.35+0xdc/0x4f0 [ 263.643116] ? may_umount+0xb0/0xb0 [ 263.648690] kobject: 'input29::mail' (000000001965becc): fill_kobj_path: path = '/devices/virtual/input/input29/input29::mail' [ 263.653645] ? _raw_read_unlock+0x2c/0x50 [ 263.653662] ? __get_fs_type+0x97/0xc0 [ 263.653684] do_mount+0x581/0x31f0 [ 263.653708] ? copy_mount_string+0x40/0x40 [ 263.653733] ? copy_mount_options+0x5f/0x380 [ 263.653749] ? rcu_read_lock_sched_held+0x108/0x120 [ 263.653766] ? kmem_cache_alloc_trace+0x353/0x750 [ 263.653786] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 263.653808] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 263.653826] ? copy_mount_options+0x288/0x380 [ 263.661360] kobject: 'event4' (0000000075c0e007): kobject_add_internal: parent: 'input29', set: 'devices' [ 263.663010] ksys_mount+0x12d/0x140 [ 263.663030] __x64_sys_mount+0xbe/0x150 [ 263.663067] do_syscall_64+0x1b9/0x820 [ 263.663123] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 263.663144] ? syscall_return_slowpath+0x5e0/0x5e0 [ 263.674005] kobject: 'event4' (0000000075c0e007): kobject_uevent_env [ 263.679905] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 263.679979] ? trace_hardirqs_on_caller+0x310/0x310 [ 263.680013] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 263.680046] ? prepare_exit_to_usermode+0x291/0x3b0 [ 263.680070] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 263.680092] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 263.684814] kobject: 'event4' (0000000075c0e007): fill_kobj_path: path = '/devices/virtual/input/input29/event4' [ 263.688891] RIP: 0033:0x457569 [ 263.688908] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 263.688917] RSP: 002b:00007f3f13899c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 263.688934] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457569 [ 263.688944] RDX: 000000002015bffc RSI: 0000000020343ff8 RDI: 00000000208deff8 [ 263.688953] RBP: 000000000072bf00 R08: 000000002000a000 R09: 0000000000000000 [ 263.688963] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3f1389a6d4 [ 263.688989] R13: 00000000004c289b R14: 00000000004d3c78 R15: 00000000ffffffff [ 263.689027] [ 263.689034] Allocated by task 7815: [ 263.689047] save_stack+0x43/0xd0 [ 263.689078] kasan_kmalloc+0xc7/0xe0 [ 263.696040] kobject: 'input29::numlock' (0000000018eb530a): kobject_uevent_env [ 263.697712] __kmalloc+0x14e/0x760 [ 263.697726] fscache_alloc_cookie+0x6f7/0x880 [ 263.697741] __fscache_acquire_cookie+0x230/0xb60 [ 263.697754] nfs_fscache_get_client_cookie+0x463/0x600 [ 263.697774] nfs_alloc_client+0x563/0x760 [ 263.703252] kobject: 'input29::numlock' (0000000018eb530a): fill_kobj_path: path = '/devices/virtual/input/input29/input29::numlock' [ 263.706231] nfs_get_client+0x8e8/0x14d0 [ 263.706247] nfs_init_server+0x357/0x1010 [ 263.706261] nfs_create_server+0x86/0x5f0 [ 263.706274] nfs_try_mount+0x180/0xa80 [ 263.706287] nfs_fs_mount+0x17f8/0x2f1c [ 263.706299] mount_fs+0xae/0x31d [ 263.706320] vfs_kern_mount.part.35+0xdc/0x4f0 [ 263.713298] kobject: 'input29::numlock' (0000000018eb530a): kobject_uevent_env [ 263.714590] do_mount+0x581/0x31f0 [ 263.714601] ksys_mount+0x12d/0x140 [ 263.714614] __x64_sys_mount+0xbe/0x150 [ 263.714628] do_syscall_64+0x1b9/0x820 [ 263.714643] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 263.714647] [ 263.714654] Freed by task 0: [ 263.714658] (stack is not available) [ 263.714661] [ 263.714678] The buggy address belongs to the object at ffff8801c3a14f00 [ 263.714678] which belongs to the cache kmalloc-32 of size 32 [ 263.719232] kobject: 'input29::numlock' (0000000018eb530a): fill_kobj_path: path = '/devices/virtual/input/input29/input29::numlock' [ 263.724426] The buggy address is located 20 bytes inside of [ 263.724426] 32-byte region [ffff8801c3a14f00, ffff8801c3a14f20) [ 263.724432] The buggy address belongs to the page: [ 263.724455] page:ffffea00070e8500 count:1 mapcount:0 mapping:ffff8801da8001c0 index:0xffff8801c3a14fc1 [ 263.724470] flags: 0x2fffc0000000100(slab) [ 263.724510] raw: 02fffc0000000100 ffffea00070b7c88 ffff8801da801248 ffff8801da8001c0 [ 263.724527] raw: ffff8801c3a14fc1 ffff8801c3a14000 000000010000003f 0000000000000000 [ 263.730385] kobject: 'input29::numlock' (0000000018eb530a): kobject_cleanup, parent (null) [ 263.735050] page dumped because: kasan: bad access detected [ 263.735055] [ 263.735059] Memory state around the buggy address: [ 263.735072] ffff8801c3a14e00: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 263.735099] ffff8801c3a14e80: 05 fc fc fc fc fc fc fc 00 00 01 fc fc fc fc fc [ 263.735110] >ffff8801c3a14f00: 00 00 06 fc fc fc fc fc 01 fc fc fc fc fc fc fc [ 263.735115] ^ [ 263.735127] ffff8801c3a14f80: 01 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 263.735137] ffff8801c3a15000: fb fb fb fb fb fb fb fc fc fc fc fb fb fb fb fb [ 263.735142] ================================================================== [ 263.735166] Disabling lock debugging due to kernel taint [ 263.740326] kobject: 'input29::numlock' (0000000018eb530a): calling ktype release [ 263.789246] Kernel panic - not syncing: panic_on_warn set ... [ 263.789246] [ 263.799857] rpcbind: RPC call returned error 22 [ 263.810089] CPU: 0 PID: 7815 Comm: syz-executor2 Tainted: G B 4.19.0-rc8+ #62 [ 263.810099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.810103] Call Trace: [ 263.810124] dump_stack+0x1c4/0x2b4 [ 263.810145] ? dump_stack_print_info.cold.2+0x52/0x52 [ 263.832999] kobject: 'loop1' (000000000828e8a3): kobject_uevent_env [ 263.835377] panic+0x238/0x4e7 [ 263.835397] ? add_taint.cold.5+0x16/0x16 [ 263.856766] kobject: 'loop1' (000000000828e8a3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 263.859338] ? preempt_schedule+0x4d/0x60 [ 263.859354] ? ___preempt_schedule+0x16/0x18 [ 263.859371] ? trace_hardirqs_on+0xb4/0x310 [ 263.859405] kasan_end_report+0x47/0x4f [ 263.974264] kobject: 'input29::numlock': free name [ 263.976665] kasan_report.cold.9+0x76/0x309 [ 263.976682] ? fscache_alloc_cookie+0x7ad/0x880 [ 263.976702] __asan_report_load4_noabort+0x14/0x20 [ 264.003633] kobject: 'input29::mail' (000000001965becc): kobject_uevent_env [ 264.007058] fscache_alloc_cookie+0x7ad/0x880 [ 264.007080] ? fscache_cookie_init_once+0x80/0x80 [ 264.007100] ? rpcauth_cache_shrink_scan+0x180/0x180 [ 264.040287] kobject: 'input29::mail' (000000001965becc): fill_kobj_path: path = '/devices/virtual/input/input29/input29::mail' [ 264.044146] ? __kmalloc_track_caller+0x14a/0x750 [ 264.044160] ? kstrdup+0x39/0x70 [ 264.044180] ? nfs_alloc_client+0x383/0x760 [ 264.085897] kobject: 'input29::mail' (000000001965becc): kobject_cleanup, parent (null) [ 264.092968] ? nfs_get_client+0x8e8/0x14d0 [ 264.092984] ? nfs_init_server+0x357/0x1010 [ 264.092998] ? nfs_create_server+0x86/0x5f0 [ 264.093011] ? nfs_fs_mount+0x17f8/0x2f1c [ 264.093030] ? mount_fs+0xae/0x31d [ 264.117197] kobject: 'input29::mail' (000000001965becc): calling ktype release [ 264.127305] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 264.127318] ? do_mount+0x581/0x31f0 [ 264.127329] ? ksys_mount+0x12d/0x140 [ 264.127341] ? __x64_sys_mount+0xbe/0x150 [ 264.127361] ? do_syscall_64+0x1b9/0x820 [ 264.171608] kobject: 'input29::mail': free name [ 264.173896] __fscache_acquire_cookie+0x230/0xb60 [ 264.173916] ? fscache_cookie_put+0x880/0x880 [ 264.173936] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 264.219772] rpcbind: RPC call returned error 22 [ 264.229182] ? check_preemption_disabled+0x48/0x200 [ 264.229204] ? rcu_lockdep_current_cpu_online+0x1f0/0x2d0 [ 264.229240] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 264.589384] ? rcu_pm_notify+0xc0/0xc0 [ 264.593289] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 264.598841] nfs_fscache_get_client_cookie+0x463/0x600 [ 264.604286] ? nfs_readpage_from_fscache_complete+0x200/0x200 [ 264.610183] nfs_alloc_client+0x563/0x760 [ 264.614356] ? register_nfs_version+0x280/0x280 [ 264.619035] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 264.623635] nfs_get_client+0x8e8/0x14d0 [ 264.627702] ? kmem_cache_alloc_trace+0x152/0x750 [ 264.632552] ? mount_fs+0xae/0x31d [ 264.636121] ? nfs_put_client+0x30/0x30 [ 264.640111] ? nfs_alloc_server+0x5ca/0x730 [ 264.644436] ? depot_save_stack+0x292/0x470 [ 264.648769] ? nfs_wait_client_init_complete+0x210/0x210 [ 264.654260] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 264.659806] ? check_preemption_disabled+0x48/0x200 [ 264.664833] ? check_preemption_disabled+0x48/0x200 [ 264.669855] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 264.675051] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 264.680596] nfs_init_server+0x357/0x1010 [ 264.684758] ? nfs_clone_server+0x920/0x920 [ 264.689091] ? nfs_alloc_fattr+0x48/0x1d0 [ 264.693280] ? rcu_read_lock_sched_held+0x108/0x120 [ 264.698317] nfs_create_server+0x86/0x5f0 [ 264.702475] nfs_try_mount+0x180/0xa80 [ 264.706398] ? lock_downgrade+0x900/0x900 [ 264.710554] ? nfs_request_mount.constprop.18+0x920/0x920 [ 264.716102] ? kasan_check_read+0x11/0x20 [ 264.720266] ? do_raw_spin_unlock+0xa7/0x2f0 [ 264.724687] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 264.729290] ? kasan_check_write+0x14/0x20 [ 264.733530] ? do_raw_spin_lock+0xc1/0x200 [ 264.737775] ? _raw_spin_unlock+0x2c/0x50 [ 264.741961] ? find_nfs_version+0x138/0x190 [ 264.746292] nfs_fs_mount+0x17f8/0x2f1c [ 264.750285] ? nfs_show_options+0x250/0x250 [ 264.754619] ? nfs_clone_super+0x420/0x420 [ 264.758859] ? nfs_parse_mount_options+0x2660/0x2660 [ 264.763980] ? lock_downgrade+0x900/0x900 [ 264.768142] mount_fs+0xae/0x31d [ 264.771515] ? digsig_verify+0x1530/0x1530 [ 264.775765] vfs_kern_mount.part.35+0xdc/0x4f0 [ 264.780357] ? may_umount+0xb0/0xb0 [ 264.783990] ? _raw_read_unlock+0x2c/0x50 [ 264.788153] ? __get_fs_type+0x97/0xc0 [ 264.792049] do_mount+0x581/0x31f0 [ 264.795603] ? copy_mount_string+0x40/0x40 [ 264.799848] ? copy_mount_options+0x5f/0x380 [ 264.804264] ? rcu_read_lock_sched_held+0x108/0x120 [ 264.809291] ? kmem_cache_alloc_trace+0x353/0x750 [ 264.814143] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 264.819689] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 264.825246] ? copy_mount_options+0x288/0x380 [ 264.829751] ksys_mount+0x12d/0x140 [ 264.833388] __x64_sys_mount+0xbe/0x150 [ 264.837372] do_syscall_64+0x1b9/0x820 [ 264.841270] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 264.846641] ? syscall_return_slowpath+0x5e0/0x5e0 [ 264.851580] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 264.856430] ? trace_hardirqs_on_caller+0x310/0x310 [ 264.861473] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 264.866520] ? prepare_exit_to_usermode+0x291/0x3b0 [ 264.871548] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 264.876406] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 264.881610] RIP: 0033:0x457569 [ 264.884814] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 264.903729] RSP: 002b:00007f3f13899c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 264.911459] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457569 [ 264.918730] RDX: 000000002015bffc RSI: 0000000020343ff8 RDI: 00000000208deff8 [ 264.926001] RBP: 000000000072bf00 R08: 000000002000a000 R09: 0000000000000000 [ 264.933276] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3f1389a6d4 [ 264.940558] R13: 00000000004c289b R14: 00000000004d3c78 R15: 00000000ffffffff [ 264.948737] Kernel Offset: disabled [ 264.952363] Rebooting in 86400 seconds..