[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 17.785947] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.651362] random: sshd: uninitialized urandom read (32 bytes read) [ 22.923251] random: sshd: uninitialized urandom read (32 bytes read) [ 23.745615] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.21' (ECDSA) to the list of known hosts. [ 29.155938] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/01 10:08:11 fuzzer started [ 30.768765] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/01 10:08:14 dialing manager at 10.128.0.26:46293 2018/08/01 10:08:17 syscalls: 1808 2018/08/01 10:08:17 code coverage: enabled 2018/08/01 10:08:17 comparison tracing: enabled 2018/08/01 10:08:17 setuid sandbox: enabled 2018/08/01 10:08:17 namespace sandbox: enabled 2018/08/01 10:08:17 fault injection: enabled 2018/08/01 10:08:17 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/01 10:08:17 net packed injection: enabled 2018/08/01 10:08:17 net device setup: enabled [ 39.841877] random: crng init done 10:09:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x8) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f0000000000)=""/1, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) 10:09:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r2, 0x309}, 0x14}}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r4, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1004000000016) 10:09:31 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 10:09:31 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000007c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000880)="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", 0x504, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0x4000, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40501, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000080)) write$eventfd(r1, &(0x7f0000000040), 0x8) recvmmsg(r0, &(0x7f0000004440)=[{{&(0x7f0000003c80)=@l2, 0x80, &(0x7f0000004380)}}], 0x1, 0x0, &(0x7f0000004540)={0x0, 0x989680}) 10:09:31 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240)=0x4, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendfile(r2, r2, &(0x7f0000000340)=0xffffffd, 0x7ffffffb) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KDSKBLED(r1, 0x4b65, 0x8) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r3, 0x80080) 10:09:31 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x3, @local}], 0x10) 10:09:31 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x900800000000937e, &(0x7f0000000040)="01e80000352b3697e3c0") 10:09:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x34, &(0x7f0000000140), 0x4) [ 108.956780] IPVS: ftp: loaded support on port[0] = 21 [ 108.968821] IPVS: ftp: loaded support on port[0] = 21 [ 108.988119] IPVS: ftp: loaded support on port[0] = 21 [ 108.990752] IPVS: ftp: loaded support on port[0] = 21 [ 109.018969] IPVS: ftp: loaded support on port[0] = 21 [ 109.060241] IPVS: ftp: loaded support on port[0] = 21 [ 109.087357] IPVS: ftp: loaded support on port[0] = 21 [ 109.102058] IPVS: ftp: loaded support on port[0] = 21 [ 110.801926] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.808373] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.828591] device bridge_slave_0 entered promiscuous mode [ 110.848496] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.854917] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.873503] device bridge_slave_0 entered promiscuous mode [ 110.889526] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.895939] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.905192] device bridge_slave_0 entered promiscuous mode [ 110.913210] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.919605] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.930234] device bridge_slave_0 entered promiscuous mode [ 110.938540] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.944936] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.953513] device bridge_slave_0 entered promiscuous mode [ 110.962714] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.969098] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.979860] device bridge_slave_0 entered promiscuous mode [ 110.990033] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.996411] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.003792] device bridge_slave_0 entered promiscuous mode [ 111.016164] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.022555] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.037191] device bridge_slave_1 entered promiscuous mode [ 111.043456] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.049862] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.061436] device bridge_slave_0 entered promiscuous mode [ 111.069494] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.075895] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.084491] device bridge_slave_1 entered promiscuous mode [ 111.092280] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.098661] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.115041] device bridge_slave_1 entered promiscuous mode [ 111.121738] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.128137] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.136612] device bridge_slave_1 entered promiscuous mode [ 111.144131] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.150493] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.169992] device bridge_slave_1 entered promiscuous mode [ 111.180211] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.186609] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.197850] device bridge_slave_1 entered promiscuous mode [ 111.206064] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.212510] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.219624] device bridge_slave_1 entered promiscuous mode [ 111.226899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 111.234196] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 111.242469] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 111.254475] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 111.262867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 111.270774] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.277247] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.307756] device bridge_slave_1 entered promiscuous mode [ 111.320727] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 111.329211] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 111.340470] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 111.353970] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 111.361311] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 111.369065] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 111.376731] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 111.407876] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 111.430570] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 111.483611] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 111.547941] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 111.658647] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 111.677803] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 111.688555] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 111.698960] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 111.723189] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 111.740183] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 111.783645] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 111.799212] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 111.815898] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 111.838311] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 111.849617] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 111.859510] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 111.870794] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 111.900065] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 111.957815] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 112.017964] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 112.304795] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 112.322769] team0: Port device team_slave_0 added [ 112.337183] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 112.348310] team0: Port device team_slave_0 added [ 112.359345] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 112.368555] team0: Port device team_slave_0 added [ 112.378848] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 112.388808] team0: Port device team_slave_0 added [ 112.400373] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 112.413926] team0: Port device team_slave_1 added [ 112.430105] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 112.443597] team0: Port device team_slave_1 added [ 112.451545] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 112.458809] team0: Port device team_slave_0 added [ 112.472361] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 112.480703] team0: Port device team_slave_0 added [ 112.497271] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 112.511602] team0: Port device team_slave_1 added [ 112.524624] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 112.538138] team0: Port device team_slave_1 added [ 112.544665] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 112.553360] team0: Port device team_slave_0 added [ 112.560374] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 112.570421] team0: Port device team_slave_1 added [ 112.578936] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 112.585812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.598985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.613324] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 112.622127] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 112.629405] team0: Port device team_slave_1 added [ 112.636722] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 112.645046] team0: Port device team_slave_0 added [ 112.656206] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 112.663396] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 112.670343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.682799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.709431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.718472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.725923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.734258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.743903] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 112.751049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.760698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.769680] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 112.778366] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 112.787757] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 112.796461] team0: Port device team_slave_1 added [ 112.805324] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 112.815749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 112.823148] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 112.831500] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 112.841589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.854073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.880580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.897099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.905579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.913264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.920628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.928257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.935614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.943238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.950588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.958235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.966161] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 112.973504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.981713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.991146] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 112.998958] team0: Port device team_slave_1 added [ 113.007139] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 113.016039] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 113.024303] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 113.031974] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 113.044499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.053178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.085385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.096503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.107178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.114841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.122722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.130519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.138486] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 113.145952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.154802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.163222] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 113.170146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.184448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.193818] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 113.203408] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 113.212226] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 113.221184] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 113.229856] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 113.237171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.269587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.295418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.306275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.313673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.321429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.329106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.336792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.344542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.352361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.364719] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 113.389309] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 113.396927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.412420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.434508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.450213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.464006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.476741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.485782] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 113.494700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.506308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.523730] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 113.543220] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 113.551492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.586626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.605287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.613312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.647804] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 113.655234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.669634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.699769] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 113.707608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.728258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.360486] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.366896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.373526] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.379892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.390883] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 114.397265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.565935] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.572448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.579121] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.585499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.607869] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 114.620796] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.627207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.633851] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.640224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.648498] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 114.656620] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.662987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.669616] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.675971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.698775] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 114.709796] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.716209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.722851] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.729223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.737284] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 114.756200] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.762612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.769263] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.775630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.817622] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 114.841460] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.847874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.854505] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.860872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.905538] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 114.925557] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.931971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.938649] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.945039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.970585] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 115.424305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.439623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.453537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.466806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.473812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.481345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.488580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.439249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.616099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.641905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.753456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.797789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.828282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.836996] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 118.885148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.922903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.021897] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 119.044643] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 119.093542] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 119.154543] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 119.176662] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 119.182862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.193867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.229498] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 119.288288] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 119.344550] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 119.379658] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 119.385869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.396421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.421033] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 119.431137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.446434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.497605] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 119.503821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.523534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.584925] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 119.591143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.598190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.612513] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 119.619109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.626499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.657571] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.742911] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 119.752775] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 119.766951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.782615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.803443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.810931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.826920] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.914746] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.952547] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.976959] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.990134] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.118217] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.162355] 8021q: adding VLAN 0 to HW filter on device team0 10:09:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x31, 0x119, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}}, 0x0) 10:09:44 executing program 5: timer_create(0x1000000002, &(0x7f0000000100)={0x0, 0x21, 0x0, @thr={&(0x7f0000000280), &(0x7f00000000c0)}}, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000000180)) 10:09:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) poll(&(0x7f0000000200)=[{r1}], 0x1, 0x7) 10:09:44 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x10, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000200)=ANY=[]) [ 122.099844] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 122.109068] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 122.118129] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 10:09:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x34, &(0x7f0000000140), 0x4) 10:09:44 executing program 6: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x3, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)) 10:09:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x34, &(0x7f0000000140), 0x4) [ 122.246256] EXT4-fs error (device loop5): ext4_iget:4778: inode #2: comm syz-executor5: root inode unallocated 10:09:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x1, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000000), 0x0, [], [0x4]}) [ 122.318601] EXT4-fs (loop5): get root inode failed [ 122.323686] EXT4-fs (loop5): mount failed [ 122.334072] hrtimer: interrupt took 64407 ns [ 122.368637] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 122.412591] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 122.421717] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 122.430770] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 122.490468] EXT4-fs: failed to create workqueue [ 122.495229] EXT4-fs (loop5): mount failed 10:09:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="240000002e0007041dfffd946fa2830020200a0009000000001d8568ff0f000000000000280000001100ffffba16a0aa1c2009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 10:09:45 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=@ipv4_newroute={0x24, 0x18, 0x521, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x0) 10:09:45 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 10:09:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x34, &(0x7f0000000140), 0x4) 10:09:45 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 10:09:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{0x1000000, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000000)=["07e646d40000000000"], 0x9, [], [0x4]}) 10:09:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000001c0)=""/43) 10:09:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x400000000e) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x5412, &(0x7f0000000340)) 10:09:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @local}, @dccp={{0x88a8ffff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000100)={0x0, 0x8000, [0x0, 0xffffffffffffffff]}) 10:09:45 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 10:09:45 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @remote={0xac, 0x14, 0x0}}, 0x2}}, 0x2e) getpeername(r1, &(0x7f0000000740)=@pptp={0x0, 0x0, {0x0, @local}}, &(0x7f0000000540)=0x80) 10:09:45 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 10:09:45 executing program 1: r0 = socket$inet6(0xa, 0x80806, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x94) sendmsg(r1, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "01000009d0010100000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 10:09:45 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$nfc_llcp(r0, &(0x7f00000006c0)=[{&(0x7f0000000300)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "faff8d17b2114cfd4fe91fc94359fa594ecfbf802035bf44f1dfb5c55da3e4e9fce554e3b16f4c4b3782741f5621acb58ea0674b1c613c551aa8f64f98f868"}, 0x60, &(0x7f0000000580), 0x0, &(0x7f00000005c0)={0x10}, 0x10}], 0x1, 0x0) 10:09:45 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x10001}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000480), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) unshare(0x40000000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000001c0)=""/153) io_setup(0xfffffffffffffff8, &(0x7f0000000300)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) [ 123.422453] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 10:09:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire], 0x0, 0x0, &(0x7f00000000c0)}) [ 123.523939] IPVS: ftp: loaded support on port[0] = 21 10:09:46 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xd0, &(0x7f0000000000), 0x4) 10:09:46 executing program 1: r0 = socket$inet6(0xa, 0x80806, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x94) sendmsg(r1, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "01000009d0010100000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 10:09:46 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 10:09:46 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) [ 123.576530] binder: 6525:6527 ioctl c0306201 20a20000 returned -14 [ 123.582714] IPVS: ftp: loaded support on port[0] = 21 10:09:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000000)="120000005200df9eaf4af5843bdb000000ff", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000004b00), 0x0, &(0x7f0000004b80)=""/100, 0x64}}, {{&(0x7f0000004c00)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @dev}}}}, 0x80, &(0x7f0000004f80), 0x0, &(0x7f0000005000)=""/35, 0x23}}, {{&(0x7f0000005040)=@llc, 0x80, &(0x7f0000000040)}}], 0x3, 0x0, &(0x7f0000005580)={0x0, 0x1c9c380}) 10:09:46 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 10:09:46 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @local}, @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000100)) [ 123.674888] binder: 6525:6531 ioctl c0306201 20a20000 returned -14 10:09:46 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) mremap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000008000/0x1000)=nil) 10:09:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000000)="120000005200df9eaf4af5843bdb000000ff", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000004b00), 0x0, &(0x7f0000004b80)=""/100, 0x64}}, {{&(0x7f0000004c00)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @dev}}}}, 0x80, &(0x7f0000004f80), 0x0, &(0x7f0000005000)=""/35, 0x23}}, {{&(0x7f0000005040)=@llc, 0x80, &(0x7f0000000040)}}], 0x3, 0x0, &(0x7f0000005580)={0x0, 0x1c9c380}) 10:09:46 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000b00)={&(0x7f0000000ac0), 0xc, &(0x7f00000000c0)={&(0x7f0000000a40)=@ipv6_getnetconf={0x14, 0x52, 0x7c5fd5fa6bcda905}, 0x14}}, 0x0) 10:09:46 executing program 4: syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x6558, 0x8}}}}}, 0x0) 10:09:46 executing program 1: r0 = socket$inet6(0xa, 0x80806, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x94) sendmsg(r1, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "01000009d0010100000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 10:09:46 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @local}, @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000100)) 10:09:46 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r1, 0x30b, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080), 0x10}]) r2 = gettid() clock_gettime(0x0, &(0x7f0000000300)={0x0}) clock_nanosleep(0x9, 0x0, &(0x7f00000001c0)={r3}, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000014) process_vm_writev(0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140), 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) tee(r4, 0xffffffffffffffff, 0x0, 0x0) 10:09:46 executing program 6: prctl$intptr(0x1c, 0x1) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x3, 0xffffffffffffffff) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f0000000000)) 10:09:46 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x1, 0x100000080, 0xa, 0x1000000000000008}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000b000)={r0, &(0x7f0000014000)='A\b', &(0x7f0000012000)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000b000)={r0, &(0x7f0000012000), &(0x7f000000cff6)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f000000a000)={r0, &(0x7f0000008000), &(0x7f0000016f02)=""/254}, 0x18) 10:09:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000000)="120000005200df9eaf4af5843bdb000000ff", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000004b00), 0x0, &(0x7f0000004b80)=""/100, 0x64}}, {{&(0x7f0000004c00)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @dev}}}}, 0x80, &(0x7f0000004f80), 0x0, &(0x7f0000005000)=""/35, 0x23}}, {{&(0x7f0000005040)=@llc, 0x80, &(0x7f0000000040)}}], 0x3, 0x0, &(0x7f0000005580)={0x0, 0x1c9c380}) 10:09:46 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @local}, @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000100)) 10:09:46 executing program 7: r0 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x6, &(0x7f0000001500)={0x0, @in={{0x2, 0x0, @rand_addr}}}, &(0x7f00000001c0)=0xa0) 10:09:46 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000850000)=@file={0x0, './file0\x00'}, 0x1) 10:09:46 executing program 1: r0 = socket$inet6(0xa, 0x80806, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x94) sendmsg(r1, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "01000009d0010100000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 10:09:46 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @local}, @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000100)) 10:09:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000000)="120000005200df9eaf4af5843bdb000000ff", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000004b00), 0x0, &(0x7f0000004b80)=""/100, 0x64}}, {{&(0x7f0000004c00)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @dev}}}}, 0x80, &(0x7f0000004f80), 0x0, &(0x7f0000005000)=""/35, 0x23}}, {{&(0x7f0000005040)=@llc, 0x80, &(0x7f0000000040)}}], 0x3, 0x0, &(0x7f0000005580)={0x0, 0x1c9c380}) 10:09:46 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x14) close(r1) close(r0) 10:09:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x15, 0x80005, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in=@local, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, 0xe8) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f00000000c0)=""/1, &(0x7f0000000040)=0x1) 10:09:46 executing program 7: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8ff00000000720af9ff2300000079a0f8ff000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 10:09:46 executing program 2: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1\x00', &(0x7f0000000340)=@ethtool_gstrings}) 10:09:46 executing program 6: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbfffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f000000a000)) 10:09:46 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000bd7000)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x86}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 10:09:46 executing program 6: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbfffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f000000a000)) 10:09:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x2) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) 10:09:46 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$cont(0x20, r1, 0x0, 0x0) 10:09:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8020000) clone(0x899068ba925cf01d, &(0x7f0000000280), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000200)) 10:09:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) recvfrom(r1, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 10:09:46 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000346fc8), &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000180)) 10:09:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) close(r0) 10:09:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000001380)={0x3, "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"}, 0xfd2, 0x800) [ 124.230584] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.287893] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 10:09:46 executing program 6: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbfffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f000000a000)) 10:09:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r0 = getpid() ioprio_set$pid(0x3, r0, 0x0) 10:09:46 executing program 4: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000000180)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000500)="79c9", 0x2}], 0x1, &(0x7f0000001840)}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000300)="50c228c7a7fe43a82e7a1cbb1e97c83bd6c249d73fbb77c79691813e0f5f03e35909b50a239839b430d79eabea8067d9dd073c677726631cc36d8c006c98e443d096cea05c") 10:09:46 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000003c0)) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)) 10:09:46 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000ccb000), 0x10) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290000000000000000000000000000000000000000000000000000000007002e1766696c6530"], 0x2a) write$P9_RSTATu(r2, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 10:09:46 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x8}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000040)="b8", &(0x7f0000000100)=""/230}, 0x18) 10:09:46 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) sendto$inet6(r1, &(0x7f0000000000)="af", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x14f) writev(r1, &(0x7f0000001400)=[{&(0x7f0000001380)="b9", 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 10:09:46 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000003c0)) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)) 10:09:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001b80)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="213e7ff1f0980c9ed56b50b08e10a9b9f8942fb8b7ce66e729ac2b217f64da5a25", 0x21}], 0x1, &(0x7f0000001580)}], 0x1, 0x0) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000500)=""/84, 0xf}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2, &(0x7f00000000c0)=""/50, 0x32}, 0x0) 10:09:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000140)=ANY=[]) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000180)={"627269000200"}) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\x00', 0x1, 0x3fffffa, &(0x7f0000254000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 10:09:46 executing program 6: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbfffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f000000a000)) 10:09:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x1d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, &(0x7f0000000100), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', 'bond_slave_0\x00', 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xf0, 0xf0, 0x140, [@cgroup0={'cgroup\x00', 0x8}, @nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) [ 124.563548] sctp: failed to load transform for md5: -2 [ 124.682623] xt_nfacct: accounting object `syz0' does not exists [ 124.690625] xt_nfacct: accounting object `syz0' does not exists 10:09:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xa05901) 10:09:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0xf0ffffff}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0xffffff9e, 0xf0ffffff}, [@NDA_LLADDR={0xa, 0x2, @empty=[0xf0ffffff]}]}, 0x28}}, 0x0) 10:09:47 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000078dff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00009db000)='./file1\x00') rename(&(0x7f00000f7ff0)='./control/file0\x00', &(0x7f0000636000)='./file0\x00') syz_mount_image$ceph(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)='\x00') creat(&(0x7f0000000100)='./control/file0\x00', 0x0) dup2(r0, r1) 10:09:47 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x5420, 0xfffffffffffffffd) 10:09:47 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x203d, 0x0) write$binfmt_elf32(r2, &(0x7f0000000140)=ANY=[], 0xffffffdb) ioctl$int_in(r2, 0x80000000005001, &(0x7f00000004c0)) 10:09:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x61) read(r1, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 10:09:47 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000003c0)) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)) 10:09:47 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 10:09:47 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001140)={r0, &(0x7f0000000080), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r0, &(0x7f0000000480)="a6", &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000100), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r0, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) 10:09:47 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r1, &(0x7f0000000000)={0x4f, 0x7d, 0x0, {0x0, 0x37d, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '+', 0xc, ',^],:&-*ppp1', 0x8, "766d6e657431ad5e"}}, 0x4f) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x20, 0x161002) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*'], 0x1) 10:09:47 executing program 5: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) io_setup(0x6, &(0x7f00000012c0)=0x0) io_getevents(r0, 0x1, 0x1, &(0x7f0000d83f60)=[{}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) r1 = memfd_create(&(0x7f0000000000)="0d806c6f314e", 0x0) io_submit(r0, 0x200000000000003b, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000100)}]) 10:09:47 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000003c0)) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)) 10:09:47 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, 0x1c) 10:09:47 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000180)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'teql0\x00'}) ptrace(0x4207, r1) ptrace$setopts(0x4205, r1, 0x2, 0xa07000) 10:09:47 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000082000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f00000002c0)) 10:09:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000014c0)=ANY=[]) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='net/snmp\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000a00)={&(0x7f00000008c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r2, 0x800, 0x70bd2a, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x51}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x44}}, 0x81) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) signalfd(r0, &(0x7f00000004c0)={0x80}, 0x8) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'security.', 'keyringvmnet0\x00'}, &(0x7f0000000240)='GPLproc]trusted\x00', 0x1e3, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/179, 0xb3) [ 125.192476] ceph: device name is missing path (no : separator in /dev/loop4) 10:09:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x9, 0x2, 0x7000, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:09:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") getrlimit(0x0, &(0x7f0000002ff2)) pkey_mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x5, 0xffffffffffffffff) select(0x40, &(0x7f0000000fc0), &(0x7f0000000180)={0x1}, &(0x7f0000002000), &(0x7f0000003000)={0x77359400}) [ 125.269658] ceph: device name is missing path (no : separator in /dev/loop4) [ 125.307140] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 10:09:47 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f7980584303d01f0549a89d78dc4af89ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5ad3657818feb0279188b92b2e6b035cde4c66c6b00081bd106f6adfe58108a8be89d3695670374e304c071de17635f3034de8c2372e07000000000000007d656f") ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, 0x0, [{r1}, {r0}, {r0}]}) [ 125.314248] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 10:09:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) write$binfmt_aout(r2, &(0x7f0000000280), 0x20) ioctl(r1, 0xc0984124, &(0x7f0000001f64)) [ 125.426397] F2FS-fs (loop2): Wrong CP boundary, start(1024) end(2099200) blocks(1024) [ 125.434539] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 125.494599] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 125.501741] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 125.516732] F2FS-fs (loop2): Wrong CP boundary, start(1024) end(2099200) blocks(1024) [ 125.524801] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 125.617081] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 125.624275] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 10:09:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000014c0)=ANY=[]) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='net/snmp\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000a00)={&(0x7f00000008c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r2, 0x800, 0x70bd2a, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x51}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x44}}, 0x81) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) signalfd(r0, &(0x7f00000004c0)={0x80}, 0x8) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'security.', 'keyringvmnet0\x00'}, &(0x7f0000000240)='GPLproc]trusted\x00', 0x1e3, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/179, 0xb3) 10:09:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") getrlimit(0x0, &(0x7f0000002ff2)) pkey_mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x5, 0xffffffffffffffff) select(0x40, &(0x7f0000000fc0), &(0x7f0000000180)={0x1}, &(0x7f0000002000), &(0x7f0000003000)={0x77359400}) 10:09:48 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="c96e5bde84a7", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 10:09:48 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'ifb0\x00'}) 10:09:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x200000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) getpriority(0x1, r1) socket$packet(0x11, 0x3, 0x300) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000140)=0x631, &(0x7f00000001c0)=0x4) socket$packet(0x11, 0x3, 0x300) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f00000003c0)={0x4, 0x7, 0x8, 0x2, "d77198f79776bae8d46571fab49105e570e8a26e480eaae656e9e305304df0ca"}) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x18) ioctl$TIOCSTI(r4, 0x5412, 0x7b913cdc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @rand_addr=0x3}, {0x0, @local}, 0x24, {0x2, 0x4e24}, 'veth1\x00'}) sendto$inet(r5, &(0x7f0000000100)="07b8729bf511c2d33292a378042c7376b58552b01d25f4172f", 0x19, 0x4010, &(0x7f0000000240)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000440)={0x0, 0x6b}) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @rand_addr}, 0x10) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r9, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48d]}) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r5, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r5, &(0x7f0000000200)="a5", 0x1, 0xe000000, &(0x7f0000000180), 0x10) 10:09:48 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0x8, 0x4, 0x80000000004, 0x8000000007}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f00000000c0)}, 0xb) 10:09:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) write$binfmt_aout(r2, &(0x7f0000000280), 0x20) ioctl(r1, 0xc0984124, &(0x7f0000001f64)) 10:09:48 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x4008af04, &(0x7f0000016c40)={'ip6gre0\x00'}) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)) close(r1) 10:09:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") getrlimit(0x0, &(0x7f0000002ff2)) pkey_mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x5, 0xffffffffffffffff) select(0x40, &(0x7f0000000fc0), &(0x7f0000000180)={0x1}, &(0x7f0000002000), &(0x7f0000003000)={0x77359400}) 10:09:48 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0xe) sched_setparam(r0, &(0x7f0000000040)=0x7) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=@random={'security.', '/dev/null\x00'}) write$P9_RMKDIR(r3, &(0x7f0000000380)={0x14}, 0x14) dup2(r1, r2) 10:09:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000014c0)=ANY=[]) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='net/snmp\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000a00)={&(0x7f00000008c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r2, 0x800, 0x70bd2a, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x51}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x44}}, 0x81) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) signalfd(r0, &(0x7f00000004c0)={0x80}, 0x8) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'security.', 'keyringvmnet0\x00'}, &(0x7f0000000240)='GPLproc]trusted\x00', 0x1e3, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/179, 0xb3) 10:09:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x27, 0x1, 0x0, 0x0, {0xc}, [@typed={0xc, 0x5, @u64}]}, 0x20}}, 0x0) [ 125.991385] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 10:09:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000000280), 0x80000000000036a, 0x0) 10:09:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) write$binfmt_aout(r2, &(0x7f0000000280), 0x20) ioctl(r1, 0xc0984124, &(0x7f0000001f64)) 10:09:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") getrlimit(0x0, &(0x7f0000002ff2)) pkey_mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x5, 0xffffffffffffffff) select(0x40, &(0x7f0000000fc0), &(0x7f0000000180)={0x1}, &(0x7f0000002000), &(0x7f0000003000)={0x77359400}) [ 126.065880] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 10:09:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000014c0)=ANY=[]) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='net/snmp\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000a00)={&(0x7f00000008c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r2, 0x800, 0x70bd2a, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x51}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x44}}, 0x81) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) signalfd(r0, &(0x7f00000004c0)={0x80}, 0x8) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'security.', 'keyringvmnet0\x00'}, &(0x7f0000000240)='GPLproc]trusted\x00', 0x1e3, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/179, 0xb3) 10:09:48 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x4008af04, &(0x7f0000016c40)={'ip6gre0\x00'}) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)) close(r1) 10:09:48 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x4008af04, &(0x7f0000016c40)={'ip6gre0\x00'}) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)) close(r1) 10:09:48 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="24000000050607031dfffd946fa283fbffffffffffffff00062685680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 10:09:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x27, 0x1, 0x0, 0x0, {0xc}, [@typed={0xc, 0x5, @u64}]}, 0x20}}, 0x0) 10:09:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) write$binfmt_aout(r2, &(0x7f0000000280), 0x20) ioctl(r1, 0xc0984124, &(0x7f0000001f64)) 10:09:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f000000b000), &(0x7f000000dfe0)) dup3(r0, r1, 0x0) [ 126.233505] netlink: 16 bytes leftover after parsing attributes in process `syz-executor0'. 10:09:48 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 10:09:48 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x24, &(0x7f0000000280), 0x0) 10:09:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1000000002, 0x0) r2 = socket$unix(0x1, 0x10000000002, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x5411, &(0x7f00000000c0)) [ 126.294804] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 126.301765] netlink: 16 bytes leftover after parsing attributes in process `syz-executor0'. 10:09:48 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x4008af04, &(0x7f0000016c40)={'ip6gre0\x00'}) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)) close(r1) 10:09:48 executing program 3: pipe2(&(0x7f0000834000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000000a000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) vmsplice(r1, &(0x7f0000101000)=[{&(0x7f0000a68000)="f0", 0x1}], 0x1, 0x0) ppoll(&(0x7f0000fb8fb0)=[{r2}], 0x1, &(0x7f0000006000)={0x0, 0x989680}, &(0x7f0000008ff8), 0x8) 10:09:48 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x4008af04, &(0x7f0000016c40)={'ip6gre0\x00'}) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)) close(r1) 10:09:48 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="24000000050607031dfffd946fa283fbffffffffffffff00062685680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 10:09:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x27, 0x1, 0x0, 0x0, {0xc}, [@typed={0xc, 0x5, @u64}]}, 0x20}}, 0x0) 10:09:48 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) bind$packet(r0, &(0x7f0000000240)={0x11, 0x3}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd}, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") syz_emit_ethernet(0x315, &(0x7f00000000c0)={@link_local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2b, 0x0, 0x0, 0x0, @loopback, @remote}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000140)={0x0, 0xfffffffffffffffe, [0x0, 0x65d]}) 10:09:48 executing program 6: sendmmsg(0xffffffffffffffff, &(0x7f0000008e00)=[{{0x0, 0x0, &(0x7f0000008a40), 0x0, &(0x7f000000a080)=ANY=[@ANYBLOB="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"], 0x12d}}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="025cc80700145f8f764070") r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa000003fe, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 10:09:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f000000b000), &(0x7f000000dfe0)) dup3(r0, r1, 0x0) 10:09:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x100000000000048, &(0x7f0000000040)=0x6, 0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000), &(0x7f0000002880)=0x373) [ 126.459664] netlink: 16 bytes leftover after parsing attributes in process `syz-executor0'. [ 126.467488] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 126.490134] xprt_adjust_timeout: rq_timeout = 0! [ 126.504092] xprt_adjust_timeout: rq_timeout = 0! 10:09:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x27, 0x1, 0x0, 0x0, {0xc}, [@typed={0xc, 0x5, @u64}]}, 0x20}}, 0x0) 10:09:48 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x4008af04, &(0x7f0000016c40)={'ip6gre0\x00'}) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)) close(r1) 10:09:48 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) bind$packet(r0, &(0x7f0000000240)={0x11, 0x3}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd}, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") syz_emit_ethernet(0x315, &(0x7f00000000c0)={@link_local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2b, 0x0, 0x0, 0x0, @loopback, @remote}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000140)={0x0, 0xfffffffffffffffe, [0x0, 0x65d]}) 10:09:48 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@nouser_xattr='nouser_xattr'}, {@disable_ext_identify='disable_ext_identify'}, {@acl='acl'}, {@nodiscard='nodiscard'}]}) 10:09:48 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="24000000050607031dfffd946fa283fbffffffffffffff00062685680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 10:09:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f000000b000), &(0x7f000000dfe0)) dup3(r0, r1, 0x0) 10:09:49 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x4008af04, &(0x7f0000016c40)={'ip6gre0\x00'}) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)) close(r1) [ 126.610082] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 126.626726] attempt to access beyond end of device [ 126.631793] loop6: rw=12288, want=8200, limit=20 [ 126.649612] kasan: CONFIG_KASAN_INLINE enabled 10:09:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084502, &(0x7f0000000000)=""/202) 10:09:49 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) bind$packet(r0, &(0x7f0000000240)={0x11, 0x3}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd}, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") syz_emit_ethernet(0x315, &(0x7f00000000c0)={@link_local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2b, 0x0, 0x0, 0x0, @loopback, @remote}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000140)={0x0, 0xfffffffffffffffe, [0x0, 0x65d]}) [ 126.654392] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 126.661796] general protection fault: 0000 [#1] SMP KASAN [ 126.667352] CPU: 1 PID: 7001 Comm: syz-executor6 Not tainted 4.18.0-rc7-next-20180801+ #29 [ 126.675758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 126.685133] RIP: 0010:validate_checkpoint+0x66d/0xec0 [ 126.690336] Code: e8 58 05 7f fe 4c 8d 6b 80 4d 8d 74 24 08 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 c6 04 02 00 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 f4 06 00 00 4c 89 ea 4d 8b 7c 24 08 48 b8 00 00 10:09:49 executing program 7: syz_emit_ethernet(0x66, &(0x7f0000000340)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x3, 0x0, 0x5]}, @mcast2}}}}}}}, 0x0) [ 126.709250] RSP: 0018:ffff880199996be8 EFLAGS: 00010246 [ 126.714639] RAX: dffffc0000000000 RBX: ffff880199996f30 RCX: ffffc90007e4c000 [ 126.721915] RDX: 0000000000000000 RSI: ffffffff82fd9658 RDI: 0000000000000005 [ 126.729198] RBP: ffff880199996f58 R08: ffff88019b0505c0 R09: fffff94000dd0cf6 [ 126.732111] netlink: 16 bytes leftover after parsing attributes in process `syz-executor0'. [ 126.737313] R10: fffff94000dd0cf6 R11: ffffea0006e867b7 R12: fffffffffffffffb [ 126.737324] R13: ffff880199996eb0 R14: 0000000000000003 R15: ffff8801996d07c0 10:09:49 executing program 7: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/115, &(0x7f0000005c00)=""/156, &(0x7f0000005b40)=""/185}) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 126.737337] FS: 00007fa806fa8700(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 [ 126.737347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.737356] CR2: 000000000153dfd0 CR3: 00000001bf029000 CR4: 00000000001406e0 [ 126.737367] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 126.737375] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 126.737380] Call Trace: [ 126.737405] ? get_checkpoint_version+0x620/0x620 [ 126.737424] ? save_stack+0xa9/0xd0 [ 126.807373] ? save_stack+0x43/0xd0 [ 126.811032] ? kasan_kmalloc+0xc4/0xe0 [ 126.814908] ? __kmalloc+0x14e/0x760 [ 126.818610] ? f2fs_get_valid_checkpoint+0x390/0x1ec0 [ 126.823799] ? f2fs_fill_super+0x2d42/0x8110 [ 126.828194] ? mount_bdev+0x314/0x3e0 [ 126.832006] ? f2fs_mount+0x3c/0x50 [ 126.835621] ? vfs_get_tree+0x1cb/0x5c0 [ 126.839581] ? do_mount+0x6f2/0x1e20 [ 126.843283] ? ksys_mount+0x12d/0x140 [ 126.847070] ? __x64_sys_mount+0xbe/0x150 [ 126.851205] ? do_syscall_64+0x1b9/0x820 [ 126.855259] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 126.860621] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 126.865628] ? map_id_range_down+0x1ee/0x430 [ 126.870033] ? lock_acquire+0x1e4/0x540 [ 126.874009] ? cache_grow_end.part.37+0x95/0x170 [ 126.878768] ? lock_downgrade+0x8f0/0x8f0 [ 126.882913] ? kasan_check_read+0x11/0x20 [ 126.887054] ? do_raw_spin_unlock+0xa7/0x2f0 [ 126.891450] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 126.896023] ? kasan_check_write+0x14/0x20 [ 126.900256] ? do_raw_spin_lock+0xc1/0x200 [ 126.904481] ? kasan_unpoison_shadow+0x35/0x50 [ 126.909049] ? kasan_kmalloc+0xc4/0xe0 [ 126.912926] ? __kmalloc+0x315/0x760 [ 126.916633] ? f2fs_get_valid_checkpoint+0x390/0x1ec0 [ 126.921813] f2fs_get_valid_checkpoint+0x436/0x1ec0 [ 126.926825] ? _raw_spin_unlock+0x22/0x30 [ 126.930961] ? f2fs_recover_orphan_inodes+0x1180/0x1180 [ 126.936314] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 126.941852] ? f2fs_iget+0x4f5/0x4fa0 [ 126.945656] ? __debug_object_init+0x581/0x12e0 [ 126.950322] ? lock_downgrade+0x8f0/0x8f0 [ 126.954457] ? lock_downgrade+0x8f0/0x8f0 [ 126.958606] ? kasan_check_read+0x11/0x20 [ 126.962742] ? f2fs_inode_chksum_set+0xf0/0xf0 [ 126.967311] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 126.971884] ? kasan_check_write+0x14/0x20 [ 126.976109] ? trace_hardirqs_on+0xd/0x10 [ 126.980246] ? __debug_object_init+0x581/0x12e0 [ 126.984917] ? lock_acquire+0x1e4/0x540 [ 126.988877] ? debug_object_activate+0x41a/0x690 [ 126.993618] ? lock_downgrade+0x8f0/0x8f0 [ 126.997753] ? save_stack+0x43/0xd0 [ 127.001370] ? kasan_check_read+0x11/0x20 [ 127.005513] ? do_raw_spin_unlock+0xa7/0x2f0 [ 127.009911] ? lock_acquire+0x1e4/0x540 [ 127.013872] ? __percpu_counter_init+0x2ad/0x370 [ 127.018619] ? lock_downgrade+0x8f0/0x8f0 [ 127.022758] ? kasan_check_read+0x11/0x20 [ 127.026893] ? do_raw_spin_unlock+0xa7/0x2f0 [ 127.031291] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 127.035958] ? kasan_check_write+0x14/0x20 [ 127.040181] ? do_raw_spin_lock+0xc1/0x200 [ 127.044409] ? trace_hardirqs_on+0xd/0x10 [ 127.048558] ? __percpu_counter_init+0x2b2/0x370 [ 127.053302] ? percpu_counter_cpu_dead+0x1c0/0x1c0 [ 127.058221] ? __init_waitqueue_head+0x9e/0x150 [ 127.062876] ? init_wait_entry+0x1c0/0x1c0 [ 127.067107] f2fs_fill_super+0x2d42/0x8110 [ 127.071331] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 127.076357] ? f2fs_commit_super+0x400/0x400 [ 127.080767] ? prealloc_shrinker+0x231/0x4a0 [ 127.085161] ? __init_waitqueue_head+0x9e/0x150 [ 127.089819] ? check_same_owner+0x340/0x340 [ 127.094145] ? __lockdep_init_map+0x105/0x590 [ 127.098640] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 127.103655] ? widen_string+0xe0/0x2e0 [ 127.107532] ? format_decode+0xaf0/0xaf0 [ 127.111603] ? string+0x225/0x2d0 [ 127.115043] ? widen_string+0x2e0/0x2e0 [ 127.119009] ? register_shrinker_prepared+0x15b/0x1c0 [ 127.124195] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 127.129722] ? bdev_name.isra.8+0x1a1/0x1f0 [ 127.134035] ? pointer+0x157/0x990 [ 127.137567] ? netdev_bits+0xb0/0xb0 [ 127.141264] ? format_decode+0x1b1/0xaf0 [ 127.145315] ? set_precision+0xe0/0xe0 [ 127.149194] ? do_raw_spin_unlock+0xa7/0x2f0 [ 127.153593] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 127.159116] ? vsnprintf+0x20d/0x1b60 [ 127.162915] ? vsprintf+0x40/0x40 [ 127.166356] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 127.171377] ? set_blocksize+0x2c1/0x340 [ 127.175439] mount_bdev+0x314/0x3e0 [ 127.179050] ? mount_bdev+0x314/0x3e0 [ 127.182840] ? f2fs_commit_super+0x400/0x400 [ 127.187238] f2fs_mount+0x3c/0x50 [ 127.190678] ? kill_f2fs_super+0x330/0x330 [ 127.194915] legacy_get_tree+0x131/0x460 [ 127.198969] vfs_get_tree+0x1cb/0x5c0 [ 127.202757] ? vfs_set_fs_source+0x12c/0x180 [ 127.207155] do_mount+0x6f2/0x1e20 [ 127.210683] ? check_same_owner+0x340/0x340 [ 127.214992] ? lock_release+0xa30/0xa30 [ 127.218959] ? copy_mount_string+0x40/0x40 [ 127.223176] ? kasan_kmalloc+0xc4/0xe0 [ 127.227057] ? kmem_cache_alloc_trace+0x318/0x780 [ 127.231887] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 127.237423] ? _copy_from_user+0xdf/0x150 [ 127.241574] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 127.247099] ? copy_mount_options+0x285/0x380 [ 127.251598] ksys_mount+0x12d/0x140 [ 127.255216] __x64_sys_mount+0xbe/0x150 [ 127.259177] do_syscall_64+0x1b9/0x820 [ 127.263055] ? finish_task_switch+0x1d3/0x870 [ 127.267545] ? syscall_return_slowpath+0x5e0/0x5e0 [ 127.272473] ? syscall_return_slowpath+0x31d/0x5e0 [ 127.277404] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 127.282421] ? __switch_to_asm+0x34/0x70 [ 127.286468] ? __switch_to_asm+0x34/0x70 [ 127.290525] ? __switch_to_asm+0x40/0x70 [ 127.294572] ? __switch_to_asm+0x34/0x70 [ 127.298618] ? __switch_to_asm+0x40/0x70 [ 127.302819] ? __switch_to_asm+0x34/0x70 [ 127.306864] ? __switch_to_asm+0x40/0x70 [ 127.310911] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 127.315744] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 127.320917] RIP: 0033:0x45943a [ 127.324110] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 bd 8a fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 9a 8a fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 127.343012] RSP: 002b:00007fa806fa7a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 127.350709] RAX: ffffffffffffffda RBX: 00007fa806fa7b30 RCX: 000000000045943a [ 127.357961] RDX: 00007fa806fa7ad0 RSI: 0000000020000100 RDI: 00007fa806fa7af0 [ 127.365216] RBP: 0000000020000100 R08: 00007fa806fa7b30 R09: 00007fa806fa7ad0 [ 127.372471] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000013 [ 127.379723] R13: 0000000000000000 R14: 00000000004c8ea0 R15: 0000000000000000 [ 127.386993] Modules linked in: [ 127.390182] Dumping ftrace buffer: [ 127.393703] (ftrace buffer empty) [ 127.399369] ---[ end trace 3f31fdc6f3122958 ]--- [ 127.404184] RIP: 0010:validate_checkpoint+0x66d/0xec0 [ 127.409420] Code: e8 58 05 7f fe 4c 8d 6b 80 4d 8d 74 24 08 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 c6 04 02 00 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 f4 06 00 00 4c 89 ea 4d 8b 7c 24 08 48 b8 00 00 [ 127.428331] RSP: 0018:ffff880199996be8 EFLAGS: 00010246 [ 127.433734] RAX: dffffc0000000000 RBX: ffff880199996f30 RCX: ffffc90007e4c000 [ 127.441038] RDX: 0000000000000000 RSI: ffffffff82fd9658 RDI: 0000000000000005 [ 127.448334] RBP: ffff880199996f58 R08: ffff88019b0505c0 R09: fffff94000dd0cf6 [ 127.455638] R10: fffff94000dd0cf6 R11: ffffea0006e867b7 R12: fffffffffffffffb [ 127.462927] R13: ffff880199996eb0 R14: 0000000000000003 R15: ffff8801996d07c0 [ 127.470225] FS: 00007fa806fa8700(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 [ 127.478476] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.484389] CR2: 000000000153dfd0 CR3: 00000001bf029000 CR4: 00000000001406e0 [ 127.491687] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.498988] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.506282] Kernel panic - not syncing: Fatal exception [ 127.512251] Dumping ftrace buffer: [ 127.515787] (ftrace buffer empty) [ 127.519475] Kernel Offset: disabled [ 127.523089] Rebooting in 86400 seconds..