[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 38.002858] audit: type=1800 audit(1545720457.092:25): pid=7798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 38.024119] audit: type=1800 audit(1545720457.092:26): pid=7798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 38.078164] audit: type=1800 audit(1545720457.102:27): pid=7798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.213' (ECDSA) to the list of known hosts. 2018/12/25 06:47:47 fuzzer started 2018/12/25 06:47:49 dialing manager at 10.128.0.26:40963 2018/12/25 06:47:49 syscalls: 1 2018/12/25 06:47:49 code coverage: enabled 2018/12/25 06:47:49 comparison tracing: enabled 2018/12/25 06:47:49 setuid sandbox: enabled 2018/12/25 06:47:49 namespace sandbox: enabled 2018/12/25 06:47:49 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/25 06:47:49 fault injection: enabled 2018/12/25 06:47:49 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/25 06:47:49 net packet injection: enabled 2018/12/25 06:47:49 net device setup: enabled 06:50:32 executing program 0: 06:50:32 executing program 1: 06:50:33 executing program 2: syzkaller login: [ 214.089846] IPVS: ftp: loaded support on port[0] = 21 06:50:33 executing program 3: [ 214.475474] IPVS: ftp: loaded support on port[0] = 21 [ 214.949078] IPVS: ftp: loaded support on port[0] = 21 06:50:34 executing program 4: [ 215.504886] IPVS: ftp: loaded support on port[0] = 21 06:50:34 executing program 5: [ 216.204865] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.222880] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.231984] device bridge_slave_0 entered promiscuous mode [ 216.279054] IPVS: ftp: loaded support on port[0] = 21 [ 216.334440] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.341309] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.348811] device bridge_slave_1 entered promiscuous mode [ 216.460135] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 216.594163] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 216.710993] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.718691] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.750560] device bridge_slave_0 entered promiscuous mode [ 216.898043] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.905700] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.919241] device bridge_slave_1 entered promiscuous mode [ 216.949956] IPVS: ftp: loaded support on port[0] = 21 [ 217.035126] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 217.065352] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 217.142425] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 217.175254] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 217.217284] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.249341] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.269273] device bridge_slave_0 entered promiscuous mode [ 217.413105] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.419593] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.436352] device bridge_slave_1 entered promiscuous mode [ 217.553352] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 217.618152] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 217.666135] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 217.771901] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 217.817017] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 217.842271] team0: Port device team_slave_0 added [ 217.922922] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.930850] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.946530] device bridge_slave_0 entered promiscuous mode [ 217.984409] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 217.997454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.032818] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 218.040246] team0: Port device team_slave_1 added [ 218.110001] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.121582] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 218.134542] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.151031] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.161087] device bridge_slave_1 entered promiscuous mode [ 218.184642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.212711] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 218.230910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.239285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.256621] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 218.278605] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 218.397274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 218.421559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.487911] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 218.504604] team0: Port device team_slave_0 added [ 218.529003] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 218.557042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.568746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.643939] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 218.663738] team0: Port device team_slave_1 added [ 218.671526] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 218.685866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.700265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.745829] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.760631] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.768969] device bridge_slave_0 entered promiscuous mode [ 218.819947] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 218.845946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.861656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.885979] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.901105] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.908566] device bridge_slave_1 entered promiscuous mode [ 218.943821] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 218.961958] team0: Port device team_slave_0 added [ 218.971944] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.982799] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 219.001835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.009825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.061668] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 219.078659] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 219.101843] team0: Port device team_slave_1 added [ 219.141328] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 219.149052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.157720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.187606] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 219.207137] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 219.290759] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 219.299281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.309674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.335470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.353496] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.359884] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.371801] device bridge_slave_0 entered promiscuous mode [ 219.415568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.487477] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.510774] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.518391] device bridge_slave_1 entered promiscuous mode [ 219.562082] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 219.569789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.581861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.632915] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 219.681217] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 219.688426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.701027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.741628] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 219.758832] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 219.891686] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 220.006279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 220.026068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.041010] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 220.051416] team0: Port device team_slave_0 added [ 220.166450] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 220.178617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.203750] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 220.233697] team0: Port device team_slave_1 added [ 220.243569] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 220.258220] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.264740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.271817] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.278188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.295372] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 220.315774] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 220.390771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.546497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.579331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.699175] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 220.706888] team0: Port device team_slave_0 added [ 220.723472] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 220.751922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.771297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.784619] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.791020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.797705] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.804131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.820211] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 220.846355] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 220.860978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.873410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.914618] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 220.924670] team0: Port device team_slave_1 added [ 220.994520] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 221.020119] team0: Port device team_slave_0 added [ 221.074199] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 221.091024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.098995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.154932] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 221.191343] team0: Port device team_slave_1 added [ 221.214253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 221.233343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.251653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.277289] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.283816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.290528] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.296924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.323510] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 221.349668] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 221.399697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.421116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.429040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.483033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.521968] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 221.529071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.538967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.572234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.584548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.618167] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 221.641320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.651609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.761621] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 221.768799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.791203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.362307] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.368735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.375484] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.381891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.409630] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 222.581118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.057854] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.064321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.071047] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.077420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.094760] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 223.443655] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.450069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.456793] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.463202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.473354] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 223.590562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.598046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.914632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.195288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.379513] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 226.549896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.702371] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 226.871461] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 226.877644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.888822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.999914] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 227.292710] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 227.298916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.307236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.371373] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.451236] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 227.457545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.465301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.741937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.783553] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.875375] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.300170] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 228.461219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.483921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.731725] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 228.737917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.751582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.958503] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 229.030005] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 229.252295] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.426702] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 229.441478] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 229.447738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.455521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.481809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.501081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.895253] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.935850] 8021q: adding VLAN 0 to HW filter on device team0 06:50:49 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000001c0)="24000000190001f000800036173155640adfa9b0ff6e1837ad8ac50008000100b7000600", 0x24) 06:50:49 executing program 0: 06:50:49 executing program 0: 06:50:49 executing program 1: 06:50:49 executing program 0: 06:50:49 executing program 1: 06:50:50 executing program 2: 06:50:50 executing program 0: 06:50:50 executing program 1: 06:50:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000540)=0x9d) dup2(r0, r2) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 06:50:51 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0xffffffffffffd36, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x402, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_INPUT2(r0, &(0x7f0000000100)={0xc, 0xb1, "ae1500781168dd1a9e8ef2b5d460c642edb8082eac8b860199e275e85c0aa5c454f5fa32b1f47e7407f9db41824c042d83c891d32d5616d1b881f768fc2c889672ccfb5b46b9f1c782b6aa48bd526aaef5dd3ab86fb34891804026924123c1d695c1db6fae58862cfe3748db9e4bca662ddfcbc0348633ceb86165a3b474efd5781a68024637e28eb4c49e32bc076a97d73f2c8ac6759338a40a5f88f037facf666befd41a1d7c97d90481c73de5a27d5b"}, 0xb7) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r1, &(0x7f0000000300), 0x271, 0x10400004) 06:50:51 executing program 2: pipe(&(0x7f0000000140)) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0) 06:50:51 executing program 1: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40480923, 0x0) 06:50:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x11100, 0x10) 06:50:51 executing program 3: syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_buf(r1, 0x6, 0x17, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000340), 0x0, 0xb}}, 0x20) 06:50:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="62006e4a5db5332fd11fcb949dbe9f2eb7114c202ca9fe94397799b0d544969b69f1d999da7c8f1fe920350eb00f908dfe793a762a0f"], 0x1) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000400)=0x12) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000440)={0x5, {{0xa, 0x4e20, 0x0, @local, 0x7f}}}, 0x88) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0xffffffffffffff18) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0), 0xffffffffffffff87) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000540)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x80, 0x12) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000380), &(0x7f00000003c0)=0x2) waitid(0x1, 0x0, &(0x7f00000000c0), 0x3, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) ppoll(&(0x7f0000000200)=[{r1, 0x4400}, {0xffffffffffffffff, 0x1008}, {r1, 0x420}], 0x3, &(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f0000000280), 0x8) sendmmsg(r0, &(0x7f0000007e00), 0x4000000000000f4, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000340), 0x4) [ 232.153945] hrtimer: interrupt took 31145 ns 06:50:51 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x4, 0x9, 0x1, 0xffff, 0x3, 0x800}) sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "7042f4d03acd1115"}}, 0x48}}, 0x0) 06:50:51 executing program 0: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x201, 0x10800) close(r0) 06:50:51 executing program 2: r0 = memfd_create(&(0x7f0000000040)='#em1#+\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0], 0x8) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) clone(0x41ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x210040, 0x0) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x800000000000001, &(0x7f0000000000)={0x0, 0xfffffffffffffe33}) inotify_init1(0x80000) 06:50:51 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000200)) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 06:50:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2840) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x401, 0x84000) sendmmsg(r2, &(0x7f0000000780)=[{{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x4, 0x0, 0x4, {0xa, 0x4e20, 0x800, @local}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)="3253ae05b50eb8e52a50f66d06612fad198c28b968b189ffb4f985b2227e24fd289a2be8b0bc467e42", 0x29}, {&(0x7f0000000180)="36e29083a63b20a275a5ec79debfc9a850840956335aa10b98a49036b25b365dc83e96c8fbed0546d28dbb8bee3043e8edea69317fdb4b34ae8dc51e1bc7e8bff2aef36dbfc015de1f64ab57788bd738d4ab53318cbd03ed5f3ce536e297d7676d0b5b5869d7bd32d3d7c2793ca0421b95ec9b24de810f29c42c59411e4a4bb7670f13b08f9b0d4d409a2c2d98c95fa303ed66826c01156facc160baa006161a54ad1db6c9cc140346fced8e14cb5cc1123b5bcc41787aef876cce2066a5821a502a143380c6e35e2f4469e6a51284bf862f9b4f87868c9b251bc1d0434e1736ed1fa08d9afef7068dab57fa353a9c2f3f", 0xf1}, {&(0x7f0000000280)="950439b5259ce368303de71c6b0c4bba867d25072aa3536c919cd49b4aaed930fc12584e1ffbd1ec54086db21bff3c657e08ddff4e9cf8a80d56c6677f378fce9d1bb78009a91c4310d2101738f110ed5bf5607fb6073c9252197cbfce77d9a7f80b5f6fd81ad77593dd892ca1be2887600beccf10afd483a2c8814f34a95029977dc060f6b3a22de25c449ab2c3e98f6b75ef", 0x93}, {&(0x7f0000000340)="03c1e851a38b68c14aba9ef520cff68ca21cb0138b069170b4159b3ec61436e795614d1a4c5b4b8b512d54d96e9d864233bcdc188819c2210a741a71bc96b4f26476ef079c7bf533bf7c407582d1969c6c84db00c48bad6ca54098f21769c322d630e3a309d2bb80956242c597301940ae321f4eb43267ee77128ed1bf4c4c360ea818d410870d67c30d59530dcc9cab750add613f747532edd6943fb3308f3e974a3e7eef0030f8286fb82d0d930d078122f903c3ccc8afe5a85bc6d4203293a8d13c958533965dee398886dd103cfd857f56900bb3", 0xd6}], 0x4, &(0x7f0000000480)=[{0x70, 0x13b, 0x9, "85d9b1ab155be102168574a0e586ded9254a8eca714b169dc392edb13f915e264431841cf5696bb6aa9d7811f41e89d11195395b2f0a7ab4d33f34a1e31ba8884c5fb2e5a140d39e2b25511b1e77f92482b967a6e4ba05120b417549bb"}, {0x100, 0x0, 0x0, "f62a9b80c20e3482c03bbe038a08e44e174ec2c26bc2ca054e3aa4c77914ee1241ae62c32a23dd7736f9bd5e80d9365e2f57c9dd2c06cec3fe7b0fc66dc2bbb88b08c146b81b56754d9bee61b2229b43d33cb13c1005921b1d6220c5a41081755d20dbd84c510edb9855b5dd20d086c36db0349b3f6401b75d953302c228427bad947bf9bd16fbd90f24b2f03fe11775b6ad8d08b48f6a161b2a2c55617b8ff8923b67ccd0e6b1e8bea10fa1d9ed109463bf0164216c49f2dca540a4821e980f66ce1ecd3b0af54f646e3e7d22950a505fcb3661a4b5a447380691e00d13032815da23ac590b1677f9"}, {0x50, 0x0, 0x1ff, "d5259fc03f7b74b663b7d07b38c57201f518769ecca2b9e6e1f0edb15fe514e757c6d01dd464c627c5d5c38243371db94e0edf7b19d94136372e2a"}, {0x40, 0x3a, 0x6, "92835509e9d2068b389ef54f2060c3abdc8694d2e87836d52a479e76391d92467ce916e495719edbb856"}, {0x100, 0x0, 0x0, "cd314a511a6775899efb2281f27ea128715db533c88905e04ddbed96200511c89af1393bd04c6ce0c830cbbe14ad20abc05802ee71c8c3792ab3299a47785a9fa1874e522338456bf70b6730f067ada2409a015cc9c171520e6ca38e42f6a072095367c7f4d63bee5160e4db32e5e9a1d4da11ce92d63cdc725f2a34fad743b9333f0893e641c3ae3871edc14bd47f0b669933364e046245e2dcbbac7d9a65c60380d503e719fc585fb334aad4c410d43d03d759586809828df84be459efe5f9ff82f4df3d371776515a322a88036539f41bd96ffd297c2d13b4c9377f4f143dbcafcd8d0b9d43df6a98dbd021"}], 0x300}, 0x10000}], 0x1, 0x1) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x8) 06:50:51 executing program 3: setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="30cab6d55b56e001862ed212259f87ebe17e0027f469f7bb2c7a2ef0a8ffee9f4895b7fb0a8a2861362ab05fe8"], &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x100000000) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='ppp0eth1cgroupeth0\\proc&\\cpuset^)em1:*\'+cpuset\\\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000004c0)={{0xa, 0x7, 0x10000, 0x8, 'syz0\x00', 0x2}, 0x2, 0x404, 0x6, r1, 0x1, 0x0, 'syz1\x00', &(0x7f0000000100)=['*self%vboxnet0\x00'], 0xf, [], [0x7, 0x9, 0xffffffffffffff81, 0x3]}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="9d19eaf8160d3ba7", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="b8099ed885948b8a259ccd32fd3b46b26661677bcc9e69a57e712a09c83cc88059b2bcd080441fa2c7979dcf39dd97d7326a8b26548ebd10bf8e6a284323465a345023c31efb5dcce5668b7c6c84db858a335feb0688961958f9825252a68a8e69c23a11b67feb0c317305105e6f506ce33a4ca1dfceb2fc3c8555a2ebbb03adec684e4f3b202424f26d1b"], @ANYBLOB="000601040180b705080000006db098c86056a60658bec1f236533a1f8f0000dc20f7691fc81a2f55d826922602f9d1a10285e55a4c6be398"]) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400201) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) [ 232.601147] 9pnet_virtio: no channels available for device 0ʶÕ[Và†.Ò%Ÿ‡ëá~ [ 232.663608] 9pnet_virtio: no channels available for device 0ʶÕ[Và†.Ò%Ÿ‡ëá~ [ 233.172602] ptrace attach of "/root/syz-executor2"[9644] was attempted by "/root/syz-executor2"[9671] 06:50:52 executing program 4: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x8912, &(0x7f00000001c0)="0a4c000240316295717070") r2 = socket$inet(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip_vti0\x00', 0x10) sendto$inet(r2, &(0x7f0000000040), 0xebff, 0x0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::,0\nnull.:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f00000002c0)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000040000000000000000000000e00000004000000d00500000000000098020000980200000000000000000000000500000005000000050000000500000005000004000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c80010010000000000000000000000000000000000000000000000004800544545000000000000000000000000000000000000000000000000000001ac1414bb00000000000000000000000065716c000000000000000000000000007fffffffffffffff00000000000000000000ffffe00000020000000000000000000000000000000100000000ffffffff000000ffffffff00ffffff00ffffff00000000ff000000ff736974300000000000000000000000006970365f767469300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000002e000802000000000000000000000000000000004001880100000000000000000000000000000000000000000000000048006473740000000000000000000000000000000000000000000000000000000800000007018000ffff1207001002001f0001000800ffff030000040500330009000400080007003000616800000000000000000000000000000000000000000000000000000000000004d5000004d204000000ff03000048004c454400000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000001000100f9fffffffffffffffe8000000000000000000000000000bbfe8000000000000000000000000000aaff0000ffffffffffff0000ffffffffffffffffffff000000ffffff00ffffff006966623000000000000000000000000076657468315f746f5f626f6e64000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000006200ff06000000000000000000000000000000004001680200000000000000000000000000000000000000000000000038006f776e657200000000000000000000000000000000000000000000000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="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"], 0x630) 06:50:52 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) connect$inet(r2, &(0x7f0000000180)={0x2, 0x8000000000004e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pppoe={0x18, 0x0, {0x0, @remote, 'ip6gre0\x00'}}, 0x326, &(0x7f0000003b80), 0x0, &(0x7f0000003bc0)}}], 0x22b, 0x0) close(r3) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040)=0x8219, 0x4) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) close(r2) 06:50:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x100, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xb0c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0xd, &(0x7f0000bfcffc), &(0x7f0000000040)=0x4) 06:50:52 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0xffffffff80000000, 0x7f7f777b, 0x1, 0x5, 0x3, @stepwise={{0x2, 0x8723}, {0xffffffff, 0x4}, {0x101, 0xffffffffffffff59}}}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)={0x0, 0x9, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "532e1321"}, 0x0, 0x0, @planes=&(0x7f0000000100), 0x4}) 06:50:52 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x80, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x60440) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1b3d7796e6711692}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f00000001c0)={[0x100000, 0x10000, 0x2000, 0x4], 0x226caaf4, 0x28, 0x7}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {}, 0x0, {0x2, 0x0, @empty}}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000180)=0x7) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x6, 0x9, 0x4, 0x23, 0x100000001}, 0x14) 06:50:52 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}}, 0x5c) ioctl$int_out(r0, 0xc0984124, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) [ 233.404123] Unknown ioctl 9221 06:50:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x3f, 0x2) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000340)={0x2, 0x0, [{0x40000001, 0x6, 0x3, 0x9, 0x10000}, {0xc0000005, 0x3, 0xfffffffffffffffe, 0x100, 0x3}]}) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000480)={0x79}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f00000002c0)={0x3, &(0x7f0000000080)=""/6, &(0x7f0000000240)=[{0xff, 0x60, 0x7, &(0x7f00000000c0)=""/96}, {0x0, 0x71, 0x3, &(0x7f0000000140)=""/113}, {0x0, 0x62, 0x8001, &(0x7f00000001c0)=""/98}]}) [ 233.427412] Unknown ioctl 9221 06:50:52 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) pause() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x3, 0x3, 0x80000000, 0xeb, 0x7, 0x400, 0x5, 0x1, 0x9, 0x100, 0x8}, 0xb) 06:50:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = dup3(r1, r0, 0x0) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)={'syz1', "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"}, 0x1004) 06:50:52 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x101000, 0x0) accept$alg(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000200)="b8010000000f01d965660faeb603000000b8358556370f23c80f21f8350400d0000f23f8640fc7ae02000000ea00600000fa00c4c18566220f20d835080000000f22d8360f01cf66baf80cb83bd30c85ef66bafc0cb06aee0fc7b49f0a000000", 0x60}], 0x1, 0x5, 0x0, 0x0) fanotify_init(0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/27) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x27, 0x0) syz_open_dev$mouse(0x0, 0x6, 0x100) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0xffff, 0x40000) setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000300)='system_u:object_r:modules_dep_t:s0\x00', 0x23, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8001, &(0x7f0000000340)=0x7, 0x4, 0x1) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, 0x0) socket$inet_udp(0x2, 0x2, 0x0) semget$private(0x0, 0x3, 0x400) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 233.447928] libceph: resolve '0 [ 233.447928] null.' (ret=-3): failed [ 233.460162] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 233.481944] libceph: parse_ips bad ip '::,0 [ 233.481944] null.' [ 233.551379] libceph: resolve '0 [ 233.551379] null.' (ret=-3): failed 06:50:52 executing program 3: clone(0x900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20001, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) [ 233.595808] libceph: parse_ips bad ip '::,0 [ 233.595808] null.' 06:50:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x0, r2, 0x1c, 0x0, @in6={0xa, 0x4e21, 0xfffffffffffff800, @empty, 0x1}}}, 0xa0) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) setfsuid(r3) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x800, 0x0) ioctl$TIOCSBRK(r4, 0x5427) sendto$inet(r0, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000040), 0x10) write$binfmt_elf64(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000026c0)=[{{0x0, 0x1b, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/110, 0x6e}}, {{&(0x7f0000001d80)=@sco, 0x80, &(0x7f0000002280), 0x97, &(0x7f0000002340)=""/114, 0x223}}], 0x2, 0x0, &(0x7f0000002840)={0x0, r5+10000000}) 06:50:52 executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000180)="f236660f1b130f3366b800b0945a0f23d00f21f86635200000090f23f866b9800000c00f326635004000000f30bad104ec0f07127508b82f000f00d0660f7de46766c74424001bac4c656766c7442402d2aa9fc56766c744240600000000670f011c24", 0x63}], 0x1, 0x0, &(0x7f0000000600), 0x0) r0 = syz_open_dev$midi(&(0x7f0000000600)='/dev/midi#\x00', 0x4, 0x40000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000640)) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r1 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0x6, &(0x7f0000000280)="b0f659f78f") ioctl$DRM_IOCTL_RM_MAP(r0, 0x4018641b, &(0x7f0000000680)={&(0x7f0000ff5000/0xb000)=nil, 0x1, 0xfffffffffffffffe, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x2}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000340)={0x7, 0x0, 0x0, 0x0, 0x45}) r2 = syz_open_dev$sndpcmc(&(0x7f00000006c0)='/dev/snd/pcmC#D#c\x00', 0xe0, 0x40000) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000540)={0x2, 0x0, 0x2, 0xffffffff}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000880)={r3, 0x1}) sendmsg$unix(r2, &(0x7f00000005c0)={&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000c40)="a8f37c25f0c988d217ba648c55f5b60c878a407c47e77e78da69732d8e9b442d8cf745b56f53f2d818afd863b1875d464b6794be51fd30678f1bfd91869beaaa58a0ffdb1c3638f854f524d20dca619e8a363942ceaabccc5d84027b9e6f2e50796c2db931db529f02558f39f5575dd9d053e27e4df3fb1601c7c2b82c96a4830be817cb6f2e7c24b3e9bd56aa7708cfb44faa571328b53c9f36199eab51d8df2dc6a9e9c9e5207ed3cbbbf23af70949073abaa24749dab707cbf3977446a6d336cb6df2a1de6724e68a094fcb69163d02e314a39227b4106c7dbfe6", 0xdc}], 0x1}, 0x80) r4 = syz_open_dev$admmidi(&(0x7f0000000740)='/dev/admmidi#\x00', 0x81fffffffffffd, 0x480010) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000440)={0x0, @rand_addr, @remote}, &(0x7f0000000200)=0xffffffffffffff6a) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000900)={0x2, 0x5, 0x79, 0x102}) bind$can_raw(r4, &(0x7f0000000700), 0xd) pipe(0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000580)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000000007ff}, 0x1, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="72813984a44dcaa36af04111ea100128bd7073bcf966f2176b9fccb8c1ecb0795471910c3ac2bd2c510fcfa179462296e843bb8681b83cb9871f28faee18e5fcacf9568d1f887fe3e645d455b76ca8dc137ec725139e152c67434e3a3c68457087a3dad8d0f9ad813219cefb14876dd08e65aab2b53deaeee7b6d8b5be29a5e3"], 0x1}, 0x1, 0x0, 0x0, 0x4005}, 0xc000) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000780)={{0xa, 0x4e24, 0x80, @dev={0xfe, 0x80, [], 0x1d}, 0x2}, {0xa, 0x4e21, 0x8000, @ipv4={[], [], @multicast1}, 0x80000000}, 0x2, [0x1, 0x5, 0xfffffffffffffffc, 0x0, 0x0, 0x1]}, 0x5c) readv(r6, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r6, 0x80000040045010, &(0x7f0000000100)) ioctl$KVM_SMI(r5, 0xaeb7) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-control\x00', 0x109002, 0x0) clone(0x2006001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) ioctl$int_in(r6, 0x80000040045010, &(0x7f0000000080)) read$eventfd(r6, &(0x7f0000000180), 0x8) 06:50:52 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="0a5c1f023c126285719070") getpeername$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000002c0)={0x8, 0x1, 0x4, 0x0, 0x0, [{r1, 0x0, 0x1}, {r4, 0x0, 0x7f}, {r1, 0x0, 0x6}, {r2, 0x0, 0x673f}]}) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000004c0)={0x0, 0x1000}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000006c0)={r5, 0xfff}, &(0x7f0000000700)=0x8) accept$packet(r1, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001c00)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000001c40)=r6) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000600)="b381be3dae83483eabf86d2f6c53448531fb202c3b70c16b891aa7bec5b3d5d14c27e73be26e9ea49e01f14a13fe996b09b950dbb2072a84f8dd0df3ef207eaf4cb92d67df4d332d2bd41c69a7bc4a95319c223ff3028aaafb920d4cfbf6bb2522b91deeb344155086f69189b1c15f0571d4150dd013a2e1adb77cffb2", 0x7d) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x80000001}}, 0xfffffffffffffff7, 0xe2d}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r7, 0x80000000}, 0x8) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c) accept4$unix(r2, 0x0, &(0x7f0000000740), 0x80000) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000200)="98a57ecb2b52b46af66c05cb4df5d046243e6bdfe5d6eb9b971e42161a52690ed32d8cd91ef8f4d7f0b4687116a49e9aefe5998861747c83db9a1b7d5ea76ff3dd5113e514921ef9292d814eeb3d0e262728597d3f4d55e673374a871af5862ce63876b2385ab5ffa5e69ad8bd6d391c462cc80d9d5f960394dffd558ca0c2b20f563eba43f637f4f65569c0134f65d9db7eb0bfab77d67253189563e59cf8532fc9837b676a07eee26c744a6e37e9a62a56", 0xb2, 0x40001, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000003c0)="223923d44fcdfab7bb29b9c45c461c484fe161e6425f1c561a8ef9f209834d51c6aa7ac03eff2c645fa7f9f0dc1f6cd332522ad42c2a198c120b8a72991f71a5387f160cfa97d4df6099e4f0c146aa8d79a0a6426035f654e3337d2c73358d0a743e0bc9eb19879e23b477ac12e96c2dcac890045762d2db3828417230b2cc5cb00fd9448c430961994d5c6a2d8edc4d5344461d74a565c847d4245cf3bd51a3980d46c58b5bc9ab57d39429674370b3c51fb449c12a04aa6e7772fa8ddc93625fe1f841b2d2290e1f2077bf8a56d92cc26e0cbc0ff598d4a4274006457f2eea8476", 0xe2, 0x8004, 0x0, 0x0) poll(&(0x7f0000000040)=[{r3, 0x280}, {r4, 0x8000}, {0xffffffffffffffff, 0x2000}, {r3, 0x8000}], 0x4, 0xd1) [ 233.751650] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 06:50:52 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/prev\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000080)=ANY=[@ANYBLOB="b5000000100000000102000000010000faffffff3095ba1c"]) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000040)=0x80) fanotify_init(0x4, 0x101400) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f00000000c0)={0x6, 0x9}) write$smack_current(r1, &(0x7f0000000000)=',eth1\x00', 0x6) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000240)={{0xa, 0x4e20, 0x101, @ipv4={[], [], @multicast2}}, {0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x14}}, 0x512, [0xa589, 0x5, 0x2, 0x6f17, 0x7fffffff, 0x4, 0x200, 0xfffffffffffffffd]}, 0x5c) 06:50:53 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}, {0x0}], 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000440)='/dev/bus/usb/00#/00#\x00', 0x5, 0x200000) sendto$packet(r0, &(0x7f0000000480)="15de621bcb0e9eead8c19cfa95bba0ad3a125a09f879036a2dead08cf4a042b11a4339735489c4ff8fed6669aa3a192dc7eb4cfb042e7b4337e61f2e1a", 0x3d, 0x90, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=0x0, &(0x7f00000001c0)=0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000200)={r2, 0x7}, &(0x7f0000000280)=0x8) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000580)=0xe8) bind$xdp(r0, &(0x7f00000005c0)={0x2c, 0x4, r4, 0x1, r0}, 0x10) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) add_key$keyring(&(0x7f0000000900)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000340)={0x2, 0x0, [], {0x0, @reserved}}) getgroups(0x4000000000000097, &(0x7f0000000300)=[r3, 0xee00]) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f00000004c0)={0x7, 0x70, 0x9, 0x7, 0x6, 0x0, 0x0, 0x6, 0x0, 0xd, 0x0, 0xfffffffffffff85b, 0x2, 0x8000, 0x5c, 0xa4, 0x4, 0x9, 0x81, 0x101, 0xec, 0xfff, 0x3f, 0x9, 0xfffffffffffffc7a, 0x8, 0x1, 0x8, 0x1ff, 0x0, 0x5, 0x5, 0x1, 0x3ff, 0x89, 0x9, 0x8000, 0x5, 0x0, 0x101, 0x3, @perf_config_ext={0x7, 0x2}, 0x30, 0x6, 0x80000001, 0x7, 0x0, 0x9, 0x400}, r5, 0x3, r1, 0x0) r6 = socket(0x8001e, 0x1, 0x100000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x6, 0x2, 0x1, 0x100, 0x5}, 0x0) sendmsg(r6, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r6, &(0x7f0000000d40)={&(0x7f0000000800)=@l2, 0x80, &(0x7f0000000c00)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x3, &(0x7f0000000cc0)=""/71, 0x47}, 0x40000100) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000000)=0x80, 0x4) creat(&(0x7f00000002c0)='./file0\x00', 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x20800, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x1f, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000240)="e3", 0x0}, 0x18) write$binfmt_elf32(r6, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 06:50:53 executing program 3: r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000040)="1f0000001000fffffd3b54c007110000f30501000b000200000013000200cf", 0x1f) fdatasync(r0) 06:50:53 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) r1 = userfaultfd(0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x100000000, 0x30, 0x40, 0x2}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e20, @multicast1}}}, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) fcntl$setsig(r1, 0xa, 0x0) clone(0x200, 0x0, 0x0, 0x0, 0x0) read(r1, &(0x7f0000009f9c)=""/100, 0xfffffe98) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=ANY=[], 0x0) 06:50:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000100)='./file0\x00', 0x1, 0x80) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfffffffffffffffe) unlink(&(0x7f0000000180)='./file0\x00') clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100c0010}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1cc, r2, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xc13b, @dev={0xfe, 0x80, [], 0xc}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}}}}]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffffffffffe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x44e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xf0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe68}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @mcast2, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @ipv4={[], [], @remote}, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffffffff7d18}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'eql\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xffffffffffff1220, @local, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x7}}}}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) sched_yield() link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00') 06:50:53 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r2 = dup(r0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3}, 0x8) geteuid() sendfile(r1, r1, &(0x7f0000000080)=0x1ffffff, 0x100000010a000201) 06:50:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x1, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x9) prctl$PR_SET_DUMPABLE(0x4, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x3, r2, 0x1}) recvmmsg(r1, &(0x7f0000007680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180000000000000ff0000000000000002000000650000000200000000000000010000000000000003000000000000007fff0000ffffffff0000000000000000002000000000728d2eb6879d5e00000000000000000000448a0000000000000100008000000000ffffffff00000000000900000000000000000000000000000020634c2ae8a90cfcd1000000003a99b0524ee38d4b2fab605838bd0d04000000000000000000000ac4ca6e10b453913000a697ae9fcad249289d85f8b174d70bec4d93a32cba8b62bd5fa7fd9b2a5afd31551b850e121a6248739bdab46e18346d0000000000000000"]) sendfile(r3, r4, 0x0, 0x2007ff) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2000, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) 06:50:53 executing program 0: pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000380)={0x0, 0x8, 0xffff, {r1, r2+10000000}, 0x1, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}}}, 0x90) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bond0\x00', r6}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0xfffffffffffffd53, &(0x7f0000000080)={&(0x7f0000000180)=@setlink={0x2c, 0x13, 0x311, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_ADDRESS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000200000000}, 0x4) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f0000000000)) 06:50:53 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x8) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x8, 0x3d, 0x0, 0x9}, {0x3f, 0x689, 0x3f}, {0xfff, 0x158, 0x5c5, 0x6}, {0x8001, 0x1, 0x4e8, 0x4e80}, {0x5, 0x6, 0xffffffffffffd65e, 0x6}]}) sendto$inet(r0, 0x0, 0x0, 0x20000801, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x402, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000180)={0x7, 0x0, 0x3, @discrete={0x10001, 0xffff}}) 06:50:53 executing program 5: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x1, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 06:50:53 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x9, 0x0, "e5f9fe8eb2df5e42090cca28e845b2eabd7ce740a1468fe351a06e3de92acc3c"}) 06:50:53 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r2 = dup(r0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3}, 0x8) geteuid() sendfile(r1, r1, &(0x7f0000000080)=0x1ffffff, 0x100000010a000201) 06:50:53 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x27, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r1) 06:50:53 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xd43f58e118afee75}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f000057bff0)={0x2, 0x4e24, @multicast1}, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x119400, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000100)={0x30, &(0x7f00000000c0)="668909a923d52ee6a78bf7b791def41bf8093ad221f1f9f5f7f5f0f8375dff70d308f4fcc842654c058b9e12547713f0"}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x7, 0x4, 0x558, 0x258, 0x140, 0x140, 0x470, 0x470, 0x470, 0x4, &(0x7f0000000140), {[{{@arp={@local, @empty, 0xffffffff, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@local, {[0xff, 0xff, 0xff, 0xff, 0xff]}, 0x800, 0x4, 0x7, 0xc1ed, 0x1, 0x9, 'veth0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x0, 0x5}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @rand_addr=0x7, @local, 0x2, 0xffffffff}}}, {{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xffffffff, @empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, @mac=@random="26fd19b2901e", {[0xff, 0x0, 0xff, 0x0, 0xff]}, 0x7, 0x400, 0x4, 0x850, 0x8, 0x4, 'ipddp0\x00', 'nr0\x00', {}, {0xff}, 0x0, 0x14}, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:ifconfig_exec_t:s0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x5a8) 06:50:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) 06:50:53 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @empty}, 0xc) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x487, &(0x7f00000000c0)={'filter\x00'}, &(0x7f00000001c0)=0x54) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0x15}, 0x419}, {0xa, 0x4e22, 0xfffffffffffffff9, @mcast2}, 0xa647, [0x1, 0x1ff, 0x401, 0x5, 0x2, 0x4, 0x2, 0x3]}, 0x5c) dup3(r0, r0, 0x0) 06:50:53 executing program 3: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000280)={0x10000000000000a, 0xffffffff00000000}) 06:50:53 executing program 2: pipe(&(0x7f0000000080)) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup3(0xffffffffffffffff, r0, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) getgroups(0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000ac0)='./bus\x00', 0x40000000000012) open$dir(&(0x7f0000000180)='./file1\x00', 0xfffffffffffffffe, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x0, 0x0, 0x0) r4 = accept$packet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0) sendmsg(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000100)=0x5, 0x4) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) mmap(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x4, 0x10, r5, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x7fff) sendfile(r3, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 06:50:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(r0) write$P9_RWSTAT(r1, &(0x7f00000002c0)={0x7, 0x7f, 0x2}, 0x7) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000740)=""/251) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0xf5, "7f226324275df7e946e29a77de4d2318eba17f5344a14afa18d7d572a7adc3a14bb1cc4fdc0e194428dd1e668f2d3400ca2ea3ebaf833bae6b729de73a6a5ceff39cd67bb2a768fed0264a4afce58bb2bf1af8b96e5e8e8e88c81c665eac45684ff38b657cda44fab2f664812f7ebe0fb75ebad1f878c3a57e51e5bc0622f7cd0e29d8d58994255f0a3e05d97c4679b388b032ce2a1bda729d733d133b8ae6dd842b95dc9129a3ee0e3c83f0b2b6fced03aa0f9a7991b3a3b5a22ce4205fa536052b28750442417200d087053e0df8fac9ff1333dad4cdba63da0dc9bff1b300954c2127a403321a9492b7b31d61d974aef23204a1"}, &(0x7f0000000180)=0xfd) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)={r4, 0x7, 0x3, [0x101, 0x401, 0x6]}, &(0x7f0000000240)=0xe) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) getresuid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000840)) getgid() getresgid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000b40)={0x4, r1}) fsetxattr$system_posix_acl(r0, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x1, 0x2) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000c00000/0x400000)=nil}) add_key$user(0x0, 0x0, &(0x7f0000000380), 0x0, 0xfffffffffffffff8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) 06:50:53 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}, 0x800}}}, 0xa0) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x1f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) mkdir(&(0x7f00000001c0)='./file0\x00', 0x120) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000007c0), 0xffffffffffffffff) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000240)=r0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x4) getpid() socketpair(0x0, 0x8080f, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000480)={'IDLETIMER\x00'}, &(0x7f00000006c0)=0x1e) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000080)=0x20, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="090889fd3be4b5efee95000000000000ffffff02000000"], 0x14}}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000002c0)={0x3ff, 0x0, 0x10001, 0x7e5}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000600)={r4, 0x2}) 06:50:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") r1 = syz_open_dev$swradio(&(0x7f0000000300)='/dev/swradio#\x00', 0x1, 0x2) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000180)) io_setup(0x1ff, &(0x7f00000000c0)=0x0) io_cancel(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000100)="7da169036cf9e997f8bd348175adf78bfbdf3cad", 0x14, 0x3, 0x0, 0x2, r2}, &(0x7f00000002c0)) syz_emit_ethernet(0x140, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa8a37962a294f86dd60110c1100302100fe8000000000000000000000000000ffff0200000000000000000000000000010100907800ff000060cb155d00000000ff020000000000000000000000000001fe800000000000ca9616fe6d48e5db979446b45aab7f000000000000000542ba6e809ed0335e1d9bc926e7dec300f6f5c943137a65a6497d2d9f63e3154781332b140ed2706d68154ddc5843d661da60f4444555f2d4a15e6cfc85f873a4b7f473a3cd6a0d6a4cfe5418ac1af2af17bf6e87d7920b9d36610fbd45f8d320e1021affff93bb67ba9e6c"], 0x0) [ 234.827645] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 06:50:54 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xbc) r1 = accept(r0, 0x0, &(0x7f0000000100)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000240)=0xe8) bind$can_raw(r1, &(0x7f0000000280)={0x1d, r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000)=0xffffffffffff0001, 0x4) accept4(r0, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0) shutdown(r3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 234.946509] dccp_invalid_packet: P.Data Offset(0) too small [ 234.962228] dccp_invalid_packet: P.Data Offset(0) too small 06:50:54 executing program 0: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x81, 0x2) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f00000000c0)={r1, 0x2}) 06:50:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000040)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000500)={0x7b, 0x0, [0x20000048f, 0x9, 0x0, 0xfffffffffffffffd]}) 06:50:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xfffffffffffffde2) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2000006, 0x2031, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000015c0), &(0x7f00000000c0)=0x2) 06:50:54 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000a40)={"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"}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xc018ae85, 0x0) dup2(0xffffffffffffffff, r1) 06:50:54 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x440000ffffff, 0x2000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) ioctl$UI_SET_SWBIT(r0, 0x80045515, 0x72fffe) [ 235.532118] handle_userfault: 3 callbacks suppressed [ 235.532145] FAULT_FLAG_ALLOW_RETRY missing 30 [ 235.563762] CPU: 1 PID: 9825 Comm: syz-executor5 Not tainted 4.20.0 #387 [ 235.570641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.580025] Call Trace: [ 235.582647] dump_stack+0x1d3/0x2c6 [ 235.586309] ? dump_stack_print_info.cold.1+0x20/0x20 [ 235.591532] handle_userfault.cold.33+0x47/0x62 [ 235.596243] ? userfaultfd_ioctl+0x55d0/0x55d0 [ 235.600864] ? mark_held_locks+0x130/0x130 [ 235.605114] ? update_load_avg+0x2470/0x2470 [ 235.609551] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 235.615105] ? check_preemption_disabled+0x48/0x280 [ 235.620139] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 235.625699] ? userfaultfd_ctx_put+0x830/0x830 [ 235.630304] ? print_usage_bug+0xc0/0xc0 [ 235.634380] ? print_usage_bug+0xc0/0xc0 [ 235.638471] ? __lock_acquire+0x62f/0x4c20 [ 235.642725] ? __perf_event_task_sched_in+0x2a9/0xb60 [ 235.647930] ? graph_lock+0x270/0x270 [ 235.651749] ? __lock_acquire+0x62f/0x4c20 [ 235.655998] ? __lock_acquire+0x62f/0x4c20 [ 235.660244] ? mark_held_locks+0x130/0x130 [ 235.664492] ? find_held_lock+0x36/0x1c0 [ 235.668578] ? __handle_mm_fault+0x46da/0x5670 [ 235.673200] ? lock_downgrade+0x900/0x900 [ 235.677358] ? finish_task_switch+0x1f4/0x910 [ 235.681882] ? kasan_check_read+0x11/0x20 [ 235.686043] ? do_raw_spin_unlock+0xa7/0x330 [ 235.690464] ? do_raw_spin_trylock+0x270/0x270 [ 235.695064] ? pte_offset_kernel+0xf0/0xf0 [ 235.699324] __handle_mm_fault+0x46eb/0x5670 [ 235.703753] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 235.708606] ? graph_lock+0x270/0x270 [ 235.712430] ? print_usage_bug+0xc0/0xc0 [ 235.716506] ? find_held_lock+0x36/0x1c0 [ 235.720583] ? graph_lock+0x270/0x270 [ 235.724403] ? graph_lock+0x270/0x270 [ 235.728219] ? graph_lock+0x270/0x270 [ 235.732046] ? handle_mm_fault+0x42a/0xc70 [ 235.736293] ? lock_downgrade+0x900/0x900 [ 235.740455] ? check_preemption_disabled+0x48/0x280 [ 235.745490] ? rcu_read_unlock_special+0x1d0/0x1d0 [ 235.750432] ? kasan_check_read+0x11/0x20 [ 235.754597] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 235.759884] ? rcu_softirq_qs+0x20/0x20 [ 235.763892] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 235.769401] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 235.774954] ? check_preemption_disabled+0x48/0x280 [ 235.779990] handle_mm_fault+0x54f/0xc70 [ 235.784064] ? __handle_mm_fault+0x5670/0x5670 [ 235.788660] ? find_vma+0x34/0x190 [ 235.792217] __do_page_fault+0x5e8/0xe60 [ 235.796291] ? __kmalloc+0x15b/0x770 [ 235.800028] do_page_fault+0xf2/0x7e0 [ 235.803844] ? vmalloc_sync_all+0x30/0x30 [ 235.808015] ? error_entry+0x76/0xd0 [ 235.811750] ? trace_hardirqs_off_caller+0xbb/0x310 [ 235.816782] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 235.821642] ? trace_hardirqs_on_caller+0x310/0x310 [ 235.826682] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 235.831545] page_fault+0x1e/0x30 [ 235.835009] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 235.840648] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 235.859555] RSP: 0018:ffff88817f4df708 EFLAGS: 00010203 [ 235.864933] RAX: 0000000000000004 RBX: 000000000000000c RCX: 0000000000000001 [ 235.872212] RDX: 0000000000000004 RSI: 0000000020013ff4 RDI: ffff8881b920dca0 [ 235.879492] RBP: ffff88817f4df740 R08: ffffed1037241b96 R09: ffffed1037241b94 [ 235.886766] R10: ffffed1037241b95 R11: 0000000000000003 R12: 0000000020014000 [ 235.894057] R13: 0000000020013ff4 R14: ffff8881b920dca0 R15: 00007ffffffff000 [ 235.901365] ? _copy_from_user+0x10d/0x150 [ 235.905632] ip_options_get_from_user+0x8d/0xf0 [ 235.910333] do_ip_setsockopt.isra.14+0x1b83/0x3e40 [ 235.915361] ? ip_ra_control+0x640/0x640 [ 235.919464] ? find_held_lock+0x36/0x1c0 [ 235.923544] ? __fget+0x4aa/0x740 [ 235.927022] ? lock_downgrade+0x900/0x900 [ 235.931185] ? check_preemption_disabled+0x48/0x280 [ 235.936257] ? rcu_read_unlock_special+0x1d0/0x1d0 [ 235.941194] ? kasan_check_read+0x11/0x20 [ 235.945350] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 235.950648] ? rcu_softirq_qs+0x20/0x20 [ 235.954650] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 235.960198] ? aa_label_sk_perm+0xfc/0xa50 [ 235.964446] ? __fget+0x4d1/0x740 [ 235.967929] ? aa_profile_af_perm+0x410/0x410 [ 235.972434] ? ksys_dup3+0x680/0x680 [ 235.976861] ? ___might_sleep+0x1ed/0x300 [ 235.981027] ? arch_local_save_flags+0x40/0x40 [ 235.985622] ? find_held_lock+0x36/0x1c0 [ 235.989703] ? __might_sleep+0x95/0x190 [ 235.993710] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 235.998655] ? aa_sk_perm+0x22b/0x8e0 [ 236.002471] ? fget_raw+0x20/0x20 [ 236.005938] ? arch_local_save_flags+0x40/0x40 [ 236.010553] ? aa_af_perm+0x5a0/0x5a0 [ 236.014383] ip_setsockopt+0x47/0xf0 [ 236.018131] tcp_setsockopt+0x93/0xe0 [ 236.021948] sock_common_setsockopt+0x9a/0xe0 [ 236.026460] __sys_setsockopt+0x1ba/0x3c0 [ 236.030623] ? kernel_accept+0x310/0x310 [ 236.034705] ? lockdep_hardirqs_on+0x421/0x5c0 [ 236.039300] ? trace_hardirqs_on+0xbd/0x310 [ 236.043632] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.049010] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 236.054483] __x64_sys_setsockopt+0xbe/0x150 [ 236.058913] do_syscall_64+0x1b9/0x820 [ 236.062816] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 236.068207] ? syscall_return_slowpath+0x5e0/0x5e0 [ 236.073150] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 236.078006] ? trace_hardirqs_on_caller+0x310/0x310 [ 236.083036] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 236.088068] ? prepare_exit_to_usermode+0x291/0x3b0 [ 236.093108] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 236.097971] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.103166] RIP: 0033:0x457759 [ 236.106401] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 236.125311] RSP: 002b:00007ff260efdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 236.133030] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457759 [ 236.140309] RDX: 2000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 236.147584] RBP: 000000000073bf00 R08: 000000000000000c R09: 0000000000000000 [ 236.154875] R10: 0000000020013ff4 R11: 0000000000000246 R12: 00007ff260efe6d4 [ 236.162172] R13: 00000000004c51e5 R14: 00000000004d8f58 R15: 00000000ffffffff 06:50:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000001c0)={0x0, r2/1000+30000}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000240)={0x0, 0x0, 0x5}, 0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x29c, 0xffffffffffffff00, 0x7ff}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={r3, 0x4}, &(0x7f0000000280)=0x8) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x80, 0x4) sendto$inet(r1, &(0x7f0000000100), 0xfffffffffffffdf4, 0x0, 0x0, 0xfffffe0f) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000002c0)='\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)=r4, 0x4) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) 06:50:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x72, &(0x7f0000000140), 0xc) close(r0) close(r2) 06:50:55 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x20000fb11, 0x2000) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)=""/162) migrate_pages(0x0, 0x6, &(0x7f00000001c0)=0xff, &(0x7f0000000200)) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000000)=0x101) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000140)=0xffff, 0x4) 06:50:55 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4200, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x9e56, 0x30, 0x91}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)={r1, 0xa9, "6f98c5ec4bd586d41be4605ce6c4a2b7389eedc48458452525814cb46bbb473c623fc7476f585ba4fdacacb771500ec6628eedfc226a6692914229a90230de459b008c6d6a9815867ee422a7499a968acf7f2bb9084c744965be0748a226fe06a70320d407f2fd9a895a9634c30a85442e0ca4084ea0f40983ad9a186e05d0e06570d056882a2ab8cf9a3d0e1f266f85f00f6babc9272950f2bebb4d62a6aec0f701dad2b045d96f91"}, &(0x7f0000000240)=0xb1) r2 = socket$inet6(0xa, 0x3, 0x6) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x3, 0x3000, 0x2000, &(0x7f0000004000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000340)={0x0, 0x0, 0x2080, {}, [], "ea150ef216c8d0f515beaf6a3fcb4062d623e911c7cda484a39e090bc8ebd4798b5c5b19d6aaf0da7b814d6c42967f6e26c1c2c18747dc8a1326bf683da5159ba0cf3fefc2f16ad8e4020bab72fe07b680262b7cf4983f8075cead7c7d15d8420e645d2e6c6711829c7ec3d0c9b76ab8048149c61518629befa9d055e8644203e7f3b593048b4831a18c36b28dc7fba438421be8c667e7b493d7ee169c0658b9a1c297dcc9c02bc00902fdfd7b24bd68104d01d2a02b66dd8cf243d23b7cfdab4fc4ebdae66c13e7f0d6598bfdad9959db90ceb23940fe3be5e9238c886783dc83e79b7df6a98668e111b3b70268039a322fa7ad42900ce565603558672d51814a4fd3fd5294c28fddf3bdae00a4994681580df46d65c853cf34d5421add1e1c59acca6bd759b0a85b0396ed577554da6e0efc7d350015ab4ac80e983242424446c6b6bf16866720814c42b0ae515363e6a2038fbc6b89483fbcba59fc2ffbdfa7ecd2dc79d1fd4032a8053566fc5f2d6b61a1da9ada4c24e5269ce7e5bc96d87f17b5cd7ac8a9ab1f24ce6b7b2999da4a19fa2005489f12dad5846040f66d05d79693f458ad40ad348f3a3a1e7c3eab47bb010078125df4e749ce4db38646f4b67a04a7600f776ea69e4f07da005b2d7dd55880e0988f4a34d95257526e19778d93aed11eaf3dc2bec92d0e351311bae799c73bdd2b7d7c991772335b0022ef9e9aae8f42dd077e617d1d00e154e9fcf3df09712acf2ead6b48fb13794d925f7b626ede5737b2df70bd7be1be220ee83c3a7aea915929078c113f6a6388162c53e84cac5ab495ada95260f936447692fd734108aa6153a47a2e95c530b97b3d78f4951a578d609e06ef26fa243c91d20390fe99aa1d56a1df3bb3ce203a75eb8ac67b78858bb5c8a53393df7d642abc9941d83c145652bdd2de8c0b1190c439aa8908bc1270208314e681f65e47aded2b0313888c982eb57be10bb84ff6bf4c10a5ea6e688994fa73ab1a97051e3e4b7600411ac0c3aa671877f4386c1d03432032695d0c28ca31d66a8ce01e4d1352baa97c75380564d199acdfc9158dccb27c7f7690fc08ec877f9715ed581868323c9f6d4fbba8bb9371a450587cdf0038c1dfbaefdd3eb71f83c5d3f8c012a66def4915a71e557298c9944a034942fe91d0d8b8719418c20b193fc942d36623495bfb968e3c679afb0ddfaac72688c5c1e2d071939c6cf1309738dd956acafffd9685e8027f20e02fd3db3141d74359eb7ecdfcd6f25ac6b1a475280b437515e3f98644b0799b360090b4cbc522c0a870834f00eec37b76d30a158e3b5d64f3aadcae18c5289bb85f40ce407d25592654dafde08c5989d8605d811672b5ae242aadb1808549b5ad7a201092ff549bf6be622bcdbbe26a6fc98be7e26f6205f74d5c1a536fa5ab3aa5065bcaccd68b52ebe84d9ed42279b29860d4e6fd465339146e7e80eea25afdd4d04de4c8749e0c1fad4147cd5e32176232c1ac2b58d80c7d0e195f9a886d88ebf9d61c2567da8a34019e1a33575c173061f6a37f175afce62a9713959c11945b238c732442f555c1e30a8bd86c44e6fb792bdf8c1c1085b8a0eb429c62cb1a5c78924b56e2fc297a6004643f3932ff51ed4ebdf064e52b9625f9b88d301c6252c3e4e08b935aa168cc46329e650f49e052f1ad02099853a6e4c458aa501720f1029fdabff4d8a26c9f71c87052883abf4e67c965bab72c29e4d8978aaaaf2bb79c114f37ad2a99aef1282a0510fe7d53adb3ef10647e578fff3a68e211342842a818f2f300263fa2d765d765dfc52f4e8c8751291383797eeefbd52a6c512e2e796c8d36f4059f49b958ede8783754717feae5e9e6b2ea831fee5b0891089a30d926f918485c1b2cb077776cc3529e5f5585b63a737a2c45de7d135339bb2db0dd41c0b80de40d7966a127109e889914f2387acb3caa2892615059468027d857a0c9845c6b1d4946975ada1fda1aeb9d214c8b0c69886919c375ab8294accac8e6375206326277fc6edd6a4ca5f2287b928c26b3f2b6a3fd6462d46f06ff0a56bffdb8d48acf5935765657f5174248b729df34458af3d538f28774479033b80d9a80a8a1a814a2abf7e1ae8ae57061d02dc51c93adc20e933535d9a3a146ff0d07787912d00defdadf00292c5e8808325736534f58f3d11c50f02aff019824701dcc0577833ad7537ccf882fb445b28cb090df42e519304dfb39dd379d26b1758211ea3985dd714caeeda93e7300d22517bc965b1e40a9784704e71c18fef8a4ba20528dc6c66615927c5136ccec548e84c43e060b46f87cf7e68fc96a9b5c6962d701ee6a49c9d6d3a91eb77998890a184cf4dd34789b5860f7f5628c6305e4743e72f3e6f4bd6ab7dea903dfacdc2cbe89b769612f49a2938272075e3a4d4b0805b168a947788708ef3a41b4ecfb83829f89d5e40f88fa21b8f2bac0319fc14a74361641b36e353d56c6ad798f84a65c58700c86d3aac7a4af6edfa648c324b40d51b0ed4f2bdad968d43eb2ea2751feb57b83aa23b3d49f37ab7a437e7a0bd132f64728fb5f708e18607d883b5773d8e731bf2eaf64bc2b135a33dfe0fd4f9dffc88c6d7fc82176263fed361a795f2971224fb8dc6c708717cfbb729b437a3d09b096825ee280de1e6ac6e1484d842b0c4966113f44541168a7bd87fb1acefb11fa330bab90b2d5e5ce0801be0ddc5447c0e8a154cce9c42fb1afc013c8633112653d394fa54ccfd764b8b52ac25b6a2b79e56e13399ce8cb32e2bf0c5cba6d7f41c44d6fa9af43bb921090f74f3f8382d0ee13d2dad9d76236bb688c439b4d06fbf5f32e561f55fcd8ccd4abcfc10dd680a09fabcd32abe8d85b5944586adeae5fa36ffdd019a50ffb14d1cec455b0dac14367914c903caed8da3ebd41e64fb789065204592a2af72cc2bd8b36a3eb0577803bfd3452f80260f0b04149f2f38088d9d3d15a5b9dda9d3fa440b02a14ba92754f7b13fd564fc9e034352881d8a284f35ca8b74b70b0432e447bcd9ab09159088a547a3370091e6b5e06b96b513083cda0e992c1249a975b033988ca5eda54df4c3cf88cecb31c6c2eb2338fee3e8145c512a07bd66e6d24b09238df1fc76d837de3c8ec50b7f37db7adce7d7bbcb83facd429cc193901ffce139be17eac854d0b46eca096d385fdaced61b11685713b37dda8ae82f61aaf53f2975ce841e32f6d8e86b6174a5e6430da9043ff80c967955d16851155ecb707367017f49518c0d3b9a0649c18165a4e1e1acc5a61436b8bdf18558077ef8cc63941c386d88d6e15daff7ae31cb1edf45c4c8118221cb933a93371a8bfafda8035e8a64a648d0fad7d99ff0a0cb9448767646438656a80c47b56ed662b8e7cca5b87273653262f160f7c56831c2b86acbe869fcda6d88104e9c5084bd186a6a7b67a915282f0b27c05a6bed47ecd773b008826ca2767c15f145d6fb22ba15287a7115d01108e3a2231832792a629e0c0f30d76e9cf5ef0e25f64a60bbb7dd5c60432fa89c522ca7ff0293a34c0f788fbe9e197f379df91f99bf9c18664db86bbbac9b5f9d76d128f04c76ddd34a5dac21b56c86e4d7e1d7f13da568e7c03148ff335fa6f7865377bcef9fe504338abc464f0de96355a66307c68e31f2e29a7519d5e9e4f2b4f573e65b9f0b7b63258190ad48eca81ce809c6cfa5476bbe98699c31d595799c2bb6501dcde5a811b091ed89fc655a908fd0d7d973e0f06208a134cbc153ff9a9d112110b929b3e05cc3a0b42d6dec0597833703aa74eb0dfe811e36271a54527147f393bbd0aacc237e8f1a86d12da5cc383d761439871bd71b8ec2a9de05d9cb63c7212b4be7c0cd588af28ea008503eae2da7df4d8d5d46d5b8d8ebe0742d8e8455c93d4af2927dcdc7f6f832b0c92c3b312b14dd4cc1cfac283b43f7147592bcdf228e574a2d10939ef49b8f47b1d3225307f9ddb4a58566dfafb7690dcd1fc0047ff2b0d82f9bac25e70b1b727b8120ca49b1238524307be60466f8a1b8365ad1c1dfeb6a42cd594b24f7523c0668735e7133ce6d265854bb066bccfadb13c0e2223129fd5201a6029071dd9210157187b87ed334639233f8fef935c6d6adbb6ade1335726606fa92d181777836534b12a678b0a8bcbcb057bcfc9af6c2e6f5333ea1dc3ff9dd3455d647b93c1fe5bbdb2aae47dba86426cd097f3d2a0ea0a411dd66b5052b545d91c5062034bdd6131925f78df4df8d7310fd65e3d26b41afa5f310010045b812ce12d5b65e0c4ddd20a65dea636d0ce925610c2061bbf0fc959d086cba24458fa4baa7f67d908b8402a61da1115f558b04b4d4ac882b54064a8581144052a18497a71e545efcdb35c64ee0be68a58bfbff558fa76d9f2370235dfcfd32fdb3ef09ff739e969ac7c01a6dda363912be7905e68484d90d2f58bfc54f1708cac27a1a179d50a4ecb314fe979b18ea2eaaf0d962476953f597c26127ad7316bf1fd87306d85c9b6d49a571f90016280cdb20d08cb6742c7dba39a6b1b1f413ce4e4d6da09994b7deccbdb4d8761d9ad86369762b7bc14567d645c9a90056598c3a51b0b97ec9cda9df787d85ce67270ddc8929632905cac1def733d25fab7e41933e374e5b51e969ee88a34067fb1efec6d658e53d2a08cf443160ec8708b686db9c03bc4229d62df43e62a9d69f78913fc4425e98adc038f452a52de20571deb7e08d9354dd0cc6d981ae19c30e6197286a6d83978271ed71210ef399e340d67343f2f788307099da549b482b39cef2a9dc1a5df698142957a6e298b5246359a64d7d9165cc46bc3f8250a9a303cc9e21a229d170ab1db4acb794f158633885dac0d7e47db9e4d516521c124b2297472af5ecea0f8a14d1c81b7741d46a68e5661645c7eef27a84e108aaea702f1a6c22f943c97d947fcb9fbeeff602636f9c7e7609e8091dd15ae95e0e388c44b9ebb03340a9ff35a07b554a4690cb30cd2e086f6aaada913c1e1ce1adac82f8682b01faeb23d94214d06f11b7552ca7f4ec231cbc90ae7949fe7b2f5c1f2452b12aada89572e97c2876c2160bd95edbbadcfed199488ecd6ba65c1d889cbbe6d50f51d8ddf38727384e667f74ce2ad34429a9f68d4339e59ebfca91c76cedfd405dcfa8b4ff17e9fc61966ff1a3b4e55e04725e96b24464289fad6a5d0049c683c8e4bb02424dedf79ab27a07d1bde3567e22c9593825df97e8fa62f675afb118b481ca16678beb49185549b0091f7e205b2634f550789624ec91d27951881d8d175e6c0cda5cb7ffa9eda0cdfa0188f9ece64d10e11a128122e09e567b0efc920a9d47d841516d13692d4a85abbb9303d9c4333a29069aa2ea10d73346b6e33d985ed8fc112f071ee657c3936fa0a6c6a6686fab84c88120e18e23fa3d62c770585599483851e3d1103434c86c658deefb7c6e62044cb71607ef4fabca3085e987661834b24e599f3a9d9fefd8482a28783d89173955709126d719cfecb939c21afff2ebba6d42a4d2e13b7e5e6594742be9c3650728ee17f09ff909d8332d769dd8b4bd3f6014ad2cf242983f05bba54ba9624e571f4ab4c12c6083dae02f7a8ed8905ce0caa7cd1909f9569068f0978c0884b1aea7fc85237ce091eb32ee70da374092ebf89cbf7c83846b2e75eb673364dc0d62a693743f2c4e5a60fdce272b8f001e918c37c72dda758faede47727cdb752c45fb463239cb396cc0de52da3ecfa11d49a31b6c6af5982907b11fc8a3be94a0db03a99c0fef02ae138eb", "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"}) 06:50:55 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}, 0x800}}}, 0xa0) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x1f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) mkdir(&(0x7f00000001c0)='./file0\x00', 0x120) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000007c0), 0xffffffffffffffff) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000240)=r0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x4) getpid() socketpair(0x0, 0x8080f, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000480)={'IDLETIMER\x00'}, &(0x7f00000006c0)=0x1e) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000080)=0x20, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="090889fd3be4b5efee95000000000000ffffff02000000"], 0x14}}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000002c0)={0x3ff, 0x0, 0x10001, 0x7e5}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000600)={r4, 0x2}) 06:50:55 executing program 3: r0 = socket$inet6(0xa, 0x40000000000006, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000400)=0x4) 06:50:55 executing program 2: socket$caif_stream(0x25, 0x1, 0x1) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x8, 0x80000) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) write$UHID_INPUT(r0, &(0x7f0000000300)={0x8, "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", 0x1000}, 0x1006) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfffffffffffbfffe, 0x11, r0, 0x0) [ 236.475666] ================================================================== [ 236.483256] BUG: KASAN: use-after-free in vb2_mmap+0x668/0x6f0 [ 236.489233] Read of size 8 at addr ffff8881b3062d80 by task syz-executor2/9918 [ 236.496725] [ 236.498364] CPU: 0 PID: 9918 Comm: syz-executor2 Not tainted 4.20.0 #387 [ 236.505216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.514569] Call Trace: [ 236.517170] dump_stack+0x1d3/0x2c6 [ 236.520811] ? dump_stack_print_info.cold.1+0x20/0x20 [ 236.526007] ? printk+0xa7/0xcf [ 236.529290] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 236.534061] print_address_description.cold.8+0x9/0x1ff [ 236.539436] kasan_report.cold.9+0x242/0x309 [ 236.543846] ? vb2_mmap+0x668/0x6f0 [ 236.547485] __asan_report_load8_noabort+0x14/0x20 [ 236.552432] vb2_mmap+0x668/0x6f0 [ 236.555895] ? vb2_poll+0x1d0/0x1d0 [ 236.559526] vb2_fop_mmap+0x4b/0x70 [ 236.563163] v4l2_mmap+0x153/0x200 [ 236.566710] mmap_region+0xe85/0x1cd0 [ 236.570526] ? __x64_sys_brk+0x8b0/0x8b0 [ 236.574595] ? rcu_softirq_qs+0x20/0x20 [ 236.578585] ? refcount_sub_and_test_checked+0x203/0x310 [ 236.584044] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 236.589503] ? aa_capable+0xe30/0xe30 [ 236.593306] ? arch_get_unmapped_area+0x7f0/0x7f0 [ 236.598154] ? lock_acquire+0x1ed/0x520 [ 236.602132] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 236.607149] ? cap_mmap_addr+0x52/0x130 [ 236.611128] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 236.616680] ? security_mmap_addr+0x80/0xa0 [ 236.621025] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 236.626568] ? get_unmapped_area+0x292/0x3b0 [ 236.630983] do_mmap+0xa22/0x1230 [ 236.634448] ? mmap_region+0x1cd0/0x1cd0 [ 236.638511] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 236.642609] ? down_read_killable+0x150/0x150 [ 236.647108] ? security_mmap_file+0x174/0x1b0 [ 236.651611] vm_mmap_pgoff+0x213/0x2c0 [ 236.655512] ? vma_is_stack_for_current+0xd0/0xd0 [ 236.660359] ? _copy_to_user+0xc8/0x110 [ 236.664358] ksys_mmap_pgoff+0x4da/0x660 [ 236.668435] ? do_syscall_64+0x9a/0x820 [ 236.672427] ? find_mergeable_anon_vma+0xd0/0xd0 [ 236.677189] ? trace_hardirqs_on+0xbd/0x310 [ 236.681516] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 236.687057] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.692439] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 236.697894] __x64_sys_mmap+0xe9/0x1b0 [ 236.701793] do_syscall_64+0x1b9/0x820 [ 236.705682] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 236.711051] ? syscall_return_slowpath+0x5e0/0x5e0 [ 236.715981] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 236.720833] ? trace_hardirqs_on_caller+0x310/0x310 [ 236.725851] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 236.730875] ? prepare_exit_to_usermode+0x291/0x3b0 [ 236.735901] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 236.740755] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.745948] RIP: 0033:0x457759 [ 236.749146] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 236.768048] RSP: 002b:00007f6cc789bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 236.775759] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457759 [ 236.783029] RDX: fffffffffffbfffe RSI: 0000000000004000 RDI: 0000000020ffc000 [ 236.790296] RBP: 000000000073bf00 R08: 0000000000000004 R09: 0000000000000000 [ 236.797569] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f6cc789c6d4 [ 236.804838] R13: 00000000004c3269 R14: 00000000004d5ca0 R15: 00000000ffffffff [ 236.812121] [ 236.813745] Allocated by task 9918: [ 236.817379] save_stack+0x43/0xd0 [ 236.820857] kasan_kmalloc+0xc7/0xe0 [ 236.824583] __kmalloc+0x15b/0x770 [ 236.828125] __vb2_queue_alloc+0xf7/0xfa0 [ 236.832278] vb2_core_reqbufs+0x971/0x1040 [ 236.836514] __vb2_init_fileio+0x344/0xc90 [ 236.840747] __vb2_perform_fileio+0xcfd/0x1210 [ 236.845331] vb2_write+0x38/0x43 [ 236.848700] vb2_fop_write+0x20a/0x400 [ 236.852591] v4l2_write+0x168/0x220 [ 236.856221] __vfs_write+0x119/0x9f0 [ 236.859934] vfs_write+0x1fc/0x560 [ 236.863475] ksys_write+0x101/0x260 [ 236.867103] __x64_sys_write+0x73/0xb0 [ 236.870994] do_syscall_64+0x1b9/0x820 [ 236.874881] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.880059] [ 236.881682] Freed by task 9916: [ 236.884964] save_stack+0x43/0xd0 [ 236.888424] __kasan_slab_free+0x102/0x150 [ 236.892658] kasan_slab_free+0xe/0x10 [ 236.896461] kfree+0xcf/0x230 [ 236.899565] __vb2_queue_free+0x5e2/0xa30 [ 236.903718] vb2_core_reqbufs+0x2da/0x1040 [ 236.907963] __vb2_cleanup_fileio+0xf0/0x160 [ 236.912398] vb2_core_queue_release+0x1e/0x80 [ 236.916900] _vb2_fop_release+0x1d2/0x2b0 [ 236.921047] vb2_fop_release+0x77/0xc0 [ 236.924935] vivid_fop_release+0x18e/0x440 [ 236.929166] v4l2_release+0x224/0x3a0 [ 236.932967] __fput+0x385/0xa30 [ 236.936247] ____fput+0x15/0x20 [ 236.939531] task_work_run+0x1e8/0x2a0 [ 236.943437] exit_to_usermode_loop+0x318/0x380 [ 236.948018] do_syscall_64+0x6be/0x820 [ 236.951909] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.957093] [ 236.958721] The buggy address belongs to the object at ffff8881b3062d80 [ 236.958721] which belongs to the cache kmalloc-1k of size 1024 [ 236.971381] The buggy address is located 0 bytes inside of [ 236.971381] 1024-byte region [ffff8881b3062d80, ffff8881b3063180) [ 236.983180] The buggy address belongs to the page: [ 236.988108] page:ffffea0006cc1880 count:1 mapcount:0 mapping:ffff8881da800ac0 index:0xffff8881b3062000 compound_mapcount: 0 [ 236.999396] flags: 0x2fffc0000010200(slab|head) [ 237.004093] raw: 02fffc0000010200 ffffea0007646408 ffffea0006d9cf88 ffff8881da800ac0 [ 237.011978] raw: ffff8881b3062000 ffff8881b3062000 0000000100000006 0000000000000000 [ 237.019874] page dumped because: kasan: bad access detected [ 237.025579] [ 237.027203] Memory state around the buggy address: [ 237.032130] ffff8881b3062c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 237.039488] ffff8881b3062d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 237.046850] >ffff8881b3062d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 237.054200] ^ [ 237.057568] ffff8881b3062e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 237.064936] ffff8881b3062e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 06:50:56 executing program 0: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0x3c, @loopback, 0x4e20, 0x4, 'sh\x00', 0xc, 0x86e, 0x5d}, {@rand_addr=0x10000, 0x4e20, 0x2000, 0x42e, 0x8, 0x8f81}}, 0x44) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x8000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000000)) socket$pppoe(0x18, 0x1, 0x0) [ 237.072296] ================================================================== [ 237.079649] Disabling lock debugging due to kernel taint [ 237.183015] Kernel panic - not syncing: panic_on_warn set ... [ 237.186995] kobject: 'loop1' (00000000312d7f10): kobject_uevent_env [ 237.189005] CPU: 0 PID: 9918 Comm: syz-executor2 Tainted: G B 4.20.0 #387 [ 237.189014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.189024] Call Trace: [ 237.200143] kobject: 'loop1' (00000000312d7f10): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 237.203665] dump_stack+0x1d3/0x2c6 [ 237.203685] ? dump_stack_print_info.cold.1+0x20/0x20 [ 237.203707] panic+0x2ad/0x55c [ 237.203722] ? add_taint.cold.5+0x16/0x16 [ 237.203743] ? preempt_schedule+0x4d/0x60 [ 237.234570] kobject: 'loop5' (00000000ed058803): kobject_uevent_env [ 237.237081] ? ___preempt_schedule+0x16/0x18 [ 237.237104] ? trace_hardirqs_on+0xb4/0x310 [ 237.242449] kobject: 'loop5' (00000000ed058803): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 237.245407] kasan_end_report+0x47/0x4f [ 237.245427] kasan_report.cold.9+0x76/0x309 [ 237.278245] ? vb2_mmap+0x668/0x6f0 [ 237.281886] __asan_report_load8_noabort+0x14/0x20 [ 237.286824] vb2_mmap+0x668/0x6f0 [ 237.290295] ? vb2_poll+0x1d0/0x1d0 [ 237.293930] vb2_fop_mmap+0x4b/0x70 [ 237.297568] v4l2_mmap+0x153/0x200 [ 237.301120] mmap_region+0xe85/0x1cd0 [ 237.304937] ? __x64_sys_brk+0x8b0/0x8b0 [ 237.309008] ? rcu_softirq_qs+0x20/0x20 [ 237.312994] ? refcount_sub_and_test_checked+0x203/0x310 [ 237.318450] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 237.323905] ? aa_capable+0xe30/0xe30 [ 237.327714] ? arch_get_unmapped_area+0x7f0/0x7f0 [ 237.332566] ? lock_acquire+0x1ed/0x520 [ 237.336554] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 237.341584] ? cap_mmap_addr+0x52/0x130 [ 237.345569] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 237.351112] ? security_mmap_addr+0x80/0xa0 [ 237.355443] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 237.361450] ? get_unmapped_area+0x292/0x3b0 [ 237.365867] do_mmap+0xa22/0x1230 [ 237.369327] ? mmap_region+0x1cd0/0x1cd0 [ 237.373398] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 237.377473] ? down_read_killable+0x150/0x150 [ 237.381978] ? security_mmap_file+0x174/0x1b0 [ 237.386493] vm_mmap_pgoff+0x213/0x2c0 [ 237.390410] ? vma_is_stack_for_current+0xd0/0xd0 [ 237.395290] ? _copy_to_user+0xc8/0x110 [ 237.399275] ksys_mmap_pgoff+0x4da/0x660 [ 237.403345] ? do_syscall_64+0x9a/0x820 [ 237.407331] ? find_mergeable_anon_vma+0xd0/0xd0 [ 237.412096] ? trace_hardirqs_on+0xbd/0x310 [ 237.416452] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 237.421998] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 237.427377] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 237.432851] __x64_sys_mmap+0xe9/0x1b0 [ 237.436750] do_syscall_64+0x1b9/0x820 [ 237.440648] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 237.446025] ? syscall_return_slowpath+0x5e0/0x5e0 [ 237.450971] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 237.455836] ? trace_hardirqs_on_caller+0x310/0x310 [ 237.460873] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 237.465905] ? prepare_exit_to_usermode+0x291/0x3b0 [ 237.470932] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 237.475795] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 237.480991] RIP: 0033:0x457759 06:50:56 executing program 3: lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x408400, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@ipv4, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="180300002d0000042cbd7000fb99df25000000003b46e1022b1204c316d887e860b218637dba59e352d275a9f3f24d28386beb19c1ab7a9196ff54ecafe592118269368997f265ca9fa3f577e760ecf47932377b5a220e3ab507259f767e357924210af5f6286540fed051db12d0196f9cd1f74f6c4e3d673cc6b3c38e6e8b38af716f17031c8cf443d393857be83999b7b6956bd1e665fe072b71b332ad307aace33ea544f6dc5a1bceb18f6efd94b5fc830f88079d9032add49dd8e541b14952ec7f05c714858a291448f6b52c47765546f6d4c86cdcf3c4c2b28151c01f8ce5b7c06ac3934dfb3f4df54dcf6d1197cbce2f4482d1198eb5805f1488422197205f7a", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="3800060015e71462a6e9b6e0de0aa619ef6fbfab38ac670a46dfb068dbdfbea0adca4551d7c29d57275e335070b28cbea636e50ba50000000000"], 0x318}, 0x1, 0x0, 0x0, 0x40480d1}, 0x20000000) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) semget$private(0x0, 0x20000000107, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x1f, 0x1800}], 0x1) clock_gettime(0x0, &(0x7f0000000140)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="ec506db8261354245f25c1a38431f0ba29c4ff364df34bead8a0b45d52ed107f76a0dd0a83e329b507b352f7eb8b0d6adbe836f0bcd879f02be22b935047323dd0553a1be6381d3253d2ecc73ddb7c4d107bc620a2c849a436bbde24e4fae9d16520a8f24798b83d55ae87f5316e8b36572ff70f23a8e068f0ec04a96d904ae0826e96737577ff546dc7d6aa5f99b8775a5d4b1a8503978a25602088510c55bc1430d37f3a945c3769", 0xa9) socket$alg(0x26, 0x5, 0x0) tkill(r0, 0x15) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000840)={0x80, 0x0, [], {0x0, @bt={0xfb, 0xff, 0x1, 0x3, 0x2, 0xbc4, 0x82b0, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x9, 0x3f, 0x100000001, 0x6, 0x2, 0x1, 0x17}}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000000)={0x30, 0x0, 0x1, 0x80000001, 0x1, 0x7, 0x8001, 0x814}, 0x0) 06:50:56 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x780f, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800000022000100000000000000008d933e3a0004000000"], 0x18}}, 0x0) r2 = getpgid(0xffffffffffffffff) ptrace$pokeuser(0x6, r2, 0x0, 0x1ff) 06:50:56 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xfffffffffffffffd, 0x10031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="2c0271ca8b080aae3300bfa4de738003c21c104094", 0x15}], 0x1}, 0xc100) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001180)="b10b938636ea69df7b5a9984bb1bc72ef58d96e56e11df900a707f4946b1637e2096c584b9a1b4e017163fbdb35160a56c11dfbe74df97d36d19ad6a91c6fb4ad19581b8cf707131830f7a22b1b263c9da0e443c5e969ed6a0d3bc508bf75c3147447379f585759ceba0de5cda46291dc1b8f106a83e1cde43a862d95413ce2616b261ed9f79913ae781b3b843ea1b4429a750b8ccb1952a7b863d0bada9f61df6609fe368eaf47c0ce9e46a22b0d75b063deeaa94285d0c43353046e0a308296a76b0b0145f8af9aa0ed0e18bc50509eaef21c8e03842a97df3a462ea3f9d5f83bf1d4d2875f0d5b24e941483f863cd2ea7c769bd3e594fb173dd873c7d9a3fd20939ad1d5867881ed77a078007b4972aba36cae02004373a6a74d74cb15a52c5f8426cb6f235d38048fd91f5d6100fd58a335df10add227d804167ba191c7a035c5a2a916e7fef18a6003578820b3e0be26a22f2c149f40a0335cadcca64a5e44179e6ce4d7f7c16e8a96c5be7cdf66eef901cb8eeabc94bae30acca8c6fa02889c32311044dcbc9a2e02e0632f7f9aa96849abede543773745e4652fccc503003f10cd68ddab594969ad36cb622ed7ba22dc46a80fb63ac2c561a80ae5c10b295b9f75d9536ba1ac24b8e9ae217611ffe79cb9422158475c1a89a51547d13c03b68d75ffb5717a35f381774567871e9e4190272c97eafcfa0a07a751d0bc8eeb0c206e12b2cff1065a3d5622635fa44c0dcb0722ad4c97e6b7d5844b2e9bab9ba1d083fa2930a3ea267d7f15d817e2b2e055ccfbaf019292f6156efd3a9a13ea90ecf59fc1bf35c6626db1c6759a50ed84acefd3cdb3532da1f23a262055223e7a3a62f15eeb8060dc9cfa30e6783757ae2f0ac6ed75d3212591ccd73de4aed62fda77585403cb2d1446e86c12fc6ad1b8f954960a439a096ec3bf1dcc6e8cff12c8abe42391d75c0861ddd448b7dbf208cf748c9de", 0x2b7}], 0x1}, 0x8000) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="d09a0e63c9476288b671afdbd53a5994e137381f62021d1951b627b8dda57a5d17d744648c81c5703ed8146ab1b0171f89091b1dd3238d03dbb686df460963245dedf2013ee555af99499e44ad420dbf65fd46fbc99a1274429e2d5783751815828ec8cb3553110cca66460215353d19f6d8bbd8fb264eddea60b18e16c31aa5e200000491634ac2fd10e2cd30bcd7fede24263a7fff16e53ea293f3551b7147c33a44ea437fb1515c3e8d4f162fdebf8ebe11ae6fcd9372c8d8f19556ae091fe94215ae9434da412f6fa4cb6561e5f78ff9707844ee5d573fb294437722d9a06dfa61748c32c73d759933a8dd344c947d3efdbe90d0eb049df5fbb0c19f6785264b619c530d97395d44b04f7e2a280d658c7871ad373b792678c49227999651ef3b2ee1bc2b8f3035db376e8e09aa3837233c8713065a8ad131d24f6c42a3220d0e07c3d3e95d59a5dd10c09716b5f874ecf53aadfa5050ff40f2c3c4a629b6445e5836100afff5a8977583653b40ca316f8f11416e5c1bd5499636ddae25fc4970b37209cf5c0bf8e432160c258d14223baa52798e09858645773dd97e68a9531072713cff077b2e73e03ed4f145e9199c126a7f235e5674a3c7f5c7129ac7c1a3319590249b6d34ef6c3d8b94c6fc7cdcbddb053243053f7bc1f230d3bc7dfc4359e33992d0a3946b914a093287a76ac4a249b5b86cc75476466e409553355fefab75e9268a8751ffc9481fcff1f49c475699595b315e2147eebe8b7291600c6b1cf7c8f24d587b9464a67e5ccec17820e711b98f4f7d5053642068a3fff704c3fe35ba862b53e2622d6e8b4a4c815fb2ea90ef63e141209dd29254e5ab5bde9c6857b3cb184586049e7741b2d8b5b1a19e99e1834a25959155720c1c0ef84d9d3c42e1ba282847d476cef0228b1422aba08e5f3c1cd279bbd1c5303c2e9c16a0da4f88f770fca118b09e92b51a33970e32ade0c74eee1b31a420d7914c9d75db25855ae32798edc1b47e0f0f88429b2b60ae63", 0x2d5}], 0x1}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x448400, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000240)={0x20, 0x0, 0x8, {0x77359400}, 0x4, 0x7f}) 06:50:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f18}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398417f1a}) [ 237.484187] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 237.503094] RSP: 002b:00007f6cc789bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 237.510811] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457759 [ 237.518104] RDX: fffffffffffbfffe RSI: 0000000000004000 RDI: 0000000020ffc000 [ 237.525398] RBP: 000000000073bf00 R08: 0000000000000004 R09: 0000000000000000 [ 237.531877] kobject: 'loop5' (00000000ed058803): kobject_uevent_env [ 237.532703] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f6cc789c6d4 [ 237.546377] R13: 00000000004c3269 R14: 00000000004d5ca0 R15: 00000000ffffffff [ 237.548604] kobject: 'loop5' (00000000ed058803): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 237.554810] Kernel Offset: disabled [ 237.567853] Rebooting in 86400 seconds..