[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 49.813005][ T27] audit: type=1800 audit(1560245624.235:25): pid=8206 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 49.849527][ T27] audit: type=1800 audit(1560245624.235:26): pid=8206 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 49.890943][ T27] audit: type=1800 audit(1560245624.245:27): pid=8206 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.33' (ECDSA) to the list of known hosts. 2019/06/11 09:33:54 fuzzer started 2019/06/11 09:33:57 dialing manager at 10.128.0.26:39853 2019/06/11 09:33:58 syscalls: 2465 2019/06/11 09:33:58 code coverage: enabled 2019/06/11 09:33:58 comparison tracing: enabled 2019/06/11 09:33:58 extra coverage: extra coverage is not supported by the kernel 2019/06/11 09:33:58 setuid sandbox: enabled 2019/06/11 09:33:58 namespace sandbox: enabled 2019/06/11 09:33:58 Android sandbox: /sys/fs/selinux/policy does not exist 2019/06/11 09:33:58 fault injection: enabled 2019/06/11 09:33:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/06/11 09:33:58 net packet injection: enabled 2019/06/11 09:33:58 net device setup: enabled 09:36:30 executing program 0: syzkaller login: [ 216.333281][ T8373] IPVS: ftp: loaded support on port[0] = 21 09:36:30 executing program 1: [ 216.450152][ T8373] chnl_net:caif_netlink_parms(): no params data found [ 216.485546][ T8373] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.493213][ T8373] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.501408][ T8373] device bridge_slave_0 entered promiscuous mode [ 216.510262][ T8373] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.517399][ T8373] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.540437][ T8373] device bridge_slave_1 entered promiscuous mode [ 216.562463][ T8373] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 216.572967][ T8373] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 216.587944][ T8376] IPVS: ftp: loaded support on port[0] = 21 [ 216.607864][ T8373] team0: Port device team_slave_0 added [ 216.635022][ T8373] team0: Port device team_slave_1 added 09:36:31 executing program 2: [ 216.732433][ T8373] device hsr_slave_0 entered promiscuous mode [ 216.769813][ T8373] device hsr_slave_1 entered promiscuous mode [ 216.839414][ T8378] IPVS: ftp: loaded support on port[0] = 21 [ 216.848088][ T8373] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.855332][ T8373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.863202][ T8373] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.870312][ T8373] bridge0: port 1(bridge_slave_0) entered forwarding state 09:36:31 executing program 3: [ 217.000865][ T8376] chnl_net:caif_netlink_parms(): no params data found [ 217.066685][ T8373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.114727][ T8382] IPVS: ftp: loaded support on port[0] = 21 [ 217.119125][ T8373] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.133777][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.146403][ T3007] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.166718][ T3007] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.177125][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 217.200518][ T8376] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.207699][ T8376] bridge0: port 1(bridge_slave_0) entered disabled state 09:36:31 executing program 4: [ 217.217789][ T8376] device bridge_slave_0 entered promiscuous mode [ 217.261972][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.279816][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.286914][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.319769][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.339814][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.346941][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.372528][ T8376] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.380454][ T8376] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.401000][ T8376] device bridge_slave_1 entered promiscuous mode 09:36:31 executing program 5: [ 217.433313][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.446735][ T8378] chnl_net:caif_netlink_parms(): no params data found [ 217.467831][ T8373] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.495236][ T8373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.528248][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.539879][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.548744][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.559771][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.568247][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.578424][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.586817][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.596452][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.617957][ T8376] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 217.645608][ T8388] IPVS: ftp: loaded support on port[0] = 21 [ 217.667781][ T8376] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 217.683126][ T8386] IPVS: ftp: loaded support on port[0] = 21 [ 217.714195][ T8378] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.721868][ T8378] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.729424][ T8378] device bridge_slave_0 entered promiscuous mode [ 217.739061][ T8378] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.746320][ T8378] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.753992][ T8378] device bridge_slave_1 entered promiscuous mode [ 217.766302][ T8376] team0: Port device team_slave_0 added [ 217.776112][ T8376] team0: Port device team_slave_1 added [ 217.799736][ T8378] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 217.826415][ T8373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.836826][ T8378] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 217.932722][ T8376] device hsr_slave_0 entered promiscuous mode [ 217.999893][ T8376] device hsr_slave_1 entered promiscuous mode [ 218.068976][ T8382] chnl_net:caif_netlink_parms(): no params data found [ 218.086918][ T8378] team0: Port device team_slave_0 added [ 218.095379][ T8378] team0: Port device team_slave_1 added [ 218.202350][ T8378] device hsr_slave_0 entered promiscuous mode [ 218.249952][ T8378] device hsr_slave_1 entered promiscuous mode 09:36:32 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0xd14, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x6}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchmodat(r0, &(0x7f0000000180)='./file1\x00', 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x1f4, 0x0, 0x0, 0x0, 0x8}, 0xfffffd52) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) [ 218.352386][ T8382] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.365426][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.382099][ T8382] device bridge_slave_0 entered promiscuous mode [ 218.405145][ T8388] chnl_net:caif_netlink_parms(): no params data found [ 218.426270][ T26] rpcbind: RPC call returned error 13 09:36:32 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000300)) ioctl$int_in(r0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001001, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) pivot_root(0x0, 0x0) [ 218.456593][ T8386] chnl_net:caif_netlink_parms(): no params data found [ 218.477589][ T8382] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.491761][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.502415][ T8382] device bridge_slave_1 entered promiscuous mode [ 218.559428][ C0] hrtimer: interrupt took 23400 ns [ 218.585810][ T8376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.625244][ T8382] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.666057][ T8386] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.674213][ T8386] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.693048][ T8386] device bridge_slave_0 entered promiscuous mode [ 218.705571][ T8386] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.714835][ T8386] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.726105][ T8386] device bridge_slave_1 entered promiscuous mode [ 218.738114][ T8407] EXT4-fs (sda1): re-mounted. Opts: [ 218.751486][ T8382] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 218.777674][ T8388] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.785857][ T8388] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.798363][ T8388] device bridge_slave_0 entered promiscuous mode [ 218.815445][ T8382] team0: Port device team_slave_0 added [ 218.834758][ T8410] EXT4-fs (sda1): re-mounted. Opts: [ 218.841634][ T8376] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.861860][ T8386] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.873890][ T8388] bridge0: port 2(bridge_slave_1) entered blocking state 09:36:33 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000300)) ioctl$int_in(r0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001001, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) pivot_root(0x0, 0x0) [ 218.884629][ T8388] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.897766][ T8388] device bridge_slave_1 entered promiscuous mode [ 218.908776][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.921879][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.933557][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.944969][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.955428][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.962538][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.970570][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.980153][ T8382] team0: Port device team_slave_1 added [ 218.990481][ T8386] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 219.017737][ T8378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.066935][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.089131][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.120355][ T8417] EXT4-fs (sda1): re-mounted. Opts: [ 219.125935][ T8383] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.133038][ T8383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.141748][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.151171][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.160657][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.170691][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.179377][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.198184][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.213431][ T8388] bond0: Enslaving bond_slave_0 as an active interface with an up link 09:36:33 executing program 0: madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3) r0 = socket(0x40000000015, 0x5, 0x5) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xffffffffffffffff, 0x2, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) r1 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) r2 = getuid() getresgid(&(0x7f00000001c0)=0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000780)=0x0) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) r10 = fcntl$getown(r0, 0x9) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000480)={{0x6, r2, r5, r6, r7, 0x100, 0x2}, 0xba, 0x5f, 0x9, 0x7, r8, r10, 0x800}) syz_mount_image$hfsplus(&(0x7f0000000500)='hfsplus\x00', &(0x7f0000000540)='./file0\x00', 0x200, 0x1, &(0x7f0000000640)=[{&(0x7f0000000580)="273cf3eaff7b79b788c4524a5dc5e411d71980d0d9067db3836b7db9df35bf0faecf58a25881f738919035a804ec38ae576019e65b7d4f4a5f89f13ec9f86500558fba273c7babd1148446633bcc3f9f6778183db2e185dcb61fffa4feb2ca808bae8ddc3b7b41371960d8a2551057a855a292c9a7e7637ed854f4a51b4bb863b7bbc92a8803ac175dc4c746b147f59db48dd44b", 0x94}], 0x28400, &(0x7f0000000800)=ANY=[@ANYBLOB='umask=00000000000000000000006,gid=', @ANYRESHEX=r4, @ANYBLOB=',part=0x0000000000000000,nobarrier,gid=', @ANYRESHEX=r3, @ANYBLOB="2c706172743d3078303030303030303030303030303030322c6e6f6465636f6d706f73652c63726561746f723d8da2cd8f2c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="00d323f2ad5f37ee2de69096274ad47b6184fc834134e1d91b03691e61b79f392fafab86460bf14d42f40b095c9758c9bdf5fdeb981d291db8599b3f3bb987788118049f32448c99eb8194ccdaa5b36c0c66538ed742"]) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000080)=0x5f, 0x7, 0x1) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @reserved}, 0x10, 0x80000) r11 = msgget$private(0x0, 0x21) msgctl$IPC_INFO(r11, 0x3, &(0x7f0000000100)=""/142) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x1000, 0x800) [ 219.250924][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.258810][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.277594][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.286051][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.294991][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.307359][ T8378] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.316886][ T8388] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 219.381718][ T8382] device hsr_slave_0 entered promiscuous mode [ 219.410399][ T8382] device hsr_slave_1 entered promiscuous mode [ 219.460754][ T8386] team0: Port device team_slave_0 added [ 219.468128][ T8376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.487296][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.495349][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 09:36:33 executing program 0: r0 = socket(0x1b, 0x4, 0xfffffffffffffffb) r1 = syz_open_pts(0xffffffffffffff9c, 0x20000) r2 = getpgid(0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)=r2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) [ 219.509217][ T8388] team0: Port device team_slave_0 added [ 219.524737][ T8386] team0: Port device team_slave_1 added [ 219.551833][ T8376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.567301][ T8388] team0: Port device team_slave_1 added [ 219.589816][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.611799][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.644815][ T8383] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.651959][ T8383] bridge0: port 1(bridge_slave_0) entered forwarding state 09:36:34 executing program 0: r0 = socket$inet(0x2, 0x40000000000003, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x1, 0x8, [0x20000380, 0x0, 0x0, 0x200003b0, 0x200003e0], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYPTR, @ANYRES32, @ANYPTR64, @ANYBLOB="e019291bdf43fd33f09611e820e0b5abf9e3287d730d0e2bffbd3902adf1792d6afb4611f895e3fb59dd81688006d8c9067faf260dae25de47fca3b91b5f283ee820d62479a84425e0b3a6d88f0d14fd8eb34505c2f469f568c7f429e489b5bf574b1dd1925a04b2714d86b45f24f79764703bf99c65cd3a948133bb6497d400f380026f8a148ffb813bda0ddd", @ANYPTR64, @ANYRES32=r0], @ANYRESOCT=r0, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES32=r0], @ANYBLOB="07191c898f3b63bae7a661e4945cc07edf91c37ef5526bbfbdcf61f163a17fb09631a180e5a5c38b724253aee1736a349127e48a6701f18771e4cdc610cedd0c4ae636a4a40a46a3ea095dcb418af47f388d53af2db0d858daf7b1bb148781005dda2d883b783b9075bd3d8ad1fa7a02be355354dc4539a3b2c7c81929d1381d238f59c68eb779032d36f52545c7c00d", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYPTR64, @ANYRES16=r0]]]}, 0x80) [ 219.660730][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.669367][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.678045][ T8383] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.685140][ T8383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.693739][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.703370][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 09:36:34 executing program 0: r0 = socket$inet6(0xa, 0xfffffffffffffffb, 0xffffffffffffffff) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000180)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) mlockall(0x3) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r0, r0, &(0x7f0000000000), 0x4f3) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 219.774805][ T8388] device hsr_slave_0 entered promiscuous mode [ 219.829919][ T8388] device hsr_slave_1 entered promiscuous mode [ 219.894489][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.903687][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.912479][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.921409][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.930264][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.949807][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.963654][ T8378] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.975704][ T8378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 09:36:34 executing program 1: mq_open(&(0x7f0000000140)='wlan0\'eth1-eth0vmnet1\x00', 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$video(&(0x7f0000001580)='/dev/video#\x00', 0x1000000000000000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) lchown(&(0x7f0000000080)='./file0\x00', r2, r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000000)={0xf000000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f90a, 0x200000000000800, [], @p_u32=&(0x7f0000000040)}}) [ 220.032475][ T8386] device hsr_slave_0 entered promiscuous mode [ 220.063776][ T8386] device hsr_slave_1 entered promiscuous mode [ 220.142780][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.151657][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.172623][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.189942][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.201426][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.227491][ T8382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.250822][ T8378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.282723][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.294465][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.308535][ T8382] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.335210][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.344231][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.353564][ T2974] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.360681][ T2974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.368416][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.378062][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.386517][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.393600][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.403590][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.432722][ T8404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.452583][ T8388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.465444][ T8386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.475580][ T8462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.485042][ T8462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.494225][ T8462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.504259][ T8462] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.512668][ T8462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.521541][ T8462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.538276][ T8388] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.556078][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.573501][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 09:36:35 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x16, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x4) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x8}, 0x4) [ 220.604769][ T8382] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.625683][ T8382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.648392][ T8462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.668341][ T8462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.688131][ T8462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.697625][ T8462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.707016][ T8462] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.714147][ T8462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.723218][ T8462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.732171][ T8462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.743645][ T8462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.752525][ T8462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.764018][ T8462] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.771132][ T8462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.780504][ T8462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.788066][ T8462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.795951][ T8462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.825489][ T8386] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.840290][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.848295][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.888568][ T8382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.895745][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.905458][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.919324][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.927869][ T8383] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.934937][ T8383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.942979][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.951471][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.960082][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.968507][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.976897][ T8383] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.983963][ T8383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.991953][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.000877][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.009161][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.018111][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.026452][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.034906][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.044682][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.053063][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.064585][ T8388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.076326][ T8388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.097253][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.105754][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.113815][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.121841][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.130716][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.138759][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.147359][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.167177][ T8462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.177203][ T8462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.189791][ T8388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.202796][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.222804][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.251579][ T8386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 09:36:35 executing program 3: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x40, 0x20000) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000140)={0x3ff, 0x3ff, 0x1, 0x4}) r2 = geteuid() ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000440)) fsetxattr$security_capability(r0, &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v3={0x3000000, [{0x34, 0x4}, {0x5, 0xc8ef}], r2}, 0x18, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) mq_timedreceive(r3, &(0x7f0000000180)=""/105, 0x69, 0x5, &(0x7f0000000200)={0x77359400}) r4 = socket$inet6(0xa, 0xa, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") nanosleep(&(0x7f0000000000), 0x0) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000240)=0xfffffffffffffcc6) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000340)={r3, 0x0, 0xfffffffffffff000, 0x8000}) fremovexattr(r1, &(0x7f0000000380)=@known='trusted.overlay.upper\x00') ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x5, 0xf, 0x16, 0x10, "17f0e50bb78488cb9fda50d05232650ac2a40b1a5783b9512d1f491c46dc7fbf04d158ba1d9ada395dc125e7eed3814096900cc1c058a2dfaf127e992ec2ac56", "c0b6ab9a6f583aae1ef03289df3b87ceaac6d7a827961d7ad0548cf31f0c1cec", [0x4, 0x8000]}) [ 221.304127][ T8386] 8021q: adding VLAN 0 to HW filter on device batadv0 09:36:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000ac0)='syscall\x00') ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x100000001) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x7b, 0x0}}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000009c0)=[{&(0x7f0000000280)=""/225, 0xe1}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/166, 0xa6}, {&(0x7f0000000540)=""/251, 0xfb}, {&(0x7f0000000640)=""/79, 0x4f}, {&(0x7f00000006c0)=""/234, 0xea}, {&(0x7f00000007c0)=""/45, 0x2d}, {&(0x7f0000000800)=""/171, 0xab}, {&(0x7f00000008c0)=""/248, 0xf8}], 0x9, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{0x8, 0x2, 0x8, 0x2, 'syz0\x00', 0x7ff}, 0x2, 0x0, 0x3e0000, r2, 0x7, 0x6, 'syz1\x00', &(0x7f0000000100)=['fd/3\x00', '\x00', ']\x00', 'proc!security],\x00', 'syscall\x00', '&,#eth0]em0\x00', 'fd/3\x00'], 0x31, [], [0x4, 0x4, 0x8cd, 0x200]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 09:36:35 executing program 0: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000040)=0x2, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000000c0)={0x5, 0x4d, 0x3, {}, 0x65be, 0x3}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) sendmmsg(r1, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r2 = semget$private(0x0, 0x3, 0x608) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000001c0)=""/69) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000140)) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, 0x0) 09:36:35 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x80000, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340), 0x0, 0x0) semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="a98fb691076ab6664db66e53f924000045a7de154f0700df00000000000000bf5c7a"], 0x22) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000480)={'filter\x00'}, &(0x7f0000000300)=0x54) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) unlink(&(0x7f0000000340)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) r2 = add_key(0x0, &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000580)={0x5, 0xc, 0xf, "f38a845aec6029ae715eb72282d7df76dbda0fc063ad476c29fc1f3fda0b38f6144049e7b2747d0318b3c725c2365befa12290b1d2e1bc910b7ca033", 0x21, "23117c8bdb347611a46318587984e94b2224d35c2aa0004021dd4e5840e226c50b37d9442d4e247468bfdcb5b830a6513e631a5c39f56505737df19e", 0x50}) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, r2) unlinkat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) 09:36:35 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0) accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x0) accept(r0, 0x0, 0x0) 09:36:36 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000300)=0x81, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000f2b000/0x8000)=nil, 0x8000, 0x3) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000003c0)={0x7ff, 0x7, 0x4b, &(0x7f0000000340)="24483028263396de2a7ac73c624cb58f177b307f0a4cc50406a495f7d4b5235d69fb24597d4c46a0f052cb184d21ddd72b7416b6e31a3e0b6bac3aa79bbf350bfc0c3685564bd79386a0cb"}) recvfrom$rose(r1, &(0x7f0000000040)=""/180, 0xb4, 0x20, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x4, [@default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) r2 = getpgrp(0x0) move_pages(r2, 0x3, &(0x7f0000000480)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f000058f000/0x1000)=nil, &(0x7f0000924000/0x4000)=nil], &(0x7f00000004c0)=[0x5], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000440)=0x8001) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000140)) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') ioctl$NBD_DO_IT(r0, 0xab03) ioctl$BLKRRPART(r3, 0x125f, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r4, 0x200, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) 09:36:36 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x9, 0x100, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f0000000140)='security.SMACK64MMAP\x00', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = dup(r2) clock_gettime(0x0, 0x0) write$evdev(r3, &(0x7f0000000240)=[{}], 0x18) sendfile(r1, r2, 0x0, 0x20000102000007) add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000640), 0x4) ioctl$LOOP_CLR_FD(r1, 0x4c01) open(&(0x7f0000000600)='./bus\x00', 0x40, 0x0) close(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) 09:36:36 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vcan0\x00'}) connect(0xffffffffffffffff, 0x0, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x100000000000}, {0x77359400}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x2cf, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[]}}, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='/dev/vfio/vfio\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="0200"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="f4ffffff0000000000000000000000000709fa2ad93215bd"], 0x48}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000000)={0x6, 0x1, 'client0\x00', 0x7, "12434f709fe095bb", "840e099d6f599aa4d2b9076e8c44d7ac29580a5a62d8305f05a95d0a0c5a1396", 0x400, 0x9}) 09:36:36 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xfa, 0x10000) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000180)) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000280)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r2}) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x10, 0xff, 0xe7ff, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x501000, 0x0) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x4466, 0x200000) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000300)={0x1, 0x0, [0x3, 0x800, 0x81, 0x4, 0x100, 0x1, 0x4, 0x8]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x2, 0x0) 09:36:36 executing program 5: r0 = getpid() waitid(0x1, r0, 0x0, 0x0, 0x0) 09:36:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000ac0)='syscall\x00') ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x100000001) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x7b, 0x0}}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000009c0)=[{&(0x7f0000000280)=""/225, 0xe1}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/166, 0xa6}, {&(0x7f0000000540)=""/251, 0xfb}, {&(0x7f0000000640)=""/79, 0x4f}, {&(0x7f00000006c0)=""/234, 0xea}, {&(0x7f00000007c0)=""/45, 0x2d}, {&(0x7f0000000800)=""/171, 0xab}, {&(0x7f00000008c0)=""/248, 0xf8}], 0x9, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{0x8, 0x2, 0x8, 0x2, 'syz0\x00', 0x7ff}, 0x2, 0x0, 0x3e0000, r2, 0x7, 0x6, 'syz1\x00', &(0x7f0000000100)=['fd/3\x00', '\x00', ']\x00', 'proc!security],\x00', 'syscall\x00', '&,#eth0]em0\x00', 'fd/3\x00'], 0x31, [], [0x4, 0x4, 0x8cd, 0x200]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 09:36:36 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000]}}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="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", 0xcfa}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000003dc0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000002640)={0x0, 0x0, 0x0}, 0x0) r2 = accept4(r0, &(0x7f0000000080)=@x25={0x9, @remote}, &(0x7f0000000000)=0x80, 0x800) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) recvmsg$kcm(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x0) [ 222.039064][ T2495] print_req_error: I/O error, dev loop0, sector 504 flags 801 [ 222.047303][ T2495] Buffer I/O error on dev loop0, logical block 63, lost async page write 09:36:36 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac57f7bc42ea866837a38be72666060b88a13e45be6461fb1181ca2a3a3ca320473b8e628026d5443ae1c8adc5e6d98efb0b2e64171028f3"]) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)=ANY=[@ANYRESHEX]) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_vif\x00') r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x20081) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000140)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x2012, r0, 0x10000000) 09:36:36 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr$security_smack_entry(r2, &(0x7f0000000140)='security.SMACK64MMAP\x00', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2a482) write$binfmt_script(r4, &(0x7f0000000a40)=ANY=[@ANYBLOB="2321202e2f66696c6521283c63300a34f9734acde90647902722b4207be3c7fb91f1f7263dbe89308f0779010058f9ee77ff2e4f2180f6ce21454f1d9de6a401c2edbf280a7f61a7e4666bcbd436244824c9946154547b2bb12f5b0811c3a186da03d6e79e828d2e27e51312d06ab15107f958c44e53963a68ba3844c98746b2dc98f6eefad1c145f2dca787004e6fa11f5b954ca1be360289dd9c516f0b77645fbac0a1e2d9a6af826fb13179c7"], 0xaf) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, &(0x7f0000000240), 0x20000102000007) r5 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, r5) sendfile(r2, r0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, &(0x7f00000005c0)=0x1e) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x8000000000044000) io_setup(0x0, &(0x7f0000000240)) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000680)) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) open(&(0x7f0000000600)='./bus\x00', 0x0, 0x140) syz_genetlink_get_family_id$team(&(0x7f0000000740)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@remote, @in=@loopback}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000980)=0xe8) 09:36:36 executing program 4: clone(0x1fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_nanosleep(0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r2 = open(&(0x7f0000000000)='./file0\x00', 0x400602, 0x81) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000080)=0xfffffffffffffe7b) socket$inet_sctp(0x2, 0x5, 0x84) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x20) [ 222.621235][ T8545] bridge0: port 1(bridge_slave_0) entered disabled state 09:36:37 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'vlan0\x00', {0x2, 0x4e24, @rand_addr=0x7}}) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000000fc0)=0x8f4, 0x1e8) sendmmsg(r1, &(0x7f0000000f00)=[{{&(0x7f0000000a80)=@llc, 0x80, 0x0}}], 0x1, 0x0) 09:36:37 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1001) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) 09:36:37 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x101000) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x80800) fcntl$dupfd(r0, 0x0, r1) r2 = socket$inet6(0xa, 0x4000000080002, 0x0) connect$inet6(r2, &(0x7f0000005d00)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@flowinfo={{0x14}}], 0x18}}], 0x1, 0x0) 09:36:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x5, 0x3) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcf, 0x0, 0x4) 09:36:37 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x501000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000140)="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", 0x1000, 0x4000000, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @mcast1, 0x8}, 0x1c) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000000)=""/6) syz_genetlink_get_family_id$tipc(0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000100)={0x1f, {0x8, 0x1, 0x3, 0x0, 0x0, 0x65e01836}}, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000001140)={0x0, 0x8, 0x1d22e553, @link_local, 'bond_slave_0\x00'}) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000080)={0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 222.877219][ T8587] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 09:36:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x882, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000080)=0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r2 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000040)=""/12) 09:36:37 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x81000000) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x6, 0x9, 0xffffffffffffff76, 0x1}, {0xffff, 0x8, 0xec}, {0x1, 0x4, 0x8000, 0x6}, {0x4, 0x6}, {0x9, 0xfffffffffffff4eb, 0x2, 0xff}, {0x0, 0xc34, 0x101, 0x40}, {0x2, 0x5, 0x0, 0x1}, {0x0, 0x8629, 0x649, 0x55}]}) io_cancel(0x0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 09:36:37 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @map={0x18, 0xf, 0x1, 0x0, r0}], &(0x7f0000000100)='GPL\x00', 0x0, 0xfffffdf2, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0xff83) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x100000000, 0x92000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={@ipv4={[], [], @remote}, 0x51, r2}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r2) 09:36:37 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x8400, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x40) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB]) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000100)={0x7, 0x9, @value=0x10001}) 09:36:37 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'\x02\x00'}, &(0x7f0000000100), 0xfffff, 0xfffffffffffffffb) 09:36:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast1}}}, 0x90) mprotect(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x9) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000000080)=0x2e5) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001340)={0x0, 0x0, 0x0}, &(0x7f0000001380)=0xc) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7fff, 0x5, &(0x7f00000012c0)=[{&(0x7f00000000c0)="ccf75d1daaad3abec50caeea2fb3a4c2eef394a6c9f68a365a2020d0be3564c6c7565ee65237ec9a48261729205c28a6ef9af7a267e1147e23801b5d45012581e78d25bde6db76b04427f4458f33c69997183c01b90b5d19b6921277578f76fb5d78ae23d1933c8a913e1ca3f466438a175bab67fa415b927110563d46bb2a8242b9fb45c15774cd1c3d9aedcb31e9ceb68b7d5c1ae511ff681f28d39a6f68ab459591493222312894b813197c76b42b31f978a46977654ee3ce5c86c3692f712337e99707a29e687408eb1b", 0xcc, 0x2}, {&(0x7f00000001c0)="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", 0x1000, 0x4}, {&(0x7f00000011c0)="83663d8c337975a8d40e56ca76ddd4a2825be1c3c90b3a633e6612c8f7a68a17ffdc22e8789968bf13e57f6c053a9188df", 0x31, 0x1ff}, {&(0x7f0000001200)="d41f722cb2ebef3d9f5d15d0de121068db879866aafac44259c882", 0x1b, 0x401}, {&(0x7f0000001240)="62407ce1c5ffe0b9727a7c8a1ce5ee88f26cd3a3b68835da279e4c4a00b2bdb644ba47a4a4d1eebb1420fa2b07538ffe2987fa1ff8e692240954e66b02652515bed5035740f88218", 0x48, 0x7b}], 0x50, &(0x7f00000013c0)={[{@errors_recover='errors=recover'}, {@errors_recover='errors=recover'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x3}}, {@errors_continue='errors=continue'}, {@fmask={'fmask', 0x3d, 0x7}}, {@gid={'gid', 0x3d, r1}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x3}}, {@fmask={'fmask', 0x3d, 0x6}}], [{@dont_appraise='dont_appraise'}, {@subj_role={'subj_role'}}]}) [ 223.526875][ T8629] __ntfs_error: 3 callbacks suppressed [ 223.526888][ T8629] ntfs: (device loop5): parse_options(): Invalid gid option argument: 0x00000000ffffffff 09:36:39 executing program 4: r0 = socket(0xa, 0x80000, 0x7fff) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f00000008c0)="8da4363ac0ed0000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a0000010000000000ffffffffffffffff5f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 09:36:39 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x6, &(0x7f0000000000)=""/236, &(0x7f0000000100)=0xec) 09:36:39 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'\x02\x00'}, &(0x7f0000000100), 0xfffff, 0xfffffffffffffffb) 09:36:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x200, 0x3, 0x8, 0x0, 0x8, 0x0, 0x2, 0x6, 0x57, 0x9, 0x100000001, 0x0, 0x80, 0x2000000000000, 0x8001, 0x1ff, 0x7f, 0x0, 0xfc, 0x64, 0x0, 0x7, 0x8, 0x7994, 0x0, 0xde9, 0x7, 0x5e732b5f, 0x8000, 0x1, 0x6, 0x800, 0x2, 0x800, 0x7, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x4}, 0x100, 0x4, 0x3, 0x9, 0x8, 0x401, 0x10000}, 0xffffffffffffffff, 0x1, r4, 0x4) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000001c0)={r5, 0x3}, 0x8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write(r2, &(0x7f00000000c0)="16", 0x1) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) r6 = openat$vsock(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 09:36:39 executing program 3: io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, 0x0) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000600)="00de67fb79f444330520310764fd91ddcd43d707b1e832a0bc", 0x19, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x400, 0x101000) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x5, 0x0, 0xb7, 0x302a, 0x1}, &(0x7f0000000180)=0x14) syz_mount_image$ceph(&(0x7f0000000200)='ceph\x00', &(0x7f0000000240)='./file0\x00', 0x5, 0x1, &(0x7f0000000480)=[{&(0x7f00000002c0)="fe5fa70c4091241b51fa4676056e9e4e268ab0900e0eb5486769a5e22a18350bcf8bad232a4bf25ab66f6103ac975de4d1c2f7256c5f9338eb11eef0413c2740ca5a2d57f73c3c36536b3f339324e1052ebea95ba62430bb45e28ef499c26615746f9562c60a1d9ed3451c80d4e4489395edf75526e2236ced658d2b792143f08acdfb7271fa58dbe330e3c680f4641160eee9a9a90815342665926ae72692bcc072554a73ac19377ed49b7fd7823a3e95cb37cf5f9124da9c17fd06ce54a304898ecd1dc6bbca237fc882053f99c78e11d5cbbff795c31c8e39f7b1bdca6d39d46e4f813b37103dfb462935dfd2d06ac24bb119", 0xf4, 0x800}], 0x10004, &(0x7f00000004c0)='user\x00') setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0x3ff, 0xc, 0x3, 0x1, r3}, 0x10) 09:36:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5005e0bcfec7be070") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r1, &(0x7f0000000140)=[{{&(0x7f0000000080)=@caif=@dgm={0x25, 0x8}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r2 = pkey_alloc(0x0, 0x2) set_mempolicy(0x0, &(0x7f0000000040)=0x3f, 0xfffffffffffff001) pkey_free(r2) 09:36:40 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000080)={0x0, 0x2c9, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002dea5ea6acf5b6a16339a64f3cf42d867591da886d00000808009a490400040003"], 0x14}}, 0x0) [ 225.698618][ T8654] ceph: device name is missing path (no : separator in /dev/loop3) [ 225.735632][ T8655] BTRFS: device fsid ecf6f2a2-2997-48ae-b81e-1b00920efd9a devid 0 transid 0 /dev/loop4 [ 225.815311][ T8665] ceph: device name is missing path (no : separator in /dev/loop3) 09:36:40 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x103b0e93b836670f, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x100, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000240)={0x9, 0xa, 0x279d, 0x3, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='.\x00\x00\x00>\x00', 0x6}], 0x1}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8984413869d6e3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xe78}]}, 0xfdef) tkill(0x0, 0x0) 09:36:40 executing program 2: sched_setattr(0x0, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0xb, &(0x7f0000000100)=0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000180)="a8894124b92c3ed92f2227e2048ffce07e3a455b8e0f62c93fc7987007f7bf5585b64401a1a67ef5d8f8008a849ee9f7f2bc84a07f17a7a552f0e825a80a0c5496d9aa09e7d887d194d6357be0f102168202e90b4099753f427ba86680dc4c08ad0c41d4d454dc1e85934dbdd8ea6dbdbd5943f30c76b2b3634108cabf0a927e76effe901890f3ebc0355a1b48cd2c8ffbe92b335048dff83c7018da31c7aa6920650e652577b8f84235b71889fd", {0x1, 0x2, 0x31364d59, 0x6, 0x0, 0x10000, 0x9, 0xc70}}) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000280)={0x6002, 0xd000, 0x81, 0x100000000, 0x2}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setattr(r2, &(0x7f0000000240)={0x0, 0x3, 0x1, 0x200, 0x9, 0x1, 0x7fffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 09:36:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x400c55cb, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = semget$private(0x0, 0x2, 0x0) semctl$GETALL(r5, 0x0, 0xd, &(0x7f00000000c0)=""/248) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg(r1, 0x0, 0x0, 0x40400c0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) close(r4) accept$inet6(r2, 0xfffffffffffffffd, &(0x7f0000000000)) 09:36:40 executing program 0: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x2, 0x0, 0x40, 'queue0\x00'}) syz_open_pts(r2, 0x448000) splice(r0, 0x0, r3, 0x0, 0x8ec0, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000000)={0x7}, 0x7) write$P9_RRENAME(r3, &(0x7f0000002f40)={0x7}, 0x266) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000080)={0x7fffffff}, 0x4) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000100)={0x3f, @rand_addr=0xffffffffffff7677, 0x4e21, 0x3, 'dh\x00', 0x1, 0x0, 0x1}, 0x2c) close(r1) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000140)=@bpq0='bpq0\x00', 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@dev, @in6=@mcast2}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) sendmsg$nl_crypto(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="f80000001000000127bd7000fddbdf2572666337353339287874732874776f66697368292c7368613338342900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000200000000000000000000008000100ff070000080001000104000008000100070000001a9fd1c37a64159a9d7fb38e950c2d7cea892f8c0bdac842c3220b031a887c4a3fd8f920b7b057b08ddada648068e879f09cfea1f25d64ac327b7e62a3b1f2e591bfd4cd40115df3b834f939415ed38b1f2b985c0e5de9b0eba780ce93b5d7cb"], 0xf8}, 0x1, 0x0, 0x0, 0x6425db04d5d32f2e}, 0x800) 09:36:40 executing program 4: clock_gettime(0x1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000580)='bpf\x00', 0x80000, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000380)=@req={0x28, &(0x7f0000000340)={'bcsf0\x00', @ifru_names='lo\x00'}}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480)) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x2c, 0xfffffffffffffffe, 0x0) r1 = dup2(r0, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000680)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000a80)={{{@in, @in6=@ipv4={[], [], @dev}}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000007c0)=0xe8) fstat(r1, &(0x7f0000000980)) getpid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000cc0)={{{@in=@initdev, @in6=@ipv4={[], [], @multicast2}}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000dc0)=0xe8) lstat(&(0x7f0000000e00)='./file0/file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000f00)={0x0, r1, 0x0, 0x19, &(0x7f0000000ec0)='-ð0}!userem1/vboxnet0\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000001040)) getgid() getpgrp(0x0) lstat(&(0x7f0000001080)='./file1\x00', &(0x7f00000010c0)) getresgid(&(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)) getpgid(0x0) lstat(&(0x7f0000001200)='./file0\x00', &(0x7f0000001240)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000012c0), &(0x7f0000001300)=0xc) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001780)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000017c0)={{{@in6=@ipv4={[], [], @empty}, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f00000018c0)=0xe8) getresgid(&(0x7f0000001900), &(0x7f0000001940), &(0x7f0000001980)) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000004a00)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000004b00)=0xe8) stat(&(0x7f0000004b40)='./file0/file0\x00', &(0x7f0000004b80)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000004ec0)={{{@in6=@loopback, @in6=@loopback}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000004fc0)=0xe8) getgroups(0x1, &(0x7f0000005000)=[0x0]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000005080)={0xffffffffffffffff, r1, 0x0, 0x5, &(0x7f0000005040)='\'/]@\x00', 0xffffffffffffffff}, 0x30) lstat(&(0x7f00000050c0)='./file0\x00', &(0x7f0000005100)) getgroups(0x4, &(0x7f0000005180)=[0xee01, 0xffffffffffffffff, 0xee01, 0xee00]) getpgrp(0xffffffffffffffff) getresuid(&(0x7f0000000100), &(0x7f0000005200), &(0x7f0000005240)) getgid() fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f00000068c0)) getuid() fstat(r0, &(0x7f0000006900)) gettid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000006980)={{{@in6=@mcast1, @in6=@ipv4={[], [], @remote}}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000006a80)=0xe8) fstat(r1, &(0x7f0000006ac0)) gettid() fstat(r1, &(0x7f0000006b40)) stat(&(0x7f0000006bc0)='./file0/file0\x00', &(0x7f0000006c00)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000006c80)) getuid() fstat(r0, &(0x7f0000006cc0)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000006dc0)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast2}}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000006ec0)=0xe8) stat(&(0x7f0000006f00)='./file0/file0\x00', &(0x7f0000006f40)) getpgid(0x0) geteuid() stat(&(0x7f0000006fc0)='./file0\x00', &(0x7f0000007000)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000007080), &(0x7f00000070c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000007100)={{{@in6=@empty, @in6}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000007200)=0xe8) lstat(&(0x7f0000007240)='./file0\x00', &(0x7f0000007280)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000077c0)={0x0, r0, 0x0, 0x2, &(0x7f0000007780)='{\x00', 0xffffffffffffffff}, 0x30) lstat(&(0x7f0000007800)='./file0\x00', &(0x7f0000007840)) lstat(&(0x7f00000078c0)='./file0\x00', &(0x7f0000007900)) getpgid(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000008f40)) fstat(r1, &(0x7f0000008f80)) getpid() fstat(r0, &(0x7f0000009200)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000009280), &(0x7f00000092c0)=0xc) getpid() fstat(r0, &(0x7f0000009300)) getgid() ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000009380)) fstat(r0, &(0x7f00000093c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000009440), &(0x7f0000009480)=0xc) fcntl$getown(r2, 0x9) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000009880)) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000009900)) getpgid(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000009a40)) getgroups(0x6, &(0x7f0000009a80)=[0xffffffffffffffff, 0xee01, 0xee00, 0xee00, 0xee01, 0xee01]) getpgrp(0xffffffffffffffff) getuid() getegid() socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000009c00)=[{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000880)="c9963bb32b97ca7c62da07cf71f4e96f92a31328a0d85318977f25f887f3041462f9d8bd7f9ec09a7b1d5cd143099d6dd34c4556954d1541d425c40c8eecd4d4c62b8f65f8d34285397defc139743810f6cc99ca66c695c5734f972ca6c810a0b6c7046137ab38d243d7047f1f8586c54c300070681c1bf94de31482de087dfd56256a9c87cd3cffd7bb914cff408c478a9eabbf26fa5dd3dbdcf4506ef1e895570f62d857e93142537cf796893d9c1a73654d4aa9033d33668042f6524872ab8afc37020ccd391f5e3c4ac3eb20c68301715d45359e2e333aefe7fd34bc48247a9dd91faf4559b1166e9ab82e", 0xed}], 0x1, 0x0, 0x0, 0x8044}, {&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000003a00)="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", 0x1000}], 0x1, 0x0, 0x0, 0x40}, {&(0x7f0000001500)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000001680)="07eda3eb6246f14110823c92e717e3c80162d283afb2646d40e50a8e2c1f69a192bc78336e7192e69c98040a733be018d53d56f4a4b9ba912bebe57fb383b76eb91d720171577734f8453ce3693aceef5c0b2188a101290c55a3c5ff061476e5d48c0ee48ae4de8d1100f9cca41f55818a258393f779ad3228b2bb9bfa12b1939e84d4ae3ab12ded58dbd54805ca5bbadfe58a617c8ce1b8119863cfc6f1ecb222ee23e8fbbc8e94f268d12fe507e36ec72efc", 0xb3}], 0x1, 0x0, 0x0, 0x40000}, {&(0x7f0000004c80)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000004e40)=[{&(0x7f0000004d40)="c0a4f21d576a229a00b268d8f5bfbd8526e28ce56aae4dd8c27f9748b2d98b7686c029d7dc983f00902aec136bb36fda52cc1f95c43e23e2e7e439e5f74ec2b2cd0ce436bf73edd4574200eccc679cced5949e9bd4cc17183cf51ed3bf113012c588f3eb0836f06ba2938282d38123c13baaa1af177ede0f1c0b8eb41676ffd51a5467ef0b8afd97791e1f3d10642b0aaca7abba64d29d8574e1637d49309bf53f10a51e4f1caa1506e9a83e9f7055599c627a1883d5f47f9d361c803f5112325644f82b331814e23a7dba97dd8128d42a167c8db955a47e71", 0xd9}], 0x1, 0x0, 0x0, 0x4885}, {&(0x7f0000005380)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000005600)=[{&(0x7f0000005500)="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", 0xfe}], 0x1, 0x0, 0x0, 0x4040040}, {&(0x7f0000005680)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000006880)=[{&(0x7f00000067c0)="8c882b633035cf9e3e6af1a61cef48e5d1234c03813b124c3e78cae2a04c9e3c0a98968f6fd36a3757bddafdf51e64764e581c74b4b6cf1e7d7d8933b8324625588a527a53205794923e4984567d181bfbf161de729051ea9fff960b17fa3a665e6a7b3daeb4a7831b470f288714b77945e1e8d84909276f9852022d4c1b782e2ef50cbf89b459db85c3824821", 0x8d}], 0x1, 0x0, 0x0, 0x40}, {&(0x7f0000007440)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000007700)=[{&(0x7f0000007600)="5ae3e435f1138ea3149cd8b7d235d3130ebb5e2743f84bfff7e9be74ffacd06fc18d9ab8e5255f794b143c144a4ed505ae7407d2f34166a3bbc56c506cf7a579b701eb7a99c6d110c0d2ce96699418a0dddeff910ab0036c0224de7a12b8d220c7de21d4c5082567624c28042abb68176040ec6d27d6c8d6e5f7171da64d224576351560883a1e1384ce3f076311e28fd2f1e27f5b062c65987b76b199c84cd8d032b862e39e0942b8d660d95d7ec794fcab5b72f0aa088e06586a39743030b0fd9b11784667e76041a823ddddf15bdf72a6d8874401ba981bfeadbb46c660fd100ed9ee6cf3", 0xe6}], 0x1, 0x0, 0x0, 0x40}, {&(0x7f00000079c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000008dc0)=[{&(0x7f0000008c40)="2162df07f57acf3967534f427d14f7b7", 0x10}], 0x1, 0x0, 0x0, 0x4000010}, {&(0x7f0000009080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000091c0)=[{&(0x7f0000009180)="f0043788881fb66e4cb672ccd07588b74182dfea78d02c6f8ec43e87976d4933f089af841c2362f4d33e70216fe43b44ab1bca32b0", 0x35}], 0x1}, {&(0x7f0000009580)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000009740)=[{&(0x7f0000009680)="01c3972767c1aba97bb31154fb0ac7cae0ccce508e2729ba81570284c8fd710aef7837634ad99baa6e2a63da9620de626aaaf6c3049949f4a6c443a43e7bd5e31b9db10a874d0161c428f546f7b38037fa9d226133fff228cdad8f8294ee5298ae9756db31b65b3ca58bd94eaaaafa4dd407359be0a0f147cacd23b55f8d2824999f033ede247aa9c1203b809f3510c55541bb319d929a994ca55549550ee0b3666d3435d3", 0xa5}], 0x1, 0x0, 0x0, 0x4000080}], 0xa, 0x80) fchmod(r1, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000840)=0xe8) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x18}, @loopback, @dev={0xfe, 0x80, [], 0x26}, 0x6, 0x0, 0x4, 0x100, 0x101, 0x80, r3}) [ 226.309715][ T8690] device nr0 entered promiscuous mode 09:36:40 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xbe}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002db, 0x6c00000000000600) 09:36:40 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000940)='/dev/hwrng\x00', 0x42502, 0x0) inotify_add_watch(r1, &(0x7f0000000980)='./file0\x00', 0x0) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="62747266732e5e76626f786e65743176626f786e6574306d696d655f74797065026574683070726f636563e5d67e7468316b657972696e6773797374656d706f7369785f61636c5f616363"], &(0x7f00000000c0)=""/218, 0xda) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$xdp(r0, &(0x7f0000000900)={&(0x7f0000000200)={0x2c, 0x5, r2, 0x28}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000340)="d9bbc8dc2a2c72c849223ac93b3b6b9c5ffdcaf4da90a3189f2bb2f8156852c20606e0027b963fdb2e3b44cecb42f58cf13e2bfdd1f01c25400b721355dd215e5f3dfc9313485e80653e5cc028da572733d8312a229fa4cf93e8bc1c904e382da384788c872def649c78d6afaa428cdd6dc6d00332eaa32cf65b07869447c984df290c9d1d0fb9ddfe051657cfa842f94a517aea017f181a0989ebdd6b3e5faa0df02e234abfc8183af161e1190f9294a856712bfa90f17dfa404933caa5d5fdd19a666c41c607d013c357f1bd2fbd4f3c08ea1f31a2e2f15ecc51a9", 0xdc}, {&(0x7f0000000240)="01a62ff8e5c41312074e53eb68a44af36f7b4829d947489d8a176761e27864c33c81ab904991265076427699fd98a5468e3650825688926a8b7042a72838b6d8fa3d557e92a48fb40827952af224eb3caf038050c4d388446200a6b4f95b06c93e6b98dc3855f131b1aa3ba89a9ed711e27fdb98cb70c8ef7651302be19028ac69e31f80615957d59cad7b5049c002921314851f", 0x94}, {&(0x7f0000000440)="0edea1b2d9844102bce72bb56ad4e7a76e5dcfd19fd0befb626955a3a470b3b7ad38908d9a22854c92cc28d65c55b343423b250ca37359b57e38a42ea7de7afb4ca3f39f71caca92002e934a48cf90a6c26cfb5ce4fa25af3695d29fda77ca347f3cc94c04b5c5484fe8e799174809e28e8a712d6006811244d7e0177f3b06a3817008ffed5c29472b19dfec16135ae812ed333934da83e10e7d676d55774b7e64520f421f0844c058b3420bb70a9356318fe7c642a3b30c90f57014e87d7f5080cf9a5c752582035fa5e60a84b730c60b9f962ab86d67f0acc233eabe70e084f5d48c9571c3aee1b3eb9e48b7c3f7e29039988cf9", 0xf5}, {&(0x7f0000000540)="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", 0xfc}, {&(0x7f0000000640)="f56fea3b219e4055616d007b3fb4321cf5f60362e440b8eaa604970af2529751eec2c8196ab95a238530d0e2cedfdbaa9074fa470290092df7b578e911dc84ccbfc2d99c3f1da67fa9878943a1cedeebaa4657e525bc5ad7caf4c050742be83655a5f7a7dcc748241a", 0x69}, {&(0x7f00000006c0)="f54d901ec93e9b235f3835222791a28a68d3a174a5588ab9634ff0af34bba20add022820f0d46a7097b7375b095d22a3b8d06480c31961806feeb5c54873af5cd335ab996bea6f1eb820a8b766b8626a117792afb6eeb17ff146a4cbbd8f18c41a1dfa2586eaf72dd47534ca3b00b9bcbc3ef19b3f1eef4fa4a40051120360ce0fe2ef629a9053c705233eb411ba835c3bd29012e0a7949ac33b7ece", 0x9c}, {&(0x7f0000000780)="796a2ed7cac1a8b2f6f22b", 0xb}, {&(0x7f00000007c0)="f154c7bde2673fadea67174b61c0096b769ff48017d59bb094a8d39d22e9212e25c7fb9b3b46cc5652a8e40573708d22cc420d5ad58b6580aa60215402158910e21f163d08ebdbb1b7ac05fa80af57473fbd20c4daddfcfceebfec2e770816f55762e61c9a14c6ad7864f3d69bfd3af0d5fbe4705d8081ce66ffdcf01a0901e747328f58a000", 0x86}], 0x8, 0x0, 0x0, 0x4008001}, 0x8000) 09:36:41 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x70, 0x6, 0x76, 0x9a, 0x9, 0x0, 0x800, 0x800, 0x0, 0x7, 0xa116, 0x1000, 0xff, 0x5, 0x7f7, 0x7, 0x5, 0x3, 0x6567bdbe, 0x5, 0xba, 0x7, 0x8, 0xf79d, 0x20, 0x8, 0x8, 0x10001, 0x7, 0x7f, 0x7, 0x5, 0x3, 0x80000001, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x3}, 0xe100, 0xffffffff, 0x7, 0x4, 0x8, 0x0, 0x4}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x2, 0x70, 0x3, 0x0, 0x326, 0x0, 0x0, 0x3, 0x8058, 0xf, 0x401, 0x2, 0x564f, 0x5, 0x4, 0xfff, 0xa3, 0x2, 0x5, 0x8, 0xa0b7, 0x7307, 0x9, 0x1, 0xfffffffffffffff8, 0x3, 0x9, 0xfff, 0xfffffffffffffffe, 0x0, 0x800, 0x6, 0x3, 0x8, 0x7fff, 0x637, 0x1bba00000000000, 0x2b, 0x0, 0xb87, 0x3, @perf_config_ext={0x7, 0x7}, 0x900, 0xffffffff, 0x800, 0x6, 0x0, 0x1abd, 0x3ff}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000000)=@short={0xb, @remote, @default, 0x1, @default}, 0x1c) 09:36:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0x2, &(0x7f000079bffc), &(0x7f0000000080)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000040)='\x95Z\t\x00\x00\x00', 0x0) ftruncate(r5, 0x40001) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f00000003c0)={0xfffffffffffffff9, 0x8, 0x2, 0x101, 0x7, 0x0, 0x2}) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x200000, 0x0) recvfrom$inet(r3, &(0x7f00000004c0)=""/73, 0x49, 0x10020, &(0x7f0000000540)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$ION_IOC_HEAP_QUERY(r6, 0xc0184908, &(0x7f0000000380)={0x34, 0x0, &(0x7f0000000340)}) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000000c0)=0x4, 0xfd88) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r0, r6, 0x0, 0x6af2) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x4000, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r7, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e24, 0x81, @dev={0xfe, 0x80, [], 0x16}, 0x3}, {0xa, 0x4e20, 0x4ca6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xa3f}, 0x8, [0x7, 0xbab9, 0x6, 0x495, 0x51c, 0x7768, 0x8, 0x45]}, 0x5c) r8 = open(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x800}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000240)={r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}}}, 0x84) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, &(0x7f0000000100)={'security\x00'}, 0x28) 09:36:41 executing program 5: socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) r2 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r2, &(0x7f0000000080), 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffed9, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x3) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000400)={0x980000, 0x2, 0x101, [], &(0x7f00000003c0)={0x9f0901, 0xc37, [], @string=&(0x7f0000000380)=0x4}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000280)) clock_gettime(0x5, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x4000}, 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) [ 226.892748][ T8676] device nr0 entered promiscuous mode 09:36:41 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) read(r0, &(0x7f0000000000)=""/42, 0x2a) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x1e9) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x238, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x62}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7a}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc6c}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4890}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x539e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe000000000000}]}, @TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'teql0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xffffffffffffff94, @dev={0xfe, 0x80, [], 0x15}, 0x7ca1}}}}]}, @TIPC_NLA_BEARER={0x94, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xc12a, @mcast1, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}, @TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbd0}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x5}, 0x20040000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2080, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000080)=""/65, &(0x7f0000000100)=0x41) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) 09:36:41 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5500000018007fafb72d1cb2a4a2809302", 0x11}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1100000032"], 0x1}}, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7c, 0x2) connect(r0, &(0x7f0000000200)=@in={0x2, 0x4e21, @multicast2}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x40, 0xffffffff}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e22, 0x1, @remote, 0x8}}, 0x81, 0x10000, 0x0, 0x0, 0x923}, &(0x7f0000000380)=0x98) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(r3) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xff63, 0x0, 0x0, 0xfffffffffffffe93) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 227.329777][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 227.335805][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 227.358058][ T3007] ================================================================== [ 227.366470][ T3007] BUG: KASAN: use-after-free in blk_mq_free_rqs+0x49f/0x4b0 [ 227.373754][ T3007] Read of size 8 at addr ffff8880a389e6d0 by task kworker/0:2/3007 [ 227.381637][ T3007] [ 227.383983][ T3007] CPU: 0 PID: 3007 Comm: kworker/0:2 Not tainted 5.2.0-rc3-next-20190607 #11 [ 227.392748][ T3007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.392777][ T3007] Workqueue: events __blk_release_queue [ 227.408358][ T3007] Call Trace: [ 227.411653][ T3007] dump_stack+0x172/0x1f0 [ 227.415991][ T3007] ? blk_mq_free_rqs+0x49f/0x4b0 [ 227.420936][ T3007] print_address_description.cold+0xd4/0x306 [ 227.427015][ T3007] ? blk_mq_free_rqs+0x49f/0x4b0 [ 227.431968][ T3007] ? blk_mq_free_rqs+0x49f/0x4b0 [ 227.436913][ T3007] __kasan_report.cold+0x1b/0x36 [ 227.441856][ T3007] ? blk_mq_free_rqs+0x49f/0x4b0 [ 227.446794][ T3007] kasan_report+0x12/0x20 [ 227.451129][ T3007] __asan_report_load8_noabort+0x14/0x20 [ 227.456761][ T3007] blk_mq_free_rqs+0x49f/0x4b0 [ 227.461519][ T3007] ? dd_exit_queue+0x92/0xd0 [ 227.466117][ T3007] ? kfree+0x1ec/0x2a0 [ 227.470179][ T3007] blk_mq_sched_tags_teardown+0x126/0x210 [ 227.475886][ T3007] ? dd_request_merge+0x230/0x230 [ 227.480894][ T3007] blk_mq_exit_sched+0x1fa/0x2d0 [ 227.485818][ T3007] elevator_exit+0x70/0xa0 [ 227.490216][ T3007] __blk_release_queue+0x127/0x330 [ 227.495311][ T3007] process_one_work+0x989/0x1790 [ 227.500234][ T3007] ? pwq_dec_nr_in_flight+0x320/0x320 [ 227.505584][ T3007] ? lock_acquire+0x16f/0x3f0 [ 227.510251][ T3007] worker_thread+0x98/0xe40 [ 227.514735][ T3007] ? trace_hardirqs_on+0x67/0x220 [ 227.519763][ T3007] kthread+0x354/0x420 [ 227.523825][ T3007] ? process_one_work+0x1790/0x1790 [ 227.529003][ T3007] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 227.535229][ T3007] ret_from_fork+0x24/0x30 [ 227.539629][ T3007] [ 227.541941][ T3007] Allocated by task 1: [ 227.545993][ T3007] save_stack+0x23/0x90 [ 227.550127][ T3007] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 227.555747][ T3007] kasan_kmalloc+0x9/0x10 [ 227.560056][ T3007] kmem_cache_alloc_trace+0x151/0x750 [ 227.565405][ T3007] loop_add+0x51/0x8d0 [ 227.569456][ T3007] loop_init+0x1fe/0x25a [ 227.573680][ T3007] do_one_initcall+0x107/0x7ba [ 227.578423][ T3007] kernel_init_freeable+0x4d4/0x5c3 [ 227.583598][ T3007] kernel_init+0x12/0x1c5 [ 227.587917][ T3007] ret_from_fork+0x24/0x30 [ 227.592307][ T3007] [ 227.594611][ T3007] Freed by task 8739: [ 227.598570][ T3007] save_stack+0x23/0x90 [ 227.602705][ T3007] __kasan_slab_free+0x102/0x150 [ 227.607617][ T3007] kasan_slab_free+0xe/0x10 [ 227.612098][ T3007] kfree+0x106/0x2a0 [ 227.615968][ T3007] loop_remove+0xa1/0xd0 [ 227.620206][ T3007] loop_control_ioctl+0x320/0x360 [ 227.625220][ T3007] do_vfs_ioctl+0xdb6/0x13e0 [ 227.629789][ T3007] ksys_ioctl+0xab/0xd0 [ 227.633922][ T3007] __x64_sys_ioctl+0x73/0xb0 [ 227.638488][ T3007] do_syscall_64+0xfd/0x680 [ 227.642975][ T3007] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 227.648837][ T3007] [ 227.651145][ T3007] The buggy address belongs to the object at ffff8880a389e4c0 [ 227.651145][ T3007] which belongs to the cache kmalloc-1k of size 1024 [ 227.665175][ T3007] The buggy address is located 528 bytes inside of [ 227.665175][ T3007] 1024-byte region [ffff8880a389e4c0, ffff8880a389e8c0) [ 227.678519][ T3007] The buggy address belongs to the page: [ 227.684143][ T3007] page:ffffea00028e2780 refcount:1 mapcount:0 mapping:ffff8880aa400ac0 index:0x0 compound_mapcount: 0 [ 227.695050][ T3007] flags: 0x1fffc0000010200(slab|head) [ 227.700405][ T3007] raw: 01fffc0000010200 ffffea0002965d88 ffffea00028e3588 ffff8880aa400ac0 [ 227.708970][ T3007] raw: 0000000000000000 ffff8880a389e040 0000000100000007 0000000000000000 [ 227.718010][ T3007] page dumped because: kasan: bad access detected [ 227.724411][ T3007] [ 227.726719][ T3007] Memory state around the buggy address: [ 227.732329][ T3007] ffff8880a389e580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.740368][ T3007] ffff8880a389e600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.748405][ T3007] >ffff8880a389e680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.756439][ T3007] ^ [ 227.763088][ T3007] ffff8880a389e700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.771127][ T3007] ffff8880a389e780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.779183][ T3007] ================================================================== [ 227.787218][ T3007] Disabling lock debugging due to kernel taint [ 227.793703][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 227.799504][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 227.835070][ T3007] Kernel panic - not syncing: panic_on_warn set ... [ 227.841704][ T3007] CPU: 0 PID: 3007 Comm: kworker/0:2 Tainted: G B 5.2.0-rc3-next-20190607 #11 [ 227.851844][ T3007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.861157][ T8748] QAT: Invalid ioctl [ 227.861907][ T3007] Workqueue: events __blk_release_queue [ 227.861922][ T3007] Call Trace: [ 227.865935][ T8748] QAT: Invalid ioctl [ 227.871349][ T3007] dump_stack+0x172/0x1f0 [ 227.871364][ T3007] panic+0x2cb/0x744 [ 227.871377][ T3007] ? __warn_printk+0xf3/0xf3 [ 227.871390][ T3007] ? blk_mq_free_rqs+0x49f/0x4b0 [ 227.871407][ T3007] ? preempt_schedule+0x4b/0x60 [ 227.875238][ T8748] QAT: Invalid ioctl [ 227.878552][ T3007] ? ___preempt_schedule+0x16/0x18 [ 227.878565][ T3007] ? trace_hardirqs_on+0x5e/0x220 [ 227.878579][ T3007] ? blk_mq_free_rqs+0x49f/0x4b0 [ 227.878592][ T3007] end_report+0x47/0x4f [ 227.878602][ T3007] ? blk_mq_free_rqs+0x49f/0x4b0 [ 227.878613][ T3007] __kasan_report.cold+0xe/0x36 [ 227.878626][ T3007] ? blk_mq_free_rqs+0x49f/0x4b0 [ 227.878637][ T3007] kasan_report+0x12/0x20 [ 227.878649][ T3007] __asan_report_load8_noabort+0x14/0x20 [ 227.878665][ T3007] blk_mq_free_rqs+0x49f/0x4b0 [ 227.883476][ T8748] QAT: Invalid ioctl [ 227.886895][ T3007] ? dd_exit_queue+0x92/0xd0 [ 227.886907][ T3007] ? kfree+0x1ec/0x2a0 [ 227.886924][ T3007] blk_mq_sched_tags_teardown+0x126/0x210 [ 227.886937][ T3007] ? dd_request_merge+0x230/0x230 [ 227.886947][ T3007] blk_mq_exit_sched+0x1fa/0x2d0 [ 227.886965][ T3007] elevator_exit+0x70/0xa0 [ 227.886983][ T3007] __blk_release_queue+0x127/0x330 [ 227.891630][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 227.896465][ T3007] process_one_work+0x989/0x1790 [ 227.901327][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 227.905156][ T3007] ? pwq_dec_nr_in_flight+0x320/0x320 [ 227.911915][ T8748] QAT: Invalid ioctl [ 227.915235][ T3007] ? lock_acquire+0x16f/0x3f0 [ 227.915256][ T3007] worker_thread+0x98/0xe40 [ 227.915270][ T3007] ? trace_hardirqs_on+0x67/0x220 [ 227.915293][ T3007] kthread+0x354/0x420 [ 227.920760][ T8748] QAT: Invalid ioctl [ 227.924348][ T3007] ? process_one_work+0x1790/0x1790 [ 227.924362][ T3007] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 227.924377][ T3007] ret_from_fork+0x24/0x30 [ 227.925161][ T3007] Kernel Offset: disabled [ 228.059638][ T3007] Rebooting in 86400 seconds..