[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 61.802543][ T27] audit: type=1800 audit(1562978821.387:25): pid=9056 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 61.846126][ T27] audit: type=1800 audit(1562978821.397:26): pid=9056 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 61.892293][ T27] audit: type=1800 audit(1562978821.397:27): pid=9056 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.243' (ECDSA) to the list of known hosts. 2019/07/13 00:47:11 fuzzer started 2019/07/13 00:47:14 dialing manager at 10.128.0.26:37845 2019/07/13 00:47:14 syscalls: 2465 2019/07/13 00:47:14 code coverage: enabled 2019/07/13 00:47:14 comparison tracing: enabled 2019/07/13 00:47:14 extra coverage: extra coverage is not supported by the kernel 2019/07/13 00:47:14 setuid sandbox: enabled 2019/07/13 00:47:14 namespace sandbox: enabled 2019/07/13 00:47:14 Android sandbox: /sys/fs/selinux/policy does not exist 2019/07/13 00:47:14 fault injection: enabled 2019/07/13 00:47:14 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/07/13 00:47:14 net packet injection: enabled 2019/07/13 00:47:14 net device setup: enabled 00:47:55 executing program 0: syzkaller login: [ 115.681714][ T9224] IPVS: ftp: loaded support on port[0] = 21 00:47:55 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)) dup(0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x3, 0x2000) [ 115.801402][ T9224] chnl_net:caif_netlink_parms(): no params data found [ 115.884198][ T9224] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.905937][ T9224] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.914103][ T9224] device bridge_slave_0 entered promiscuous mode [ 115.947798][ T9224] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.954998][ T9224] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.963656][ T9224] device bridge_slave_1 entered promiscuous mode [ 116.003962][ T9228] IPVS: ftp: loaded support on port[0] = 21 [ 116.019663][ T9224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.032722][ T9224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:47:55 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) pipe(&(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) [ 116.078869][ T9224] team0: Port device team_slave_0 added [ 116.089198][ T9224] team0: Port device team_slave_1 added [ 116.219302][ T9224] device hsr_slave_0 entered promiscuous mode 00:47:55 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000400)=""/175, 0x1a, 0xaf, 0x1}, 0x20) [ 116.286426][ T9224] device hsr_slave_1 entered promiscuous mode [ 116.382642][ T9230] IPVS: ftp: loaded support on port[0] = 21 [ 116.427584][ T9224] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.434811][ T9224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.442600][ T9224] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.449710][ T9224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.523594][ T9228] chnl_net:caif_netlink_parms(): no params data found [ 116.597980][ T9224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.614824][ T9234] IPVS: ftp: loaded support on port[0] = 21 00:47:56 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) [ 116.643201][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.656688][ T9233] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.675125][ T9233] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.691388][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 116.724485][ T9224] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.751897][ T9228] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.765965][ T9228] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.773916][ T9228] device bridge_slave_0 entered promiscuous mode [ 116.814129][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.826965][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.834033][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.867717][ T9228] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.874811][ T9228] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.894478][ T9228] device bridge_slave_1 entered promiscuous mode [ 116.908190][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.917496][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.928621][ T9233] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.935677][ T9233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.944298][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.970046][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.978842][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.990436][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.996853][ T9237] IPVS: ftp: loaded support on port[0] = 21 [ 116.999692][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.015977][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.031949][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 00:47:56 executing program 5: prctl$PR_MCE_KILL(0x21, 0x1, 0x67477c60a7d15590) [ 117.062222][ T9228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.077435][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.089611][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.155003][ T9224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.170317][ T9224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.180286][ T9228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.206611][ T9228] team0: Port device team_slave_0 added [ 117.221464][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.230027][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.258536][ T9240] IPVS: ftp: loaded support on port[0] = 21 [ 117.272640][ T9228] team0: Port device team_slave_1 added [ 117.293069][ T9224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.344829][ T9230] chnl_net:caif_netlink_parms(): no params data found [ 117.418997][ T9228] device hsr_slave_0 entered promiscuous mode [ 117.436209][ T9228] device hsr_slave_1 entered promiscuous mode [ 117.496030][ T9228] debugfs: Directory 'hsr0' with parent '/' already present! 00:47:57 executing program 0: umount2(0x0, 0xd79f6cdb54811023) 00:47:57 executing program 0: 00:47:57 executing program 0: [ 117.773467][ T9230] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.782394][ T9230] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.790891][ T9230] device bridge_slave_0 entered promiscuous mode [ 117.799694][ T9230] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.807179][ T9230] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.815165][ T9230] device bridge_slave_1 entered promiscuous mode [ 117.832536][ T9234] chnl_net:caif_netlink_parms(): no params data found 00:47:57 executing program 0: [ 117.899127][ T9237] chnl_net:caif_netlink_parms(): no params data found [ 117.925536][ T9230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 00:47:57 executing program 0: [ 117.991702][ T9230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:47:57 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/userio\x00', 0x0, 0x0) pipe(&(0x7f0000000180)) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) [ 118.123920][ T9230] team0: Port device team_slave_0 added 00:47:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) [ 118.170214][ T9230] team0: Port device team_slave_1 added [ 118.179864][ T9234] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.191020][ T9234] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.213604][ T9234] device bridge_slave_0 entered promiscuous mode [ 118.241372][ T9228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.250845][ T9240] chnl_net:caif_netlink_parms(): no params data found [ 118.256880][ C1] hrtimer: interrupt took 32394 ns [ 118.303713][ T9234] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.312182][ T9234] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.320559][ T9234] device bridge_slave_1 entered promiscuous mode [ 118.405262][ T9230] device hsr_slave_0 entered promiscuous mode [ 118.446358][ T9230] device hsr_slave_1 entered promiscuous mode [ 118.486141][ T9230] debugfs: Directory 'hsr0' with parent '/' already present! [ 118.500073][ T9237] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.507599][ T9237] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.515167][ T9237] device bridge_slave_0 entered promiscuous mode [ 118.523103][ T9237] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.531094][ T9237] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.538932][ T9237] device bridge_slave_1 entered promiscuous mode [ 118.587542][ T9237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.599308][ T9234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.608789][ T9240] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.616271][ T9240] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.623855][ T9240] device bridge_slave_0 entered promiscuous mode [ 118.633047][ T9240] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.640227][ T9240] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.648239][ T9240] device bridge_slave_1 entered promiscuous mode [ 118.657352][ T9237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.680731][ T9234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.694541][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.702569][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.726199][ T9237] team0: Port device team_slave_0 added [ 118.745612][ T9240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.772631][ T9237] team0: Port device team_slave_1 added [ 118.780050][ T9240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.805351][ T9240] team0: Port device team_slave_0 added [ 118.814475][ T9228] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.824304][ T9234] team0: Port device team_slave_0 added [ 118.831843][ T9234] team0: Port device team_slave_1 added [ 118.839990][ T9240] team0: Port device team_slave_1 added [ 118.885012][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.894087][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.902606][ T3758] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.909666][ T3758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.989008][ T9234] device hsr_slave_0 entered promiscuous mode [ 119.046344][ T9234] device hsr_slave_1 entered promiscuous mode [ 119.085918][ T9234] debugfs: Directory 'hsr0' with parent '/' already present! [ 119.103892][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.169155][ T9237] device hsr_slave_0 entered promiscuous mode [ 119.206243][ T9237] device hsr_slave_1 entered promiscuous mode [ 119.245999][ T9237] debugfs: Directory 'hsr0' with parent '/' already present! [ 119.261604][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.271061][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.279887][ T9227] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.286989][ T9227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.369639][ T9240] device hsr_slave_0 entered promiscuous mode [ 119.416099][ T9240] device hsr_slave_1 entered promiscuous mode [ 119.466027][ T9240] debugfs: Directory 'hsr0' with parent '/' already present! [ 119.478492][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.490682][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.524970][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.537874][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.547623][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.557220][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.565459][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.574119][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.582886][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.611053][ T9230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.631490][ T9228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.642633][ T9228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.663979][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.672990][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.693610][ T9230] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.716565][ T9228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.723912][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.737218][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.766868][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.775488][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.784993][ T3758] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.792113][ T3758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.811674][ T9237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.827232][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.835656][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.845063][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.853853][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.860937][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.869476][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.901206][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.912533][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.921460][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.930772][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.938604][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.956378][ T9237] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.981129][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.988921][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.998924][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.007378][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.015555][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.023935][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.032526][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.041025][ T2816] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.048160][ T2816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.055764][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.064511][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.072998][ T2816] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.080102][ T2816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.091900][ T9230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.103740][ T9230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.114622][ T9234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.166946][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.179112][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.187673][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.200373][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.209908][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.222299][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.230897][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.239472][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.248044][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.258346][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 00:47:59 executing program 1: [ 120.281302][ T9240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.298809][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.309246][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.337011][ T9234] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.357667][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.377352][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.396767][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.404670][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.425577][ T9237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.438020][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.451258][ T9230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.462696][ T9240] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.484752][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.494163][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.554234][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.562972][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.572476][ T9227] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.579593][ T9227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.587381][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.596131][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.604413][ T9227] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.611517][ T9227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.619145][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.627918][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.636415][ T9227] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.643459][ T9227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.651239][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.659986][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.668590][ T9227] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.675627][ T9227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.683302][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.692156][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.701555][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.709814][ T9227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.737592][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.748049][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.757122][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.765586][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.774942][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.786852][ T9237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.799334][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.816961][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.825689][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.834521][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.843155][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.864368][ T9234] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 120.879165][ T9234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.892589][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.902113][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.910926][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.919598][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.967256][ T9234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.975743][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.999473][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.022788][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.048248][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.057170][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.069080][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.077414][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.095254][ T9240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 00:48:00 executing program 2: [ 121.183248][ T9240] 8021q: adding VLAN 0 to HW filter on device batadv0 00:48:01 executing program 3: 00:48:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 00:48:01 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) 00:48:01 executing program 1: 00:48:01 executing program 4: 00:48:01 executing program 2: 00:48:01 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) pipe(&(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 00:48:01 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)) dup(0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 00:48:01 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 00:48:01 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x2000) 00:48:01 executing program 1: 00:48:01 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 00:48:01 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f000005b000/0x1000)=nil, 0x1000, 0x0, 0xa132, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) 00:48:01 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x80000000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 00:48:02 executing program 5: 00:48:02 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x80000000, &(0x7f0000000140)="2381090200000000000070360600776699231de7137760e122590be2abd588d3077e13262b19ff4e41fb0a") dup(0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 00:48:02 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) pipe(&(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) syz_open_dev$dspn(0x0, 0x0, 0x0) 00:48:02 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x2000) 00:48:02 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 00:48:02 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x80000000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 00:48:02 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x80000000, &(0x7f0000000140)="2381090200000000000070360600776699231de7137760e122590be2abd588d3077e13262b19ff4e41fb0a") dup(0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 00:48:02 executing program 4: 00:48:02 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x2000) 00:48:02 executing program 0: 00:48:02 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) pipe(&(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x2000) 00:48:02 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) pipe(&(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 00:48:02 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) pipe(&(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 00:48:02 executing program 0: 00:48:02 executing program 1: 00:48:02 executing program 2: 00:48:02 executing program 3: 00:48:02 executing program 5: 00:48:02 executing program 0: 00:48:02 executing program 2: 00:48:02 executing program 4: 00:48:02 executing program 3: 00:48:02 executing program 1: 00:48:02 executing program 5: 00:48:02 executing program 3: 00:48:02 executing program 0: 00:48:02 executing program 4: 00:48:02 executing program 2: 00:48:03 executing program 5: 00:48:03 executing program 1: 00:48:03 executing program 3: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) 00:48:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) 00:48:03 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) 00:48:03 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/userio\x00', 0x0, 0x0) pipe(&(0x7f0000000180)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) 00:48:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0xf, &(0x7f0000000080), 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x1}) 00:48:03 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x40000000000001, 0x480006) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) unlink(&(0x7f0000000080)='./file0\x00') r1 = socket$rxrpc(0x21, 0x2, 0x400000002) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x3, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) mkdir(0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0x5, 0x0, 0x2) r4 = syz_open_dev$usb(0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR64]], 0x80000) gettid() sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x1addc261) clock_gettime(0x0, &(0x7f0000000400)) ioctl$RTC_UIE_OFF(r4, 0x7004) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000480)) close(r2) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) unshare(0x40000000) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x6}}, 0x20) lsetxattr$security_ima(0x0, &(0x7f0000000280)='security.ima\x00', &(0x7f00000002c0)=@sha1={0x1, "7faaea444bbef2f4430990201a15827c075cb050"}, 0x15, 0x803) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x106, 0x7}}, 0x20) 00:48:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002b40)={&(0x7f00000015c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x21}}, 0x1c, 0x0, 0x0, &(0x7f0000002780)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}, 0x0) 00:48:03 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffffffffffff7fff, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x3, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, &(0x7f0000000180)={0x100000100000001, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}}, 0x104) 00:48:03 executing program 3: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) 00:48:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x10200, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x2, 0x2000) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0x117004, &(0x7f00000000c0), 0x1, r3, 0x8}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000000040), 0x0, 0x0) 00:48:03 executing program 2: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000100)=""/93) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x210080, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x501000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000180), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xf, 0x10, 0x3, 0x400, 0x4, r2, 0x10000, [], 0x0, 0xffffffffffffffff, 0x40000000000, 0x3}, 0x3c) 00:48:03 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000002580)=""/4096, 0x136e) getdents64(r0, 0x0, 0x0) [ 124.409646][ T9454] IPVS: ftp: loaded support on port[0] = 21 00:48:04 executing program 3: sched_rr_get_interval(0x0, &(0x7f0000000700)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4800, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040)=0x8, 0x4) 00:48:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x130, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffff9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5fe}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2b9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x458f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2e}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2e}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000000000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xb}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001480)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000014c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) 00:48:04 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x805, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x2, &(0x7f0000000180), 0x8) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x2, @empty, 'bond_slave_0\x00'}}, 0xfffffffffffffef8, &(0x7f00000000c0)=[{&(0x7f0000000100)='/', 0xfffffffffffffe62}], 0x1}, 0x0) 00:48:04 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/userio\x00', 0x0, 0x0) pipe(&(0x7f0000000180)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) 00:48:04 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x400000000000072, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) 00:48:06 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x40000000000001, 0x480006) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) unlink(&(0x7f0000000080)='./file0\x00') r1 = socket$rxrpc(0x21, 0x2, 0x400000002) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x3, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) mkdir(0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0x5, 0x0, 0x2) r4 = syz_open_dev$usb(0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR64]], 0x80000) gettid() sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x1addc261) clock_gettime(0x0, &(0x7f0000000400)) ioctl$RTC_UIE_OFF(r4, 0x7004) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000480)) close(r2) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) unshare(0x40000000) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x6}}, 0x20) lsetxattr$security_ima(0x0, &(0x7f0000000280)='security.ima\x00', &(0x7f00000002c0)=@sha1={0x1, "7faaea444bbef2f4430990201a15827c075cb050"}, 0x15, 0x803) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x106, 0x7}}, 0x20) 00:48:06 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1e}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rthdr={{0x18, 0x11, 0x67}}], 0x18}}], 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x20000) syz_open_pts(r1, 0x80800) 00:48:06 executing program 3: r0 = socket$kcm(0x10, 0x4000000002, 0x10) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000180)={'ip6_vti0\x00', 0x8001}) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1f, 0x121800) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x78) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040)=0x5b, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000400)="2e0000001900d927e65de087185082cf1924b0eba06ec4a86e8f32e00586f9835b3e00009148790000f8de84c5e2", 0x2e}], 0x1}, 0x0) 00:48:06 executing program 0: openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x3d) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000040)=0x536) 00:48:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) ustat(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x2e, 0x4, 0x0, {0x6, 0x1000, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)={'nat\x00'}, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f00000000c0)) 00:48:06 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/userio\x00', 0x0, 0x0) pipe(&(0x7f0000000180)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) [ 126.581236][ T9524] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'. 00:48:06 executing program 2: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0x8, 0x4) 00:48:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="c0dca5055e0bcfec7be070") r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000500)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000640)={r4, &(0x7f0000000540)=""/235}) sendmsg$nl_crypto(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=@alg={0x118, 0x10, 0x300, 0x70bd2b, 0x25dfdbfe, {{'aegis128-generic\x00'}, [], [], 0x2000, 0x2000}, [{0x8, 0x1, 0x5c}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x100000001}, {0x8, 0x1, 0x7fff}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0xb15}, {0x8, 0x1, 0x2}]}, 0x118}, 0x1, 0x0, 0x0, 0x8001}, 0x4008801) r5 = socket$unix(0x1, 0x1, 0x0) connect(r5, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) connect(r1, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) syz_open_dev$usb(0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="00fbe107f9c66aef3a440979ea702a633a1b82119d85a8489bb6fa43a66a079065cf290fa104b209608122886390537b7f03234d6bda65b8b1e4b056d51498f2487a5afa6c8033579c59fefbbf087572f0838f2b3d09f7734b7f910c9fe497ad8128daf4d6d80ba4c1d6fef25e39ea9cc33c81226dc0346c7ce1aeb2d54cbe8edd70833a7f341463e825c83345ea31cabd2e7e001c1161b165dde4d27b8a0b3c1f30a6b2ed5e1823f9c340a79972c0f40494dfb3041f10b77caeda881566b7fcaa89daaf53104a29a46013c777d5723efb00"/225], 0xe1, 0x1) r6 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r6, 0x101000000000013) listen(r2, 0x86) 00:48:06 executing program 3: r0 = socket$kcm(0x10, 0x4000000002, 0x10) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000180)={'ip6_vti0\x00', 0x8001}) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1f, 0x121800) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x78) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040)=0x5b, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000400)="2e0000001900d927e65de087185082cf1924b0eba06ec4a86e8f32e00586f9835b3e00009148790000f8de84c5e2", 0x2e}], 0x1}, 0x0) 00:48:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) ustat(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x2e, 0x4, 0x0, {0x6, 0x1000, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)={'nat\x00'}, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f00000000c0)) [ 126.742275][ T9535] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) 00:48:06 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) ustat(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x2e, 0x4, 0x0, {0x6, 0x1000, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)={'nat\x00'}, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f00000000c0)) [ 126.878852][ T9542] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'. 00:48:06 executing program 3: lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$jfs(&(0x7f0000000740)='jfs\x00', &(0x7f0000000780)='./file0\x00', 0xfffffffffffffffe, 0x2ac, 0x0, 0x0, &(0x7f0000000180)={[{@nointegrity='nointegrity'}, {@errors_remount='errors=remount-ro'}, {@uid={'uid', 0x3d, r0}}, {@uid={'uid', 0x3d, r0}}, {@errors_remount='errors=remount-ro'}, {@umask={'umask', 0x3d, 0x2}}, {@errors_remount='errors=remount-ro'}, {@umask={'umask', 0x3d, 0x3}}, {@errors_remount='errors=remount-ro'}, {@errors_remount='errors=remount-ro'}]}) [ 127.141833][ T9522] IPVS: ftp: loaded support on port[0] = 21 00:48:07 executing program 5: pipe2(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x100, 0x2, 0x7, 0x7, 0x5, [{0x31ea, 0x9, 0x7, 0x0, 0x0, 0x82}, {0xec52, 0x9, 0x100, 0x0, 0x0, 0xc}, {0x80, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x880}, {0x3f, 0x9, 0x6708, 0x0, 0x0, 0x80b}, {0x1, 0x7, 0x363, 0x0, 0x0, 0x1002}]}) r1 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) lseek(r1, 0x2, 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x7f8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) mkdir(0x0, 0x110) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) semget$private(0x0, 0x0, 0x202) 00:48:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="c0dca5055e0bcfec7be070") r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000500)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000640)={r4, &(0x7f0000000540)=""/235}) sendmsg$nl_crypto(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=@alg={0x118, 0x10, 0x300, 0x70bd2b, 0x25dfdbfe, {{'aegis128-generic\x00'}, [], [], 0x2000, 0x2000}, [{0x8, 0x1, 0x5c}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x100000001}, {0x8, 0x1, 0x7fff}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0xb15}, {0x8, 0x1, 0x2}]}, 0x118}, 0x1, 0x0, 0x0, 0x8001}, 0x4008801) r5 = socket$unix(0x1, 0x1, 0x0) connect(r5, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) connect(r1, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) syz_open_dev$usb(0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="00fbe107f9c66aef3a440979ea702a633a1b82119d85a8489bb6fa43a66a079065cf290fa104b209608122886390537b7f03234d6bda65b8b1e4b056d51498f2487a5afa6c8033579c59fefbbf087572f0838f2b3d09f7734b7f910c9fe497ad8128daf4d6d80ba4c1d6fef25e39ea9cc33c81226dc0346c7ce1aeb2d54cbe8edd70833a7f341463e825c83345ea31cabd2e7e001c1161b165dde4d27b8a0b3c1f30a6b2ed5e1823f9c340a79972c0f40494dfb3041f10b77caeda881566b7fcaa89daaf53104a29a46013c777d5723efb00"/225], 0xe1, 0x1) r6 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r6, 0x101000000000013) listen(r2, 0x86) 00:48:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) ustat(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x2e, 0x4, 0x0, {0x6, 0x1000, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)={'nat\x00'}, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f00000000c0)) 00:48:07 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x10000) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000040)) inotify_init1(0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000300), &(0x7f0000000480)=0x40) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000140)=r1) r3 = syz_open_dev$usb(0x0, 0x51a, 0x20000) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='user\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) r4 = msgget$private(0x0, 0x14) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000380)=""/143) epoll_pwait(r3, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x7ff, &(0x7f0000000080), 0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100), &(0x7f0000000200)=0x8) 00:48:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) wait4(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) munlockall() getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@mcast2}, &(0x7f0000000100)=0x14) r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x218140, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='eql\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000006940)='./file0\x00', 0x0, 0x861004, &(0x7f0000000300)=ANY=[@ANYBLOB="d0c0d1e8cc8c44215b2d8e819cb26852eaf532f667d9c3823844526b1d5c564161d0944e827f85b4e6f9842700fc9aafebf5d88d6523c6532a7c3d64c9", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000000000,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000000,loose,dont_measure,smackfsroot=,seclabel,uid>', @ANYRESDEC=0x0, @ANYBLOB=',euid<', @ANYRESDEC=0x0, @ANYBLOB=',appraise,appraise,\x00']) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x198, r2, 0x804, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd2e0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4f}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_BEARER={0x98, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffffffffffc1}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @rand_addr="dfbc52c9863835dd61082b9c8221f7e5", 0x1}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe33}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='trusted.overlay.origin\x00', &(0x7f0000000740)='y\x00', 0x2, 0x2) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000002c0)={0x4}, 0x1) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) ioctl$KDSETLED(r1, 0x4b32, 0xffffffff) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, {0x80000000, 0x5c55f084, 0x7}}) 00:48:07 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/userio\x00', 0x0, 0x0) pipe(&(0x7f0000000180)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) [ 127.628628][ T9564] Unknown ioctl 35073 00:48:07 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x1}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000269, 0x10400003) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000)) 00:48:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) ustat(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x2e, 0x4, 0x0, {0x6, 0x1000, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)={'nat\x00'}, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f00000000c0)) [ 127.759442][ T9564] Unknown ioctl 35073 00:48:07 executing program 0: epoll_create1(0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/sequencer\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = accept$alg(r1, 0x0, 0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x701, 0x80) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) sendto$isdn(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000096000000e3fe1aae36e9425eb3a9b2e97a296210e6adcfddd21c1bbefcaedecb9667ddb1caf10b06fb097e86507c96ce8792f1d3f69f279fd92223d0601d57512ba741a568755d5b406e94b155f5fc5da0b0d560f5df3e48991f89aa224881c8850fcfc4802802c4f36fc64609b6ad89b076e71ffd9af878330d95e89f0d64a8c456c032d907cebc845019717e92557b0704d825b5ce2f02bca867bf814a7a513795f1e4f24cb16dc61f000000da3cfc8c5bafe6d06b5144a71cec6bf280e47d33f76283934db93e669a5cc649d734bb0abb3e068e14525daadbf2f84f787a"], 0xe3, 0x40000, &(0x7f0000000140)={0x22, 0x9, 0x2, 0xa04b, 0x29}, 0x6) clock_gettime(0x0, &(0x7f0000002ec0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000002e00)=[{{&(0x7f0000000500), 0x80, &(0x7f0000000480)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/175, 0xaf}, {&(0x7f0000001640)=""/95, 0x5f}], 0x3, &(0x7f00000016c0)=""/140, 0x8c}, 0xff}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001780)=""/123, 0x7b}], 0x1, &(0x7f0000001840)=""/94, 0x5e}}, {{&(0x7f00000018c0)=@can, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000001940)=""/231, 0xe7}, {&(0x7f0000001a40)=""/40, 0x28}, {&(0x7f0000001a80)=""/109, 0x6d}, {&(0x7f0000001b00)=""/121, 0x79}, {&(0x7f0000001b80)=""/107, 0x6b}, {&(0x7f0000001c00)=""/135, 0x87}, {&(0x7f0000001cc0)=""/4096, 0x1000}], 0x7, &(0x7f0000002d40)=""/150, 0x96}, 0x101}], 0x3, 0x10003, &(0x7f0000002f00)={r4, r5+10000000}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x800, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000300)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x1, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 00:48:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x3, 0x100000000000001}, 0x199) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x4, 0x8b, [], 0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)=""/139}, &(0x7f0000000000)=0x78) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x1}, 0x20) 00:48:07 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) unshare(0x4020400) pselect6(0x40, &(0x7f0000000040)={0x28}, 0x0, 0x0, 0x0, 0x0) 00:48:07 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}, 0x84) clock_gettime(0x0, &(0x7f0000007480)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/40, 0x28}, {&(0x7f0000000040)=""/56, 0x38}, {&(0x7f0000000080)=""/90, 0x5a}], 0x3, &(0x7f0000000200)=""/48, 0x30}, 0x5}, {{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f0000000380)=""/73, 0x49}], 0x2, &(0x7f0000000440)=""/37, 0x25}, 0x5}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f00000014c0)=""/234, 0xea}, 0x7}, {{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000015c0)=""/163, 0xa3}, {&(0x7f0000001680)=""/168, 0xa8}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/226, 0xe2}], 0x4, &(0x7f0000002880)=""/108, 0x6c}, 0x40}, {{&(0x7f0000002900)=@rc, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002980)=""/209, 0xd1}, {&(0x7f0000002a80)=""/112, 0x70}, {&(0x7f0000002b00)=""/158, 0x9e}], 0x3, &(0x7f0000002c00)=""/4096, 0x1000}}, {{&(0x7f0000003c00)=@ipx, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003c80)=""/218, 0xda}, {&(0x7f0000003d80)=""/231, 0xe7}, {&(0x7f0000003e80)=""/19, 0x13}], 0x3, &(0x7f0000003f00)=""/220, 0xdc}, 0x20}, {{&(0x7f0000004000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000004540)=[{&(0x7f0000004080)}, {&(0x7f00000040c0)=""/207, 0xcf}, {&(0x7f00000041c0)=""/218, 0xda}, {&(0x7f00000042c0)=""/24, 0x18}, {&(0x7f0000004300)=""/128, 0x80}, {&(0x7f0000004380)=""/95, 0x5f}, {&(0x7f0000004400)=""/135, 0x87}, {&(0x7f00000044c0)=""/74, 0x4a}], 0x8, &(0x7f00000045c0)=""/118, 0x76}, 0x5}, {{&(0x7f0000004640)=@in, 0x80, &(0x7f0000005e40)=[{&(0x7f00000046c0)=""/242, 0xf2}, {&(0x7f00000047c0)=""/219, 0xdb}, {&(0x7f00000048c0)=""/4096, 0x1000}, {&(0x7f00000058c0)=""/193, 0xc1}, {&(0x7f00000059c0)=""/147, 0x93}, {&(0x7f0000005a80)=""/94, 0x5e}, {&(0x7f0000005b00)=""/218, 0xda}, {&(0x7f0000005c00)=""/5, 0x5}, {&(0x7f0000005c40)=""/209, 0xd1}, {&(0x7f0000005d40)=""/198, 0xc6}], 0xa, &(0x7f0000005f00)=""/4096, 0x1000}, 0x12e}, {{&(0x7f0000006f00)=@nfc_llcp, 0x80, &(0x7f0000007100)=[{&(0x7f0000006f80)=""/148, 0x94}, {&(0x7f0000007040)=""/184, 0xb8}], 0x2, &(0x7f0000007140)=""/247, 0xf7}, 0x5}], 0x9, 0x40000003, &(0x7f00000074c0)={r1, r2+10000000}) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000007500), &(0x7f0000007540)=0x2) getsockopt$nfc_llcp(r3, 0x118, 0x2, &(0x7f0000007640)=""/132, 0x84) [ 128.185304][ T9598] ------------[ cut here ]------------ [ 128.224936][ T9598] jump label: negative count! [ 128.238080][ T9598] WARNING: CPU: 1 PID: 9598 at kernel/jump_label.c:235 static_key_slow_try_dec+0x1ab/0x1d0 [ 128.248066][ T9598] Kernel panic - not syncing: panic_on_warn set ... [ 128.248098][ T9598] CPU: 1 PID: 9598 Comm: syz-executor.3 Not tainted 5.2.0-next-20190712 #37 [ 128.248109][ T9598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 128.248116][ T9598] Call Trace: [ 128.248142][ T9598] dump_stack+0x172/0x1f0 [ 128.248166][ T9598] ? static_key_slow_try_dec+0xc0/0x1d0 [ 128.248186][ T9598] panic+0x2dc/0x755 [ 128.248208][ T9598] ? add_taint.cold+0x16/0x16 [ 128.276105][ T26] kobject: 'rx-0' (000000002a6c8828): auto cleanup 'remove' event [ 128.276834][ T9598] ? __kasan_check_write+0x14/0x20 [ 128.281322][ T26] kobject: 'rx-0' (000000002a6c8828): kobject_uevent_env [ 128.286674][ T9598] ? __warn.cold+0x5/0x4c [ 128.286697][ T9598] ? static_key_slow_try_dec+0x1ab/0x1d0 [ 128.286714][ T9598] __warn.cold+0x20/0x4c [ 128.286728][ T9598] ? vprintk_emit+0x1ea/0x700 [ 128.286745][ T9598] ? static_key_slow_try_dec+0x1ab/0x1d0 [ 128.286763][ T9598] report_bug+0x263/0x2b0 [ 128.286784][ T9598] do_error_trap+0x11b/0x200 [ 128.286804][ T9598] do_invalid_op+0x37/0x50 [ 128.286819][ T9598] ? static_key_slow_try_dec+0x1ab/0x1d0 [ 128.286836][ T9598] invalid_op+0x14/0x20 [ 128.286851][ T9598] RIP: 0010:static_key_slow_try_dec+0x1ab/0x1d0 [ 128.286865][ T9598] Code: c0 e8 a9 07 e5 ff 83 fb 01 0f 85 32 ff ff ff e8 1b 06 e5 ff 45 31 ff eb a0 e8 11 06 e5 ff 48 c7 c7 c0 f9 92 87 e8 3d 6e b6 ff <0f> 0b eb 8b 4c 89 e7 e8 59 45 1f 00 e9 de fe ff ff e8 df 66 b6 ff [ 128.286873][ T9598] RSP: 0018:ffff888066b97450 EFLAGS: 00010286 [ 128.286886][ T9598] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 0000000000000000 [ 128.286895][ T9598] RDX: 0000000000011407 RSI: ffffffff815c3926 RDI: ffffed100cd72e7c [ 128.286905][ T9598] RBP: ffff888066b974e0 R08: ffff888066b8e1c0 R09: ffffed1015d260b1 [ 128.286914][ T9598] R10: ffffed1015d260b0 R11: ffff8880ae930587 R12: ffffffff89866d00 [ 128.286931][ T9598] R13: ffff888066b974b8 R14: 1ffff1100cd72e8b R15: 00000000ffffff01 [ 128.309156][ T3900] kobject: 'loop1' (00000000d3d9d8df): kobject_uevent_env [ 128.315386][ T9598] ? vprintk_func+0x86/0x189 [ 128.315405][ T9598] ? static_key_disable+0x30/0x30 [ 128.330525][ T26] kobject: 'rx-0' (000000002a6c8828): kobject_uevent_env: uevent_suppress caused the event to drop! [ 128.334321][ T9598] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 128.334341][ T9598] ? ip6_datagram_send_ctl+0x569/0x1b80 [ 128.334363][ T9598] __static_key_slow_dec_deferred+0x65/0x110 [ 128.377042][ T3900] kobject: 'loop1' (00000000d3d9d8df): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 128.389357][ T9598] fl_free+0xa9/0xe0 [ 128.389373][ T9598] fl_create+0x6af/0x9f0 [ 128.389393][ T9598] ? ip6fl_seq_next+0xb0/0xb0 [ 128.389410][ T9598] ? __might_fault+0x12b/0x1e0 [ 128.389429][ T9598] ? find_held_lock+0x35/0x130 [ 128.389446][ T9598] ? __might_fault+0x12b/0x1e0 [ 128.389470][ T9598] ? lock_downgrade+0x920/0x920 [ 128.420378][ T26] kobject: 'rx-0' (000000002a6c8828): auto cleanup kobject_del [ 128.427398][ T9598] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 128.427420][ T9598] ipv6_flowlabel_opt+0x80e/0x2730 [ 128.427440][ T9598] ? ipv6_flowlabel_opt_get+0xa10/0xa10 [ 128.427458][ T9598] ? lockdep_hardirqs_on+0x418/0x5d0 [ 128.427479][ T9598] ? lock_sock_nested+0x9a/0x120 [ 128.446010][ T26] kobject: 'rx-0' (000000002a6c8828): calling ktype release [ 128.447117][ T9598] ? lock_sock_nested+0x9a/0x120 [ 128.447137][ T9598] ? __local_bh_enable_ip+0x15a/0x270 [ 128.447162][ T9598] do_ipv6_setsockopt.isra.0+0x2125/0x4120 [ 128.447184][ T9598] ? do_ipv6_setsockopt.isra.0+0x2125/0x4120 [ 128.478447][ T26] kobject: 'rx-0': free name [ 128.480672][ T9598] ? ipv6_update_options+0x3b0/0x3b0 [ 128.480698][ T9598] ? ___might_sleep+0x163/0x280 [ 128.480718][ T9598] ? __might_sleep+0x95/0x190 [ 128.480740][ T9598] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 128.528863][ T3900] kobject: 'loop4' (0000000082f1d82e): kobject_uevent_env [ 128.530255][ T9598] ? futex_wait_queue_me+0x414/0x600 [ 128.550775][ T3900] kobject: 'loop4' (0000000082f1d82e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 128.552360][ T9598] ? handle_futex_death.part.0+0x250/0x250 [ 128.552380][ T9598] ? lock_pi_update_atomic+0x120/0x120 [ 128.552397][ T9598] ? get_futex_key_refs.isra.0+0x72/0xc0 [ 128.552415][ T9598] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 128.552436][ T9598] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 128.574370][ T26] kobject: 'tx-0' (00000000ffb05a57): kobject_cleanup, parent 00000000e3e7fab1 [ 128.574916][ T9598] ? __kasan_check_read+0x11/0x20 [ 128.631807][ T26] kobject: 'tx-0' (00000000ffb05a57): auto cleanup 'remove' event [ 128.634734][ T9598] ? mark_lock+0xc0/0x11e0 00:48:08 executing program 5: pipe2(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x100, 0x2, 0x7, 0x7, 0x5, [{0x31ea, 0x9, 0x7, 0x0, 0x0, 0x82}, {0xec52, 0x9, 0x100, 0x0, 0x0, 0xc}, {0x80, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x880}, {0x3f, 0x9, 0x6708, 0x0, 0x0, 0x80b}, {0x1, 0x7, 0x363, 0x0, 0x0, 0x1002}]}) r1 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) lseek(r1, 0x2, 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x7f8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) mkdir(0x0, 0x110) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) semget$private(0x0, 0x0, 0x202) 00:48:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) ustat(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x2e, 0x4, 0x0, {0x6, 0x1000, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)={'nat\x00'}, 0x0) 00:48:08 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/userio\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) [ 128.634771][ T9598] ? __kasan_check_read+0x11/0x20 [ 128.634789][ T9598] ? __lock_acquire+0x8a2/0x4c30 [ 128.634808][ T9598] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 128.634831][ T9598] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 128.657323][ T3900] kobject: 'loop5' (000000001de705de): kobject_uevent_env [ 128.657571][ T9598] ? aa_label_sk_perm+0x101/0x560 [ 128.697273][ T26] kobject: 'tx-0' (00000000ffb05a57): kobject_uevent_env [ 128.699346][ T9598] ? __fget+0x35d/0x560 [ 128.699367][ T9598] ? aa_profile_af_perm+0x320/0x320 00:48:08 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/userio\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) [ 128.699381][ T9598] ? __fget+0x35d/0x560 [ 128.699408][ T9598] ? lock_downgrade+0x920/0x920 [ 128.699428][ T9598] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 128.699449][ T9598] ? __kasan_check_read+0x11/0x20 [ 128.706695][ T3900] kobject: 'loop5' (000000001de705de): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 128.711378][ T9598] ? ___might_sleep+0x163/0x280 [ 128.711398][ T9598] ? __might_sleep+0x95/0x190 [ 128.711425][ T9598] ipv6_setsockopt+0xf6/0x170 [ 128.711440][ T9598] ? ipv6_setsockopt+0xf6/0x170 [ 128.711460][ T9598] udpv6_setsockopt+0x68/0xb0 [ 128.728255][ T26] kobject: 'tx-0' (00000000ffb05a57): kobject_uevent_env: uevent_suppress caused the event to drop! [ 128.730562][ T9598] sock_common_setsockopt+0x94/0xd0 [ 128.730586][ T9598] __sys_setsockopt+0x261/0x4c0 [ 128.730607][ T9598] ? sock_create_kern+0x50/0x50 [ 128.730636][ T9598] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 128.730669][ T9598] ? do_syscall_64+0x26/0x6a0 [ 128.750941][ T26] kobject: 'tx-0' (00000000ffb05a57): auto cleanup kobject_del [ 128.755181][ T9598] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 128.755210][ T9598] ? do_syscall_64+0x26/0x6a0 [ 128.755230][ T9598] __x64_sys_setsockopt+0xbe/0x150 [ 128.755250][ T9598] do_syscall_64+0xfd/0x6a0 [ 128.755270][ T9598] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 128.795110][ T26] kobject: 'tx-0' (00000000ffb05a57): calling ktype release [ 128.804799][ T9598] RIP: 0033:0x459819 [ 128.804817][ T9598] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 128.804826][ T9598] RSP: 002b:00007fa433fa0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 128.804841][ T9598] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459819 [ 128.804850][ T9598] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000004 [ 128.804859][ T9598] RBP: 000000000075bf20 R08: 0000000000000199 R09: 0000000000000000 [ 128.804869][ T9598] R10: 0000000020000040 R11: 0000000000000246 R12: 00007fa433fa16d4 [ 128.804879][ T9598] R13: 00000000004cec98 R14: 00000000004dd5c0 R15: 00000000ffffffff [ 128.811097][ T9598] Kernel Offset: disabled [ 128.947466][ T9598] Rebooting in 86400 seconds..