[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 23.896176] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 25.815271] random: sshd: uninitialized urandom read (32 bytes read) [ 26.044163] random: sshd: uninitialized urandom read (32 bytes read) [ 26.795986] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.49' (ECDSA) to the list of known hosts. [ 32.338070] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/14 20:57:56 fuzzer started [ 33.896393] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/14 20:57:59 dialing manager at 10.128.0.26:43753 2018/08/14 20:58:07 syscalls: 1 2018/08/14 20:58:07 code coverage: enabled 2018/08/14 20:58:07 comparison tracing: enabled 2018/08/14 20:58:07 setuid sandbox: enabled 2018/08/14 20:58:07 namespace sandbox: enabled 2018/08/14 20:58:07 fault injection: enabled 2018/08/14 20:58:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/14 20:58:07 net packed injection: enabled 2018/08/14 20:58:07 net device setup: enabled [ 44.402413] random: crng init done 21:00:19 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{&(0x7f0000000180)=@sco, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000140)=[{0xc, 0x1, 0x2}], 0xc}}], 0x1, 0x0) 21:00:19 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f0000000140), &(0x7f0000000280)=""/39}, 0x18) 21:00:19 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="0a5cc80700315f85714070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000140)="0001", 0x2}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$KVM_GET_REG_LIST(r0, 0x800452d2, &(0x7f0000000140)=ANY=[]) 21:00:19 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000001c0), 0xc, &(0x7f0000000100)={&(0x7f0000000900)=@getroute={0x14}, 0xfed0}}, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000009000400000000000000000000000001"]) ioctl(r0, 0x8916, &(0x7f0000000000)) 21:00:19 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x10000006f) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x120) 21:00:19 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000440), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00005c8000), 0x0, 0x0, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002940), 0x0, 0x0, &(0x7f0000002a80)) select(0x40, &(0x7f0000000180)={0x9}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)={0x77359400}) sendto$inet(r0, &(0x7f0000001300)="bb2d", 0x2, 0x20000001, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) 21:00:19 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmmsg$unix(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)="eaaaadff1eaf2850fbcc51a35b960593145b1a6166ab3c3d28cc05074a33fd16defcc32ac12958eeca1086ed84a90e5b8f77e9d806c29c668dc769567a90dd432f102f71e3da9495cc12d6c65597b81ad56e10a2e33c268db9e2756e94fd5833351a552f01c1c1453ca9bb96503e25c6f8", 0x71}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0x24044801) 21:00:19 executing program 6: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) read(r0, &(0x7f0000465f8e)=""/114, 0xfffffd09) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x1a013, r0, 0x0) [ 175.169531] IPVS: ftp: loaded support on port[0] = 21 [ 175.169866] IPVS: ftp: loaded support on port[0] = 21 [ 175.188637] IPVS: ftp: loaded support on port[0] = 21 [ 175.196808] IPVS: ftp: loaded support on port[0] = 21 [ 175.210111] IPVS: ftp: loaded support on port[0] = 21 [ 175.223694] IPVS: ftp: loaded support on port[0] = 21 [ 175.251903] IPVS: ftp: loaded support on port[0] = 21 [ 175.266061] IPVS: ftp: loaded support on port[0] = 21 [ 177.676243] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.682804] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.713808] device bridge_slave_0 entered promiscuous mode [ 177.736330] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.742888] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.753841] device bridge_slave_0 entered promiscuous mode [ 177.776243] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.782677] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.805434] device bridge_slave_0 entered promiscuous mode [ 177.828994] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.835423] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.843681] device bridge_slave_0 entered promiscuous mode [ 177.862507] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.869020] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.896533] device bridge_slave_1 entered promiscuous mode [ 177.909547] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.916144] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.925255] device bridge_slave_1 entered promiscuous mode [ 177.934314] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.940870] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.953866] device bridge_slave_0 entered promiscuous mode [ 177.965096] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.971514] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.979122] device bridge_slave_0 entered promiscuous mode [ 177.994999] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.001422] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.012163] device bridge_slave_0 entered promiscuous mode [ 178.021603] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.030829] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.037266] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.068034] device bridge_slave_1 entered promiscuous mode [ 178.081237] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.087694] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.106303] device bridge_slave_1 entered promiscuous mode [ 178.115027] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.124317] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.130794] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.151884] device bridge_slave_0 entered promiscuous mode [ 178.166268] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.172691] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.189263] device bridge_slave_1 entered promiscuous mode [ 178.198082] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.204585] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.212376] device bridge_slave_1 entered promiscuous mode [ 178.220562] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.231232] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.243084] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.249495] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.259274] device bridge_slave_1 entered promiscuous mode [ 178.273306] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.280662] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.287195] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.298130] device bridge_slave_1 entered promiscuous mode [ 178.321946] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.330920] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.340212] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.380970] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.437851] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.447043] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.455790] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.475297] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.495643] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.601195] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.636611] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.696167] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.761982] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.857966] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.899137] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.919468] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.945132] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.975884] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.987427] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 179.057221] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 179.089898] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 179.098963] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 179.105938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.124312] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 179.136541] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 179.149074] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 179.168914] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 179.179498] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 179.189938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.224443] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 179.246124] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 179.253082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.276455] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 179.283390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.309490] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 179.316423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.334129] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 179.344412] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 179.357904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.381002] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 179.389651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.430848] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 179.439737] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 179.453828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.480102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.524614] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 179.534180] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 179.543024] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 179.555013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.573334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.599695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.619354] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 179.626372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.675522] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 179.683338] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 179.696875] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 179.726193] team0: Port device team_slave_0 added [ 179.749281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.773190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.849553] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 179.876468] team0: Port device team_slave_1 added [ 179.892991] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 179.906851] team0: Port device team_slave_0 added [ 179.973072] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 179.983855] team0: Port device team_slave_0 added [ 180.003122] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 180.024593] team0: Port device team_slave_0 added [ 180.056079] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 180.063036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.084284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.106846] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 180.115929] team0: Port device team_slave_0 added [ 180.121418] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 180.129817] team0: Port device team_slave_1 added [ 180.137645] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 180.146258] team0: Port device team_slave_0 added [ 180.156184] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 180.173154] team0: Port device team_slave_0 added [ 180.192892] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 180.206664] team0: Port device team_slave_1 added [ 180.219434] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 180.227577] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 180.239111] team0: Port device team_slave_1 added [ 180.246693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.256436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.274571] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 180.285518] team0: Port device team_slave_0 added [ 180.305911] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 180.315038] team0: Port device team_slave_1 added [ 180.327826] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 180.337041] team0: Port device team_slave_1 added [ 180.345079] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 180.355569] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 180.377482] team0: Port device team_slave_1 added [ 180.397046] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 180.404471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.415264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.434858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.447220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.467226] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 180.477891] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 180.489488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 180.503852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 180.513212] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 180.520208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.544615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.570221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.579834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.593258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.601238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.608947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.616989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.624544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.632401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.640350] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 180.648560] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 180.656095] team0: Port device team_slave_1 added [ 180.666928] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 180.677584] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 180.687139] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 180.696423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 180.704122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.715658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.747418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.774089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.791509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.799382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.807034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.814930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.822668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.830496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.839423] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 180.847198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.856111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.865553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 180.872468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.886837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.900863] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 180.910243] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 180.919910] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 180.930358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.961926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.977163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.985216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.993214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.001151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.017678] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 181.026605] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 181.034003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.043001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.058678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.074393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.088531] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 181.097547] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 181.109316] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 181.117432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.138555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.163566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.186364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.195444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.203501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.218412] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 181.226039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.241293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.259525] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 181.273439] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 181.286385] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 181.298215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.319851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.349132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.372523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.380523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.388564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.398628] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 181.406935] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 181.420521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.438425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.455578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.470223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.486918] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 181.495065] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 181.532388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.566414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.596291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.632147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.618455] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.624977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.632002] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.638520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.682054] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.688520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.784617] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.791051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.797836] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.804265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.842834] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.882089] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.888515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.895256] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.901677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.955932] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.992825] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.999247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.005985] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.012401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.061388] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.070907] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.077352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.084052] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.090472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.099439] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.120903] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.127323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.134033] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.140457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.177417] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.283661] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.290210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.296946] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.303376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.319871] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.332194] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.338607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.345350] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.351789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.383891] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.739296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.750421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.789233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.819633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.830584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.837862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.845315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.673047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.860318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.893125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.915829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.936087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.104426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.237959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.269320] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 189.405417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.420490] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 189.430343] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 189.449566] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 189.464696] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 189.688098] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 189.743276] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 189.844545] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 189.850919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.860127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.940814] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 189.962571] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 189.968859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.979270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.022436] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 190.029463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.039734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.052826] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 190.073681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.085577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.126831] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 190.133097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.154339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.315618] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 190.321935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.336149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.389372] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 190.406571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.417444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.498993] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.526865] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.580105] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 190.586329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.603229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.632550] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.653838] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.680376] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.949811] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.969265] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.119639] 8021q: adding VLAN 0 to HW filter on device team0 21:00:38 executing program 5: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x7fd) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\t\x00']) 21:00:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="b9c70b0000b802000000ba000000000f300f21bcc42175d08cf6d66a0000c4624d93443a00b9980100000f3265f2410f0866470fe07d001d0000000043d9fe66baf80cb85cc87b8fef66bafc0ced", 0x4e}], 0x1, 0x0, &(0x7f00000002c0), 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f00000002c0)={[0x2, 0x2, 0xf000, 0x5000], 0x428, 0x40, 0x50eb6d7d}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f00000001c0)={0x0, 0x7fffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"6ef240fbaeb9e8b61a00"}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f0000000200), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 194.065532] 9pnet: Insufficient options for proto=fd 21:00:38 executing program 0: r0 = socket$inet(0x2, 0x4840000000003, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x2, 0x318, [0x0, 0x20000080, 0x20000338, 0x20000368], 0x0, &(0x7f0000000000), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x3, 0x0, 0x0, 'erspan0\x00', 'gretap0\x00', 'nr0\x00', 'nr0\x00', @random="73c4b80dee36", [], @local, [], 0x70, 0xe8, 0x138}, [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "2a07b1086972115c95cc1539cb9a1248c186c3e4a3c5b60bb69c765a3492383ab7d0638f16d20e3452615907cd0ae7c9b943db5407bb30885854a2232b75de0d"}}}]}, @common=@log={'log\x00', 0x28, {{0x8, "459038bee95d1b5902b6b3068816cdb8a510bd499b1e7bda6e5eee4f4e6e"}}}}, {{{0x9, 0x0, 0x0, 'veth1_to_team\x00', 'ip_vti0\x00', 'rose0\x00', 'veth0_to_bond\x00', @link_local, [], @random="c1ea6f2a7221", [], 0xb0, 0x100, 0x150, [@statistic={'statistic\x00', 0x18}]}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}]}, @common=@log={'log\x00', 0x28, {{0x0, "1dc3d17180e69ab41d183f1fe21d062a7c09d9a02dae2ac8f2f5cbc65e53"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x390) 21:00:38 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x84400000000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000002c0)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000000c0)="2a69d67b54a8c0c1574a2b40ed600b59004cabd94d3c0c71c10489", 0x1b, 0xfffffffffffffffb) keyctl$setperm(0x5, r1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000340)=""/134) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="c80000004ac2e286142dcd", @ANYRES16=r3, @ANYBLOB="00032abd7000fcdbdf250400000034000300080007004e2300000800030002000000080001000000000008000500ffffffff080007004e220000080007004e2100000800050000000000340001000800090004000000080001000a00000008000b0073697000080009000f000000080004004e240000080009003e00000008000500060000000c0002000800040006000000080006005353000008000500ca0c000020000100140003007f0000010000000000000000000000000800010002000000"], 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) 21:00:38 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000140)=ANY=[]) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0x20}, 0x20) socket$inet6(0xa, 0x6, 0x0) ioctl(r1, 0x890f, &(0x7f0000000280)="0a7dc8f4601d42073238ff") fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) [ 194.176674] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 21:00:38 executing program 7: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x7) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x3) ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r2 = getpgid(0x0) write$P9_RGETLOCK(r0, &(0x7f0000000080)={0x21, 0x37, 0x2, {0x0, 0xffffffff, 0x9, r2, 0x3, '#,{'}}, 0x21) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/78, 0x4e}, {&(0x7f0000000400)=""/19, 0x13}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x3) 21:00:38 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000001b00)='/dev/input/mice\x00', 0x0, 0x0) dup2(r0, r0) fcntl$setstatus(r0, 0x4, 0x42800) 21:00:38 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0xaf, 0x4200) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x2) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0xfffffffffffffffe, 0x200) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000680)={r3, 0x3}, 0x8) getsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000240), &(0x7f0000000300)=0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000400)={0x101, @local}) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x200) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000380)={0x8ba, 0xf000000, 0x0, 0x50}, 0x10) ioctl$KVM_S390_INTERRUPT_CPU(r5, 0x4010ae94, &(0x7f00000000c0)={0x3, 0x2, 0x2}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05100000"], 0x0, 0x0, &(0x7f0000000400)}) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000500)={0x3, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x4e22, @multicast1}, 0x4, 0x1fffffffc0000000, 0x9, 0x8, 0x9, &(0x7f00000003c0)='lo\x00', 0x1f, 0x50e}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="7fe85dfaec7e35c7e1f7b97a52a12f9482fa19", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f0000000340)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='em0\x00', r2}, 0x10) 21:00:38 executing program 5: r0 = memfd_create(&(0x7f0000000000)="6d81351e39cfc228a4a17200", 0x0) fallocate(r0, 0x0, 0x0, 0x6) lseek(r0, 0x0, 0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400200, 0x0) 21:00:38 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond:\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="3b000000000000000000be10000000000000640000000000"]}) close(r2) close(r0) [ 194.479896] binder: 6571:6578 unknown command 4101 21:00:38 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=@known='security.evm\x00', &(0x7f0000000280)='security.capabimity\x00', 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='security.evm\x00', &(0x7f0000000100)="6f428f4ed4df5a5ec3dd6cb73edd1f725d5d076eff1f4072e20ea03bc51975bef82d028a2511817051239c742a9036222207f050995a9945d6cec12644", 0x3d, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f00000000c0)={0x2, 0x16}) [ 194.515649] binder: 6571:6578 ioctl c0306201 200001c0 returned -22 [ 194.545205] binder: 6571:6586 transaction failed 29189/-22, size 24-8 line 2855 [ 194.588153] binder: 6571:6586 unknown command 4101 [ 194.598260] binder: 6571:6586 ioctl c0306201 200001c0 returned -22 [ 194.600193] syz-executor2 (6556) used greatest stack depth: 13944 bytes left [ 194.630544] Unknown ioctl 1074310947 [ 194.643103] binder: 6571:6596 transaction failed 29189/-22, size 24-8 line 2855 [ 194.643215] Unknown ioctl 1074310947 [ 194.669415] binder: undelivered TRANSACTION_ERROR: 29189 21:00:39 executing program 6: r0 = socket$inet6(0xa, 0x80806, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000280)={0x0, 0x7530}, 0x10d) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r2, &(0x7f00000003c0)=""/245, 0xf5, 0x61, &(0x7f00000001c0)={0x2, 0x4e21, @multicast2}, 0x10) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = accept(r1, 0x0, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000180)=0x30) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="00ffffffffffffff1c894610d7a99927519594ca46701138d909246d95726556b4ac2d62a9c473611581fafe74ac2873470860c8dc75af40994109449a1ff05e28d93fd8ccbacb247504da7a8f08c8dd5a6f862accf93c88ee8ac68d911868df3d3ae6ed5e321a2e5b4389f0128c1e04d0e62851bb3d2acc7834fc527220a5cb408d424e2767ee630e470f88c2a07188a0a903417e6eec6b0853504b24033f0f7d41bf872a33dca2a59a57db786a82a8b96490d3b15ce4afaacca762b7e1ecc387facc3eb0e4be3c31248d400a12f53060c233e2489180ad279e881be42efce26258eca0b715555dc2fcda94a325c7a968d0f56be1435f0a0231be937f1fe7eb23bdd63e01f983914312ac5806ae3a7812307e19869f01203a814360c9836a757013855f7d5bc9d314f1fceaa24058dd28ad970201757f08cb92f5b51d02b7a60ea4aac0d087a6f039fa5ffbc243"], 0x14e}}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0x5, 0x4}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000340)={r5, 0x6}, &(0x7f0000000380)=0x8) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000780)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000240)=0xe8) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000004c0)={@local, @dev={0xfe, 0x80, [], 0x11}, @empty, 0x2, 0xd0, 0x5, 0x400, 0x0, 0x2000000, r6}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x100000000000fffe, 0x0) ppoll(&(0x7f0000003700), 0x0, &(0x7f0000003740)={0x0, 0x989680}, &(0x7f0000003780), 0x8) sendmmsg(r3, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) close(r4) 21:00:39 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x8000000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000480), &(0x7f00000003c0)="d9df97c61177e28e7d7cbce2d219564c23d80344066b0eedef7a7d0882addeb5b3acdef4f26f4a25b6e662f8d02818c093844eecb55f328e38125ece2513783b6d27aac6682173a93ebe11b35a7611a8bfcbf73f7fbd47010d1d69f5d975ee30763e00402ae746f6039adaa2399087e36123610c3214220d123268fefe208409a8c853be5a8ad5a33f4748a7f0413b0321c9adf3681ea2ab0f162c86864ce8025719300156e1fd7b3010721b1a69d16a0d56493c539e4a6fd3", 0x8000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f00000002c0), &(0x7f0000000080)=""/140}, 0x18) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x8) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f00000002c0)={{0x11, @empty, 0x4e22, 0x3, 'lblc\x00', 0x11, 0x1, 0x22}, {@rand_addr=0x877, 0x4e20, 0x3, 0x0, 0x55ba44aa, 0x3f}}, 0x44) [ 194.678157] binder: undelivered TRANSACTION_ERROR: 29189 21:00:39 executing program 5: write$binfmt_misc(0xffffffffffffffff, &(0x7f00000002c0)={'syz1', "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"}, 0x1004) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x6a00, 0x0) sendfile(r0, r1, 0x0, 0x80000001) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000008, r2) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xfffffffffffffffb}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r3, &(0x7f0000000100)=0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x4}, 0x2c) close(r4) 21:00:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x4000, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x6f, &(0x7f00000002c0)=0x3, 0x4) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000100)) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x20, &(0x7f0000000380)=ANY=[@ANYBLOB="a92a5c85002ca1abd1eaf0b11b7394fe96d253a2ca03d5cd59305ce68d3c970edd7ff245c2e10a2b728f95b9d3a9f015e2ef24f421007b476322f91fbc5315f9ae3880f4ae2d9ea6a62a4a7837f0b54beecd126c485ad66e85837531c5731527e151793ed178dab5558740d7a6fa7641f34ed601a9d9a930beacc184b03002910383f8337cb57cd6c763"]) 21:00:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)) 21:00:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000010c0)='/dev/vcs#\x00', 0x800000002, 0x200) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000140)={0x1, 0x0, {0x19, 0x2a, 0x7, 0x16, 0x9, 0x83, 0x1, 0x102, 0xffffffffffffffff}}) r2 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0xffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x1b, 0x5, 0x8f8, 0x228, 0x5b0, 0x4a0, 0x228, 0x228, 0x828, 0x828, 0x828, 0x828, 0x828, 0x5, &(0x7f00000002c0), {[{{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@rt={0x138, 'rt\x00', 0x0, {0xff, 0x800, 0x3, 0x10000, 0x2, 0x6, [@loopback, @empty, @remote, @local, @dev={0xfe, 0x80, [], 0x20}, @dev={0xfe, 0x80, [], 0xb}, @ipv4={[], [], @loopback}, @ipv4={[], [], @rand_addr=0x7fc0000000000000}, @mcast1, @local, @ipv4={[], [], @rand_addr=0x8000}, @remote, @dev={0xfe, 0x80, [], 0x1c}, @loopback, @mcast2, @remote], 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x230, 0x278, 0x0, {}, [@common=@inet=@ipcomp={0x30, 'ipcomp\x00', 0x0, {0x4d6, 0x4d4, 0x1}}, @common=@rt={0x138, 'rt\x00', 0x0, {0x3, 0xffff, 0x9, 0x5, 0xc, 0x0, [@loopback, @loopback, @ipv4, @empty, @loopback, @dev={0xfe, 0x80, [], 0x12}, @dev={0xfe, 0x80, [], 0x13}, @ipv4, @mcast1, @dev={0xfe, 0x80, [], 0x16}, @mcast2, @loopback, @loopback, @dev={0xfe, 0x80, [], 0x20}, @mcast1], 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x4, @ipv4=@broadcast, @ipv4=@broadcast, @icmp_id=0x66, @icmp_id=0x67}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff000000, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff], 'bcsf0\x00', 'bpq0\x00', {0xff}, {0xff}, 0x2, 0x2, 0x1, 0x40}, 0x0, 0xc8, 0x110}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv6=@dev={0xfe, 0x80, [], 0x13}, @ipv6=@mcast2, @port=0x4e20, @port=0x4e21}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @local, [0xffffffff, 0x0, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00], 'bond_slave_1\x00', 'ip6gre0\x00', {}, {0xff}, 0x3d, 0x4, 0x2, 0x18}, 0x0, 0x230, 0x278, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x3a, 0x8, 0x100, 0x8, 0xffffffffffffffe5, 0x19, 0x2}}, @common=@rt={0x138, 'rt\x00', 0x0, {0x1, 0x4, 0x59e1, 0xffffffffffffff81, 0x38, 0x1, [@mcast1, @remote, @remote, @empty, @mcast1, @empty, @mcast2, @mcast2, @local, @ipv4, @dev={0xfe, 0x80, [], 0x11}, @remote, @loopback, @dev={0xfe, 0x80, [], 0xe}, @remote, @mcast1], 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4, @ipv4=@broadcast, @icmp_id=0x67, @port=0x4e21}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x958) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000000c0)='/dev/input/mice\x00') getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x80000001}, &(0x7f0000000f80)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000fc0)={0x6, 0x2, 0x8000, 0x7, 0x32d, 0xff, 0xfffffffffffffffe, 0x3ff, r4}, 0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000d40)={0x0, 0xbd, "6fa990694bc0a9f95875a39ebe2818caecf2c1f7fff451e8fc37a364f857c7d9413c37c37bfe0de1333b75857a7d2cecd309d86bdec6f54ef8a9339785d979f8329afc508d2fda6d57f3ee7febbf30fa0468cf1fb0199ce2ef695853a06d915abebc9509a5ddfb9b931aed2fffdd5f2c07cbba3f93fc968e1cc284e7abcb16673071db6b5899f70213f56f9f67f8ccf9fd874d65d01eb7ae1f2100f28e685b510188409645dcaf7bc9bd4e37a2066640968535d409257e6844e0c83f09"}, &(0x7f0000000240)=0xc5) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000340)=@assoc_id=r5, 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000380)={@remote}, 0x14) r6 = socket(0xa, 0x2, 0x0) readlinkat(r0, &(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)=""/219, 0xdb) dup3(r6, r0, 0x0) 21:00:39 executing program 1: r0 = socket(0x1e, 0x5, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x4000, 0x0) getsockopt$inet_int(r1, 0x0, 0x514e10cf04b64322, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket(0x1e, 0x5, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000100)="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", 0x401}], 0x1, &(0x7f00002d4000)}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000540)={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0xe}}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00', 0x1800}) 21:00:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) chroot(&(0x7f0000000000)='./file0\x00') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x4924924924924fa, 0x0) [ 194.849675] dccp_close: ABORT with 1061 bytes unread 21:00:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x3, &(0x7f0000fff000/0x1000)=nil) clock_adjtime(0x0, &(0x7f0000000200)={0xd6}) 21:00:39 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000c7df60)={0x7ff, @in6}, &(0x7f000064b000)=0xa0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r3 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r1}, &(0x7f0000000040)=0xc) sendmsg$nfc_llcp(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x27, 0x1, 0x0, 0x6, 0x5cd, 0x2, "f7163d5823d3283399bd23e4910badccf4c9ea23448bac3c4e804f6b13a04c2ccad7b0f8f42ad712b43d7dbb1d8c0b8bd3003fb626827122b5769f76f485cb", 0x2d}, 0x60, &(0x7f0000000200)=[{&(0x7f0000000000)="0804f253503f3b1b23bc6209a523a661ee580069cdb703e39f7f1286d5c47c", 0x1f}, {&(0x7f0000000140)="1d885bd5ed9fce863e94bd5f6ebb1cb5c672e38456cf100c951d714eb0f5a7d8fd354c91695c3f0b97ff5aee72ab9a3789f0fcea56063dbd2ea61f269765ffac2712c487879703875bf70b387ad76878d89214890dda96caf003da131c188c555ed56d1996f20152e231fd7adad4aa5470da249e56889340442419ac041fb8769ee32b7749770f77433b175bd3703cacd973888eed68d925645bad279488f5382a11b6b59c547189b7e9e4", 0xab}], 0x2, &(0x7f00000002c0)={0x110, 0x113, 0x6, "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"}, 0x110, 0x40}, 0x10) r4 = syz_open_dev$midi(&(0x7f0000000400)='/dev/midi#\x00', 0x5, 0x280) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000440), &(0x7f0000000480)=0x4) 21:00:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8943, &(0x7f0000000240)={'sit0\x00'}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x8000) ioctl(r0, 0x5, &(0x7f0000000040)="01ce8e480c0f89dc51b526ad300ba156d8de3e06ea40d8bc8cdb6e4fe38678c1b3a385e0d397aed4ee31904e776f577a70450057492206a28d6d23daf0d16b0dba15e5993f33c4c0d83f91fdce1a347011fbdcf624005169ced4adac94d3d056849b5759dee08a6658741e4cc4b52a71") statx(r2, &(0x7f0000000100)='./file0\x00', 0x2800, 0x7ff, &(0x7f0000000140)) 21:00:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = memfd_create(&(0x7f00000001c0)='\x00', 0x3) syz_open_pts(r1, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x4}}, [0x0, 0x9, 0x2, 0x9, 0x2, 0x1000, 0x10000, 0x574, 0x924, 0x5, 0xfffffffffffffff7, 0x3, 0x4, 0x0, 0x1]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=r2, &(0x7f00000002c0)=0x4) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000140)=0x4) io_setup(0x5, &(0x7f0000000000)=0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9, 0x3}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xa5, &(0x7f0000000040)}, &(0x7f0000000300)=0xfffffffffffffd14) io_submit(r3, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001000)}]) 21:00:39 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f00000001c0)=0x0) io_getevents(r3, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x77359400}) close(r2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_submit(r3, 0x330, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, r4}]) 21:00:39 executing program 3: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1\x00', r1}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) flistxattr(r2, &(0x7f0000000100)=""/85, 0x55) 21:00:39 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) accept(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x80) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@loopback, @mcast1, @ipv4={[], [], @remote}, 0x3, 0x10, 0x4, 0x500, 0x0, 0x40000004, r1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x800000032, &(0x7f0000003000), 0x3) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000180)=[{}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) 21:00:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) chroot(&(0x7f0000000000)='./file0\x00') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x4924924924924fa, 0x0) 21:00:39 executing program 4: mkdir(&(0x7f0000001c40)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00/?{', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x210000, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000380)={0x0, 0x7f, "b9d9de6e5297dae8759b275452f7b334be1d8743f280386c984a491b244032f9bf3c03fa37b3ae15a28de5f929e133dad91564e4cf69cc5f79eeedf8dcfec996882f6bf8d40b628f4145804364270d075b5c8f8047e9c66ebcd8624343f6bf3d8eac5825d4c583539c63581d13a34fd05d577a950b629a048a686a30f57db6"}, &(0x7f0000000180)=0x87) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000002c0)={r3, 0x9}, &(0x7f0000000300)=0x8) open(&(0x7f0000000140)='./file0/file0\x00', 0x10000, 0x0) 21:00:39 executing program 5: clone(0x200, &(0x7f0000000340), &(0x7f00000002c0), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000), &(0x7f00006fcff0)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x3f) r3 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0x8) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) r4 = dup2(r3, r2) tkill(r0, 0x16) fcntl$setownex(r4, 0xf, &(0x7f00000000c0)={0x1, r0}) [ 195.168489] kernel msg: ebtables bug: please report to author: Wrong nr of counters 21:00:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x3) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x9) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=@delsa={0x3c, 0x11, 0x11, 0x0, 0x0, {@in6=@mcast1}, [@srcaddr={0x14}]}, 0x3c}}, 0x0) 21:00:39 executing program 2: r0 = creat(&(0x7f00000004c0)='./file0\x00', 0x40) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3f) r1 = socket(0x40000000015, 0x5, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x5000000, @loopback, 0x7}, {0xa, 0x4e20, 0x4, @loopback, 0x10000}, r4, 0xffffffffffffff45}}, 0x48) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000480)=0x80000000) write$P9_RREADLINK(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1000008017010007002e2f66696c65303f2911e293cc8c1f010000000000009af5b93f9ee0acf3455311c6d2e1d31555f1f4206fc005185fb769a2fb82b45404f834c876ef8951f49abe5a71e8b2387971"], 0x10) io_setup(0x8, &(0x7f00000002c0)=0x0) io_pgetevents(r5, 0xe45, 0x2, &(0x7f0000000300)=[{}, {}], &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400)={0x8}, 0x8}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r6) 21:00:39 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001880)=[{{&(0x7f0000000040)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/148, 0x94}, {&(0x7f00000000c0)=""/29, 0x1d}], 0x2, &(0x7f0000000280)=""/4096, 0x1000, 0x17fa}, 0x6}, {{&(0x7f0000001280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001300)=""/127, 0x7f}, {&(0x7f0000001380)=""/74, 0x4a}, {&(0x7f0000001400)}, {&(0x7f0000001440)=""/23, 0x17}, {&(0x7f0000001480)=""/155, 0x9b}, {&(0x7f0000001540)=""/210, 0xd2}, {&(0x7f0000001640)=""/186, 0xba}], 0x7, &(0x7f0000001780)=""/196, 0xc4, 0xff}, 0x369d}], 0x2, 0x12001, &(0x7f0000001940)={r2, r3+30000000}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0405519, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) [ 195.244777] 9pnet: Insufficient options for proto=fd 21:00:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x2400, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000300)) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001340)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x6, 0x0, 0x6, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = memfd_create(&(0x7f0000000180)='security:I{keyringloppp0^`$wlan1\x00', 0x1) ioctl$SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f00000001c0)={0x89, ""/137}) 21:00:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x32db) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x4000000000000003, 0x800000008012, r3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100000000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="660f3880670fc4e235beb71200000066bad104ed440f20c0350b000000440f22c03e660f38823453c4c2ad099b592aea1f67650f0766baa100b0b1ee0fc71a806f0bf7", 0x43}], 0x1, 0x0, &(0x7f0000000100), 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) [ 195.329135] 9pnet: Insufficient options for proto=fd 21:00:39 executing program 0: r0 = socket(0x1b, 0x5, 0x0) r1 = shmget(0x0, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/224) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, 0x1c) 21:00:39 executing program 4: r0 = syz_open_dev$midi(&(0x7f00000003c0)='/dev/midi#\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000280)={0xffffffffffffffff}) fchdir(r1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000380)) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000300)=0xbf) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000340), &(0x7f00000002c0)=0xf) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a305000d7de02d9bf774a2d8fa246a1f22794fbb1ceeb7a53617aad88a58766ded2ad1ca13b12baac4f65470bc2423012c089d30f4086cff39c81384bd5d6374c52db8f70f61af7453961f836a472862f832f922a2e34bc9dd6f80cdf9b15060bd1de9e8e4cd5fb1f756a152b6deec52204c02cf0df5cd86471356df771e0624f492d59e6f635b9d90659f6ad461611b1ffc8edd6ac1375a6ef334"], 0xec) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}) dup(r2) sendfile(r3, r3, &(0x7f00000000c0), 0x8080fffffffe) accept$nfc_llcp(r0, 0x0, &(0x7f0000000240)) accept4$nfc_llcp(r0, 0x0, &(0x7f0000000140), 0x80800) 21:00:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x3) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x9) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=@delsa={0x3c, 0x11, 0x11, 0x0, 0x0, {@in6=@mcast1}, [@srcaddr={0x14}]}, 0x3c}}, 0x0) 21:00:39 executing program 6: syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa588cd6c64313610d4b935d62cc9100040081001f0008004500001c00"], &(0x7f00000002c0)={0x1, 0x4, [0xfffffffffffffffc, 0x4, 0x0, 0xe29]}) r0 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0xfffffffffffffff7, 0x8205, 0x9, 0x8, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={r1, 0x9, 0x2}, 0x8) prctl$setname(0xf, &(0x7f0000000140)='\x00') 21:00:39 executing program 2: syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0xc4, 0x20100) r0 = getpgrp(0xffffffffffffffff) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000100)="0d75732f4bbdbeecb12eabde2c8383c21ffbf13b48be52e7a18fee92c6f017cd113863b876c0361b61708bb4b44a3c076f26581a32256746288016dcdc151a9e9339c9d21b141ada23e3b99dd1b46c7d3a8ea03ccbb8e49a0d8f54bb85da4aad5e0bcaa72243fc5c6b19c2cdf0cfbed4624a6037e562779dbb1bccd4378d4d8c2f97e8a7b0daa925d303e865e7dc56d7227190d4e030694d7f1fed622b4a326e9bcd3b299d87723dd08a1256521980081c9fad01f59864a0a3d67bc79107a64ff68122402650bdfecdb02e39772beb27e71c1107555e45d01a5c5d998ba984e838429a2b5af6a0a33ba5e4fdb16f64dec76e37622a2bb80d") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') 21:00:39 executing program 6: r0 = socket$inet6(0xa, 0xffffffffffff, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TCFLSH(r2, 0x5414, 0x70c000) 21:00:40 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) chmod(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000480)='./control\x00') rmdir(&(0x7f0000000040)='./control\x00') syz_mount_image$f2fs(&(0x7f0000000080)='f2fs\x00', &(0x7f00000000c0)='./control\x00', 0x2, 0x8, &(0x7f0000000600)=[{&(0x7f0000000140)="60707f04b1c29fc6018a4f6aca29332e2db8d61a276a7093f8f204dbf0336ee06af16f22be46e879731c5ed71e9ee701ab07c1a0e09648ce959de3d9e6ea5092eb120f45981b1e827c892796bac8acb380dbcf65b5a6b97f86f25ee14e6248b81293830360", 0x65, 0x4}, {&(0x7f00000001c0)="1e20044aac01f928665910f9", 0xc, 0x101}, {&(0x7f0000000200)="ed612294e29c2275fc0bf610872cee9afdeb45beffefee0a1629b6dc3acdc2be96fbc335f375b0c2f7136066710bb31861c2f45e8bf10c2d73a4bb08d214b1e28af1f5a49d9d628be3b95b97fb50ba53113afb55740f18f1bc427e04dd06eb2638f0744501f83b1fe2a64645a2847b0a8aa5b82e0235ece6c5e3e8d38191e9b23c0ee0b5bf4c7cc7889e0cc361cae39bcdc1f51b8f42982fbf1ecd146c78dcd0aabb877f0efb02952764fdbbefe290af112332d66243c4e463bdf08a68878c767643fed48f023d05b5c97eee1e466cb3f90178e14366e260", 0xd8, 0x7}, {&(0x7f0000000300)="0ff221822ff34de7ce20a301b404dc9c83ee4536c507a435f3e63bb0b188ea719d6165b842a631761646c7e5f52807d40c402594844707c3608d4bc82a9e31741478364e93b363ac520b079b95160e0c47d510ef17dc1506fdd8a2caa0f9885a94540457142b6172e6d4e9cd74d7fe0238be46c449bc23d35125da03ff4c837484f9a4673949996f0f1520123164c44382b7e81802ec7a93dfdd642eae808fac8ff4c295925e", 0xa6, 0x7ff}, {&(0x7f00000003c0)="9bf0f2a6b59cf8501812e6a6cdf8dcd8619c02df25bc1b778f8e7de09c8fd5a3ed49a9b1b397790a75248611b0a9a8d5fb874ad6f2c11892ad5843976236a8a6b6af58fb7b936f937bbf77f9d5b449e2da0c8cd2146a807d920606a961504d38c82ed93d20da584a1bb857611995068ff4100a635937a6e7c5ea1e6c5a580f88a689599e0c6c79e287c7bfe5dc65c9cf0ff1259f2b37a4c9df22e2e209d4efc058f920c7f8111ef9680a66d192faf97665715500e8a3721a3dea1e20db24d6be", 0xc0, 0xfff}, {&(0x7f00000004c0)="85716b0e04a3256678fedb252069592c5945494d30d0148678720f82e5e92639398879263ed6ee6c31870119b3ab4df6612a55d7f0c594208b43c4f0b7b7f41e50d88ac09e11cd5ad54cd27c97aa4195ed7a9ec95f298fd8281cef141921128f87a88039231b94b3a9d870e2a128dc7a02b14368b8f6ee4a5a7792", 0x7b, 0x100}, {&(0x7f0000000540)="087b4b0a2a389f6194095c482fdff7870098e178abacbea85a94098510bf2b36c6c72f65b9b1a4fe83f9a85966451d4d7fc61651f57184c01b878c0d082b8a", 0x3f, 0x4}, {&(0x7f0000000580)="103200cfe10b4009e5c4cd74af5b54e7157ca51fa0a319e730c282a8e1d7d2f46667ec424928056be0362a09d246fed612e85f9a37adaa165031d159d18cadc130b6ee0afa97a4b1f19cb833f3facc2c3a843e00baa4b060f0bad394165a6f45fa8cea45d0789d89e58b9381c1d4edfd78795c1208ca87", 0x77, 0xd7a2}], 0x4000, &(0x7f00000006c0)={[{@whint_mode_off='whint_mode=off'}, {@noacl='noacl'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@nodiscard='nodiscard'}, {@grpjquota={'grpjquota', 0x3d, '*'}}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup/syz0\x00', 0x200002, 0x0) 21:00:40 executing program 3: exit(0x2060) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x0, 0x3) prctl$setmm(0x23, 0xb, &(0x7f0000ffc000/0x4000)=nil) msync(&(0x7f0000b23000/0x2000)=nil, 0x2000, 0x10000000004) [ 195.655295] hrtimer: interrupt took 28456 ns 21:00:40 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x40) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x410000, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000040)=@can, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x196}, 0x2000) 21:00:40 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$hfs(&(0x7f0000000180)='hfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636f6465706167653d6e6f6e652c66696c655f756d3030383030303030303030303030303030303030302c000000da870000"]) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') [ 195.844231] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 195.851918] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 195.902589] hfs: unable to load codepage "none" [ 195.907766] hfs: unable to parse mount options [ 195.956871] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 195.964067] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 195.972956] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 195.980081] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 196.013390] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 196.020659] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 196.039122] hfs: unable to load codepage "none" [ 196.043920] hfs: unable to parse mount options [ 196.096098] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 196.103536] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 198.201639] kasan: CONFIG_KASAN_INLINE enabled [ 198.206496] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 198.213920] general protection fault: 0000 [#1] SMP KASAN [ 198.219467] CPU: 0 PID: 6702 Comm: syz-executor5 Not tainted 4.18.0-next-20180814+ #38 [ 198.227620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.237076] RIP: 0010:send_sigio_to_task+0x1ad/0x910 [ 198.242240] Code: 4c 8d b3 00 ff ff ff 48 b8 00 00 00 00 00 fc ff df 49 8d bf 58 06 00 00 4c 89 f2 48 c1 ea 03 c6 04 02 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1a 07 00 00 49 8b 87 58 06 00 00 4c 89 f2 48 c1 [ 198.261137] RSP: 0018:ffff880195426bd8 EFLAGS: 00010202 [ 198.266496] RAX: dffffc0000000000 RBX: ffff880195426d58 RCX: ffffffff81caeb13 [ 198.273793] RDX: 00000000000000cb RSI: ffffffff81cae4e3 RDI: 0000000000000658 [ 198.281059] RBP: ffff880195426d80 R08: ffff8801c6e7a000 R09: ffffed003b6046d6 [ 198.288531] R10: ffffed003b6046d6 R11: ffff8801db0236b3 R12: ffff8801cb94b688 [ 198.295893] R13: 0000000000000012 R14: ffff880195426c58 R15: 0000000000000000 [ 198.303159] FS: 0000000000000000(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 198.311378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.317373] CR2: 00007f4ca4366000 CR3: 0000000007e6a000 CR4: 00000000001406f0 [ 198.324639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 198.331959] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 198.339221] Call Trace: [ 198.341827] ? send_sigurg_to_task+0x4d0/0x4d0 [ 198.346409] ? __lock_is_held+0xb5/0x140 [ 198.350471] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 198.356004] ? pid_task+0x115/0x200 [ 198.359626] ? find_vpid+0xf0/0xf0 [ 198.363164] ? kasan_check_write+0x14/0x20 [ 198.367446] send_sigio+0x36f/0x4a0 [ 198.371069] ? lock_release+0x9f0/0x9f0 [ 198.375039] ? __x32_compat_sys_fcntl+0x110/0x110 [ 198.379881] ? kasan_check_write+0x14/0x20 [ 198.384113] kill_fasync+0x32e/0x640 [ 198.387822] ? send_sigio+0x4a0/0x4a0 [ 198.391623] ? __lock_is_held+0xb5/0x140 [ 198.395797] sock_wake_async+0xbb/0x150 [ 198.399806] unix_release_sock+0xa28/0xdb0 [ 198.404104] ? maybe_init_creds+0x530/0x530 [ 198.408423] ? check_same_owner+0x340/0x340 [ 198.412752] ? rcu_note_context_switch+0x680/0x680 [ 198.417726] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 198.423308] ? down_write+0x8f/0x130 [ 198.427016] ? __sock_release+0x8b/0x250 [ 198.431126] ? down_read+0x1d0/0x1d0 [ 198.434838] unix_release+0x44/0x90 [ 198.438461] __sock_release+0xd7/0x250 [ 198.442346] ? __sock_release+0x250/0x250 [ 198.446490] sock_close+0x19/0x20 [ 198.449939] __fput+0x376/0x8a0 [ 198.453217] ? __alloc_file+0x400/0x400 [ 198.457187] ? check_same_owner+0x340/0x340 [ 198.461504] ? kasan_check_write+0x14/0x20 [ 198.465745] ? do_raw_spin_lock+0xc1/0x200 [ 198.470012] ____fput+0x15/0x20 [ 198.473292] task_work_run+0x1e8/0x2a0 [ 198.477227] ? task_work_cancel+0x240/0x240 [ 198.481549] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 198.487082] ? switch_task_namespaces+0xa2/0xd0 [ 198.491793] do_exit+0x1ae4/0x26e0 [ 198.495390] ? lockdep_hardirqs_on+0x421/0x5c0 [ 198.500080] ? mm_update_next_owner+0x9a0/0x9a0 [ 198.504753] ? print_usage_bug+0xc0/0xc0 [ 198.508848] ? free_unref_page+0x930/0x930 [ 198.513082] ? account_kernel_stack+0x2bd/0x410 [ 198.517754] ? put_task_stack+0x188/0x2c0 [ 198.521933] ? kasan_check_write+0x14/0x20 [ 198.526165] ? finish_task_switch+0x5e7/0x870 [ 198.530653] ? __lock_acquire+0x7fc/0x5020 [ 198.534882] ? __switch_to_asm+0x34/0x70 [ 198.538934] ? __switch_to_asm+0x40/0x70 [ 198.542989] ? __switch_to_asm+0x34/0x70 [ 198.547045] ? __switch_to_asm+0x40/0x70 [ 198.551101] ? __switch_to_asm+0x34/0x70 [ 198.555158] ? __switch_to_asm+0x40/0x70 [ 198.559265] ? __switch_to_asm+0x34/0x70 [ 198.563325] ? __switch_to_asm+0x34/0x70 [ 198.567429] ? __switch_to_asm+0x40/0x70 [ 198.571483] ? __switch_to_asm+0x34/0x70 [ 198.575537] ? mark_held_locks+0x160/0x160 [ 198.579951] ? mark_held_locks+0xc9/0x160 [ 198.584099] ? __sched_text_start+0x8/0x8 [ 198.588241] ? lockdep_hardirqs_on+0x421/0x5c0 [ 198.592873] ? trace_hardirqs_on+0xbd/0x2c0 [ 198.597188] ? kasan_check_read+0x11/0x20 [ 198.601332] ? graph_lock+0x170/0x170 [ 198.605128] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 198.610235] ? graph_lock+0x170/0x170 [ 198.614032] ? memset+0x31/0x40 [ 198.617309] ? find_held_lock+0x36/0x1c0 [ 198.621368] ? _raw_spin_unlock_irq+0x27/0x70 [ 198.625861] ? _raw_spin_unlock_irq+0x27/0x70 [ 198.630353] do_group_exit+0x177/0x440 [ 198.634234] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 198.639333] ? __ia32_sys_exit+0x50/0x50 [ 198.643413] get_signal+0x851/0x18e0 [ 198.647129] ? ptrace_notify+0x130/0x130 [ 198.651185] ? __switch_to_asm+0x34/0x70 [ 198.655242] ? __schedule+0x884/0x1df0 [ 198.659125] ? __sched_text_start+0x8/0x8 [ 198.663270] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 198.668025] ? find_held_lock+0x36/0x1c0 [ 198.672084] do_signal+0x9c/0x21c0 [ 198.675618] ? lock_downgrade+0x8f0/0x8f0 [ 198.679880] ? setup_sigcontext+0x7d0/0x7d0 [ 198.684198] ? kasan_check_read+0x11/0x20 [ 198.688341] ? rcu_is_watching+0x8c/0x150 [ 198.692485] ? schedule+0xfb/0x450 [ 198.696024] ? find_task_by_pid_ns+0x61/0xb0 [ 198.700480] ? exit_to_usermode_loop+0x8c/0x380 [ 198.705151] exit_to_usermode_loop+0x2e5/0x380 [ 198.709744] ? syscall_slow_exit_work+0x490/0x490 [ 198.714621] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 198.720155] do_syscall_64+0x6be/0x820 [ 198.724039] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 198.729452] ? syscall_return_slowpath+0x5e0/0x5e0 [ 198.734379] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 198.739390] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 198.744403] ? recalc_sigpending_tsk+0x180/0x180 [ 198.749153] ? kasan_check_write+0x14/0x20 [ 198.753385] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 198.758225] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 198.763419] RIP: 0033:0x457089 [ 198.766660] Code: Bad RIP value. [ 198.770019] RSP: 002b:00007fb8cf7f9c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000c8 [ 198.777813] RAX: 0000000000000000 RBX: 00007fb8cf7fa6d4 RCX: 0000000000457089 [ 198.785151] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000000117 [ 198.792413] RBP: 0000000000930280 R08: 0000000000000000 R09: 0000000000000000 [ 198.799753] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 198.807060] R13: 00000000004d67b0 R14: 00000000004c9f1c R15: 0000000000000003 [ 198.814373] Modules linked in: [ 198.817562] Dumping ftrace buffer: [ 198.821091] (ftrace buffer empty) [ 198.825495] ---[ end trace 51f75b7ab7efdc89 ]--- [ 198.830313] RIP: 0010:send_sigio_to_task+0x1ad/0x910 [ 198.835474] Code: 4c 8d b3 00 ff ff ff 48 b8 00 00 00 00 00 fc ff df 49 8d bf 58 06 00 00 4c 89 f2 48 c1 ea 03 c6 04 02 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1a 07 00 00 49 8b 87 58 06 00 00 4c 89 f2 48 c1 [ 198.854569] RSP: 0018:ffff880195426bd8 EFLAGS: 00010202 [ 198.859964] RAX: dffffc0000000000 RBX: ffff880195426d58 RCX: ffffffff81caeb13 [ 198.867438] RDX: 00000000000000cb RSI: ffffffff81cae4e3 RDI: 0000000000000658 [ 198.874749] RBP: ffff880195426d80 R08: ffff8801c6e7a000 R09: ffffed003b6046d6 [ 198.882080] R10: ffffed003b6046d6 R11: ffff8801db0236b3 R12: ffff8801cb94b688 [ 198.889385] R13: 0000000000000012 R14: ffff880195426c58 R15: 0000000000000000 [ 198.896690] FS: 0000000000000000(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 198.904970] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.910893] CR2: 000000000045705f CR3: 0000000007e6a000 CR4: 00000000001406f0 [ 198.918859] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 198.926161] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 198.933459] Kernel panic - not syncing: Fatal exception [ 198.939297] Dumping ftrace buffer: [ 198.942844] (ftrace buffer empty) [ 198.946546] Kernel Offset: disabled [ 198.950170] Rebooting in 86400 seconds..