[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 15.192956] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 17.441759] random: sshd: uninitialized urandom read (32 bytes read) [ 17.721476] random: sshd: uninitialized urandom read (32 bytes read) [ 18.535544] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.61' (ECDSA) to the list of known hosts. [ 24.304483] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/09 18:12:16 fuzzer started [ 25.340199] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/09 18:12:18 dialing manager at 10.128.0.26:44551 2018/07/09 18:12:22 syscalls: 1785 2018/07/09 18:12:22 code coverage: enabled 2018/07/09 18:12:22 comparison tracing: enabled 2018/07/09 18:12:22 setuid sandbox: enabled 2018/07/09 18:12:22 namespace sandbox: enabled 2018/07/09 18:12:22 fault injection: enabled 2018/07/09 18:12:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/09 18:12:22 net packed injection: enabled [ 30.518968] random: crng init done 18:13:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r1, &(0x7f0000f65000)=[{&(0x7f0000000140)="80fd060a743d", 0x6}], 0x1, 0x0) 18:13:23 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache='fscache', 0x2c}]}}) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x100000, 0x0) 18:13:23 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x20000280, 0x200002b0, 0x200002e0], 0x0, &(0x7f0000000000), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x138) r1 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000240), 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendto$inet6(r1, &(0x7f0000000140), 0xe, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 18:13:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000100)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') open(&(0x7f0000000080)='./control\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r4, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6", 0x3c, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r4, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x9f) 18:13:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000020000ff00000000000001009500000400000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x0, 0x0, 0x0, 0x0, {0xd}}, 0x5580}, 0x1}, 0x0) 18:13:23 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f0000000a40)='/dev/amidi#\x00', 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0x0, 0x0) 18:13:23 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) 18:13:23 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) [ 91.264588] IPVS: ftp: loaded support on port[0] = 21 [ 91.300837] IPVS: ftp: loaded support on port[0] = 21 [ 91.300843] IPVS: ftp: loaded support on port[0] = 21 [ 91.332397] IPVS: ftp: loaded support on port[0] = 21 [ 91.346502] IPVS: ftp: loaded support on port[0] = 21 [ 91.362933] IPVS: ftp: loaded support on port[0] = 21 [ 91.393649] IPVS: ftp: loaded support on port[0] = 21 [ 91.425971] IPVS: ftp: loaded support on port[0] = 21 [ 92.913242] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.919648] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.952731] device bridge_slave_0 entered promiscuous mode [ 92.966174] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.972571] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.979677] device bridge_slave_0 entered promiscuous mode [ 92.993692] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.000097] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.008267] device bridge_slave_0 entered promiscuous mode [ 93.041531] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.047935] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.085099] device bridge_slave_1 entered promiscuous mode [ 93.096947] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.103336] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.116818] device bridge_slave_0 entered promiscuous mode [ 93.127258] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.133702] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.140980] device bridge_slave_1 entered promiscuous mode [ 93.148585] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.156097] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.163483] device bridge_slave_0 entered promiscuous mode [ 93.170246] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.176695] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.183824] device bridge_slave_1 entered promiscuous mode [ 93.192903] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.199261] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.214209] device bridge_slave_0 entered promiscuous mode [ 93.226517] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.232894] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.242706] device bridge_slave_1 entered promiscuous mode [ 93.250857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 93.258005] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.264410] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.283908] device bridge_slave_0 entered promiscuous mode [ 93.295033] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 93.303340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 93.312835] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 93.319991] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.326383] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.343839] device bridge_slave_1 entered promiscuous mode [ 93.355755] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.362144] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.374819] device bridge_slave_1 entered promiscuous mode [ 93.382308] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 93.390809] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.397186] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.407999] device bridge_slave_1 entered promiscuous mode [ 93.418357] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 93.425658] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.432049] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.454999] device bridge_slave_0 entered promiscuous mode [ 93.465798] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 93.483548] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 93.492559] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 93.509526] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 93.518884] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.525258] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.560396] device bridge_slave_1 entered promiscuous mode [ 93.579882] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 93.588401] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 93.610197] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 93.654106] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 93.686638] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 93.722104] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 93.735672] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 93.755623] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 93.828928] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 93.844327] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 93.863706] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 93.874358] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 93.907144] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 93.916691] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 93.969631] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 93.993613] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 94.017594] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 94.033979] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 94.048226] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 94.057705] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 94.138117] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 94.170733] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 94.362119] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 94.372632] team0: Port device team_slave_0 added [ 94.381821] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 94.397395] team0: Port device team_slave_0 added [ 94.417905] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 94.435590] team0: Port device team_slave_0 added [ 94.466113] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 94.480570] team0: Port device team_slave_1 added [ 94.508248] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 94.525538] team0: Port device team_slave_1 added [ 94.551416] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 94.562931] team0: Port device team_slave_1 added [ 94.577243] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 94.588813] team0: Port device team_slave_0 added [ 94.594232] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 94.601839] team0: Port device team_slave_0 added [ 94.608746] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 94.621698] team0: Port device team_slave_0 added [ 94.640094] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.653574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.660869] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 94.669127] team0: Port device team_slave_0 added [ 94.678249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.697631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.715201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.723471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.736250] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 94.743815] team0: Port device team_slave_1 added [ 94.751269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.759776] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 94.766887] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 94.774548] team0: Port device team_slave_1 added [ 94.783379] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 94.800724] team0: Port device team_slave_1 added [ 94.812452] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 94.820321] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 94.837620] team0: Port device team_slave_0 added [ 94.849871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.864526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.874901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.882496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.889964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.897472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.907489] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.914515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.923148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.931877] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 94.939174] team0: Port device team_slave_1 added [ 94.945972] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.954131] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.961107] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 94.970268] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 94.979128] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 94.987852] team0: Port device team_slave_1 added [ 94.999210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.013552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.031397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.046254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.053938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.061756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.069433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.077121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.087112] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 95.099347] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 95.108008] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 95.115761] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 95.122804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.132452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.166658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.180522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.188799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.196552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.204353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.211744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.219419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.228078] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 95.237352] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 95.245981] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 95.255542] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 95.263944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.281557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.299533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.316357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.323939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.331583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.339351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.346956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.354638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.363610] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 95.370697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.378709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.387739] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 95.398566] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 95.411091] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 95.420258] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 95.427495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.453819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.485231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.493910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.501768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.509474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.517264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.524878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.532582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.544896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 95.555399] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 95.571104] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 95.586541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.609140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.630416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.643538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.651400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.659214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.672911] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 95.685078] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 95.693102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.707515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.735398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.752085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.790159] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 95.797279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.809655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.534989] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.541428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.548094] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.554462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.576284] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 96.586227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.599564] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.605994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.612637] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.621709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.630389] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 96.638493] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.644858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.651476] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.657838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.666611] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 96.676722] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.683101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.689737] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.696112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.725476] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 96.737517] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.743930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.750543] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.756946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.772345] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 96.789485] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.795877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.802494] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.809065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.820846] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 97.013657] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.020064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.026701] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.033074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.045440] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 97.057458] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.063862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.070456] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.076814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.097331] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 97.633077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.647375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.664139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.674871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.682718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.690413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.697617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.457574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.563886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.582855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.606647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.661009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.773285] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 100.800309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.871665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.903204] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 100.972514] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 100.984683] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 101.000258] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 101.148041] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 101.154606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.162117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.204458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.244103] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 101.288461] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 101.294833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.304586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.321822] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 101.329440] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 101.345290] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 101.364010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.376417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.408465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.431248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.456580] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 101.471342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.481726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.590136] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.617974] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 101.630496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.650443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.694682] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 101.702459] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.721131] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.734340] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.758605] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 101.764875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.776997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.906724] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.023031] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.054486] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 102.063300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.076379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.148866] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.447607] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.787516] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:13:36 executing program 7: set_mempolicy(0x2, &(0x7f0000000040)=0x5, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x6, 0x209e20, 0x8000000001}, 0x2c) 18:13:36 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000100)={0x3, 0x0, 0x1ff, 0x20000000, "8fd926ec126359f608cc66652c093ffb0ad6d59666ac6256a10b3153e02909ccf69b456e0842ee14d637808c"}) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8)=0x7000, 0x8000fffffffe) ftruncate(r1, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000000c0)) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0xffffffffffffffff) 18:13:36 executing program 4: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, r0, 0x4, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x3000, 0x8c0, &(0x7f0000ffb000/0x3000)=nil) r4 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) r6 = openat(r5, &(0x7f0000000100)='./file0\x00', 0x0, 0x21) ioctl$TUNSETGROUP(r6, 0x400454ce, r0) r7 = syz_open_dev$loop(&(0x7f000091dff5)='/dev/loop#\x00', 0x0, 0x0) write$binfmt_aout(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="cf010100ba0200004f0b000000000100d10000000a0000fcff00000000000000be049d"], 0x23) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="68040000412732e67ecfbda1c2000000000000000000000000000000", @ANYBLOB="100026bd7000fcdbdf25020000003400020014000100ac1414bb0000000000000000000000000800040005000000140001a6a1fce62162bf412d00000000000000aa08000400080005001bffffff08000500917e000008000500020000000a099a6755e0812cfcc14637bfc3b498d8000e955abe8461a8cd9583e781ec3d39b452ff9a62029646bc474793714cd9ee6a33468fc3623443f3c622831a6e9c053f510f87d52f95e170a64ec776fe9a2b75711111a4ef59f770f9277186f4251370be78f5f0"], 0x2}, 0x1, 0x0, 0x0, 0x4048080}, 0x4) ioctl$LOOP_SET_FD(r7, 0x4c00, r2) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) connect$unix(r6, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) msync(&(0x7f0000cb0000/0x3000)=nil, 0x3000, 0x7) shmctl$SHM_UNLOCK(r3, 0xc) syz_fuse_mount(&(0x7f0000000140)='./file0/.ile0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000001780)="915d02540ee3b45b46d90e1354902e56ddac1f40aec8117c242363d0f62658673fa4371f92625c65174ac29b02f22c93fadc2193cb10aa6ec9cfe414049cece9637bb8893551fab00d23da8f8274603d35616a36e927618a9d5abcccfe1ec75f715d71876f8530be60b5b0e80c91e08162dff13c016f28d67a4d376f6cd3805ccb8f1ae927178c65bb3ffedecb3b7afb03e17c9c7245e6b94ec5be2948fc7773e4b8908b16ae705d1671aa93393ecce71a2d1e946544f576d690136412e145f5a7a6c76c0792db6ef2b52f7b59fb130f24c94c307e036f273002b13f493f8b", 0xdf}], 0x1) read(r1, &(0x7f0000003380)=""/4096, 0xf) 18:13:36 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x40000108]}) 18:13:36 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x7ffffffffefff, 0x4c832, 0xffffffffffffffff, 0x0) 18:13:36 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x13) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x40082406, &(0x7f0000000180)) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x0, 0x0, 0x0, 0x7}]}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:13:36 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/kcm\x00\b\x00') sendmsg$kcm(r0, &(0x7f0000000d40)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast=0xffffffff}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000280)='5', 0x1}], 0x1, &(0x7f00000008c0)}, 0x80) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001480)=""/96, 0x60}, {&(0x7f00000002c0)=""/135, 0x87}], 0x2) 18:13:36 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0xc008af12, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000480)}) 18:13:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x120, 0x0, 0x0, {0x8}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:13:36 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2100, 0x0) close(r0) 18:13:36 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="6e6f646573e6", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, "804e2486cff9d9266b6504d1017e922724e09b8a6d2cec6c5249cf42d85e7f102204bb458c81a116e92825862da340dec9ee4a6bb74e77d3dd1a52f33cc1748d", "9b9565fd6c7860bd47638a0e3a6899a829b38528694cb064080000bdf5c1d14998d5bbac6c4deae26bc26c30acd5983cc9a8453e000873477ebc926e83d8fccc", "73e37038ac9ee42c0f9f98bdcba7730000bf37cfaa8dd9041d00f2ffffff0051"}) [ 104.831669] syz-executor5 (6499) used greatest stack depth: 14080 bytes left 18:13:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xd4, 0x20}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x28}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 18:13:37 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000200), &(0x7f0000000040)=0x60) 18:13:37 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000100)={0x0, 0x200}) 18:13:37 executing program 5: r0 = socket(0x10, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'erspan0\x00', 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='erspan0\x00', 0x10) sendto$inet(r1, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'erspan0\x00'}) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000000)={{0x0, @empty, 0x0, 0x0, 'ovf\x00'}, {@local={0xac, 0x14, 0x14, 0xaa}}}, 0x44) 18:13:37 executing program 6: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x400452c8, &(0x7f0000000140)={"f3ba6c00", {0x0, 0x0, @empty=0x3000000}}) 18:13:37 executing program 4: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, r0, 0x4, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x3000, 0x8c0, &(0x7f0000ffb000/0x3000)=nil) r4 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) r6 = openat(r5, &(0x7f0000000100)='./file0\x00', 0x0, 0x21) ioctl$TUNSETGROUP(r6, 0x400454ce, r0) r7 = syz_open_dev$loop(&(0x7f000091dff5)='/dev/loop#\x00', 0x0, 0x0) write$binfmt_aout(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="cf010100ba0200004f0b000000000100d10000000a0000fcff00000000000000be049d"], 0x23) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="68040000412732e67ecfbda1c2000000000000000000000000000000", @ANYBLOB="100026bd7000fcdbdf25020000003400020014000100ac1414bb0000000000000000000000000800040005000000140001a6a1fce62162bf412d00000000000000aa08000400080005001bffffff08000500917e000008000500020000000a099a6755e0812cfcc14637bfc3b498d8000e955abe8461a8cd9583e781ec3d39b452ff9a62029646bc474793714cd9ee6a33468fc3623443f3c622831a6e9c053f510f87d52f95e170a64ec776fe9a2b75711111a4ef59f770f9277186f4251370be78f5f0"], 0x2}, 0x1, 0x0, 0x0, 0x4048080}, 0x4) ioctl$LOOP_SET_FD(r7, 0x4c00, r2) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) connect$unix(r6, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) msync(&(0x7f0000cb0000/0x3000)=nil, 0x3000, 0x7) shmctl$SHM_UNLOCK(r3, 0xc) syz_fuse_mount(&(0x7f0000000140)='./file0/.ile0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000001780)="915d02540ee3b45b46d90e1354902e56ddac1f40aec8117c242363d0f62658673fa4371f92625c65174ac29b02f22c93fadc2193cb10aa6ec9cfe414049cece9637bb8893551fab00d23da8f8274603d35616a36e927618a9d5abcccfe1ec75f715d71876f8530be60b5b0e80c91e08162dff13c016f28d67a4d376f6cd3805ccb8f1ae927178c65bb3ffedecb3b7afb03e17c9c7245e6b94ec5be2948fc7773e4b8908b16ae705d1671aa93393ecce71a2d1e946544f576d690136412e145f5a7a6c76c0792db6ef2b52f7b59fb130f24c94c307e036f273002b13f493f8b", 0xdf}], 0x1) read(r1, &(0x7f0000003380)=""/4096, 0xf) 18:13:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000080)={0x0, &(0x7f0000000040), 0xa}) 18:13:37 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000041c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvfrom(r1, &(0x7f0000000200)=""/183, 0x34000, 0x0, 0x0, 0x0) 18:13:37 executing program 1: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000002240)=@filter={'filter\x00', 0xe, 0x5, 0xc00, [0x0, 0x200012c0, 0x200013cc, 0x20001f58], 0x0, &(0x7f0000000040), &(0x7f00000022c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000d00000031000000601f64756d6d79300000000000000000000065727370616e30000000000000000000626f6e645f736c6176655f31000000007465616d3000000000000000000000000180c20000030000ffff0000aaaaaaaaaa0d00ffff00ff00000070000000b4000000dc0000004552524f520000000000000000000000000000000000000000000000000000002000000095dbf184eb18acb1bd5763a140793672c2cd09a1bc13539fcd6e32fd21d500004e4651554555450000000000000000000000000000000000000000000000000004000000ff01000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff02000000190000000c000000dbff74756e6c300000000000000000000000677265300000000000000000000000006272696467655f736c6176655f30000073697430000000000000000000000000000000000000ffff00ff00ffaaaaaaaaaaaaffff000000ff0000d40100002802000050020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069700000000000000000000000000000000000000000000000000000000000001c00000000000000ac1414bbffffffff00000000f90010104e244e234e224e246d61726b0000000000000000000000000000000000000000000000000000000008000000d0fffffffeffffff4e465155455545000000000000000000000000000000000000000000000000000400000006000000434c41535349465900000000000000000000000000000000000000000000000004000000000000000d000000560000000000697036746e6c3000000000000000000069705f767469300000000000000000006970365f76746930000000000000000074756e6c300000000000000000000000aaaaaaaaaaaaffffff00ffff0180c200000300ff00ffffff000054080000c40800000c0900007533320000000000000000000000000000000000000000000000000000000000c00700000010000001000000070000000200000004000000030000000000000003000000430d00000300000008000000000000000100008001000000030000000300000001000000000000000700000000000000020000000200000003000000060000007f000000fbfc00000600000007000000040000000000000004000000e0890000faffffff8100000009000000800000009f08000001040000050000000400000003000000000000000000000005000000020500000100000000000000ffffff7f03000000020000000000000000000000030000000000000002000000000000000100000000000000020000000008000002000000080000000200000004000000010000000104000003000000c700000009000000040000000500000002000000030000003f000000b927ffff00000000060000006cf500008a00000030000000ff0f000000000000f8ffffffff070000040000000af6000003000000000000006d000000090a000000000100000000000104000003000000ff7f0000030000000302000000000000010000000200000001000080000000000200000003000000000000000200000001040000030000000000000003000000090000000000000004070000010000000500000006000000010000000008000005000000ff7f0000090000000600000000800000000000800700000004000000080000003fb900000008000020000000f9fffffff8ffffff00000080000400000805000002000000030000000600000003000000bf54000002000000000000002b0000000200000000000000ff010000030000000900000003000000080000000200000000000000010000000300000001000000040000000100000001000000ff03000007000000ff7f00001b00000002000000080000000010000008000000ff00000070c30000f0090000fbffffff07000000010400000001000008000000000000000200000002000000c2000000060000000805000007000000020000000600000000000000030000000300000003000000020000000200000001000000ff010000030000000004000002000000010000000300000074080000020000008b00000003000000030000000300000000000000000000000600000004000000010000004002000004000000070000000100008004000000010000000800000005000000040000008a09000000800000000200000000000001000000aa030000b6000000060000000a060000ffff00000000000073f90000010000000600000003000000cb0bef2700000000ffffffff020000001f000000010000000900000000000000b500000003000000ff03000001000000ffff0000d9000000030000000000000000c400000500000009000000ef00000009000000070000000600000000010000400000000900000039eb0000653b872e00010000ff7f00c5b9d56635f626a300faffffff4200000002000000070000000500000004000000060700004a9c00000100000007000000030000008100000000000000080000000200000001000000000000000300000003000000ff0f0000000000000600000003000000ff7f000000000000489c000001000000000000000400000000000000040000000200000002000000400000008b080000070000000200000000000000080000000300000025000000080000000100000001010000050000000000000000080000050000000700000036cc00000100000003010000090000000300000002000000000000000700000003000000010100000300000001ffffff03000000000000000200000064240000030000000000000002000000ffffff7f010000002000000003000000070000000000000002000000ffff00000500000000100000a8000000070000000000000003000000000000000900000008000000070000003f000000060000000800000000000000ff030000070000000500000005000000fede1d10f114000007050000aa0f00000000000008000000010000000001000003000000018000000300000005000000000000001f0000000100000009000000010000000000000000000000340000000000000000000000000000005500000001000000f7ffffff15db0000050000008000000003000000020000000100010009000000050000000800000006000000030000000300000000020000020000000700000008000000000800000000000001000080040000000700000009020000b2000000030000000500000000000000ff0f0000010000007f000000030000009bdd0000000000000300000000000000090000000200000081ffffff030000000200000000000000c802000003000000050000000200000000000000090000003700000009000000ff7f0000010001000900000000800000030000000080000007000000010000803200000009000000ff0100000100000002000000050000004d840000030000000400000001010000050a00000400000003000000f704000001000000d400000000000000008000000200000003000000000000000200000002000000140000000000000008000000030000007f00000002000000080000000300000003000000010000000400000000800000050b000003000000ff000000010000001f0f00000000000001000100070000003e0c000001000000feffffff000000ccff0300008100000007000000090000000900000003000000060000000000008007060000050000004c45440000000000000000000000000000000000000000000000000000000000"]}, 0xc78) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000100)={0x800, 0xfffffffffffffffd, 0x3}) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) 18:13:37 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000040), 0x4) 18:13:37 executing program 3: prctl$intptr(0x18, 0x48) 18:13:37 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x105, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8, 0x1c}]}, 0x28}, 0x1}, 0x0) 18:13:37 executing program 6: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000002680)=[{&(0x7f00000015c0)="c138d65abe06d3bfb0ee74ce17", 0xd, 0x4}, {&(0x7f0000002640)="b466397fcda9337f109e42e16a7a41899005bf03c824cc099345f12c4d5f700ee5a6", 0x22, 0x7f}], 0x800, &(0x7f0000002740)={[{@fat, 0x2c}, {@fat, 0x2c}, {@fat, 0x2c}, {@fat, 0x2c}, {@fat, 0x2c}, {@fat, 0x2c}, {@fat, 0x2c}, {@fat, 0x2c}]}) [ 105.307619] FAT-fs (loop6): bogus number of reserved sectors [ 105.313629] FAT-fs (loop6): Can't find a valid FAT filesystem [ 105.375766] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 105.430573] FAT-fs (loop6): bogus number of reserved sectors [ 105.436552] FAT-fs (loop6): Can't find a valid FAT filesystem 18:13:37 executing program 0: exit(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x4) migrate_pages(0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0xdb51) 18:13:37 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x1, 0x805, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "790eaada477f17eb046695eea58af88d0ba3b8f5ca34f33a9a82d81e455bc6ca3479893215467e3bb85ea1247aafde2b17277187bd8fc023bb972d19343108b0"}}, 0x80}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d}, 0x10, &(0x7f000000eff0)={&(0x7f0000012f80)={0x2, 0xfffffffffffffffc, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "68759a67d8602d3e4b207446a705148d03f1f86e60b22a6ec7e5b35afc19cd0ed506fb9cdba948697c01f3ec6bc0f8f98290b0198d30bde485753f80c203fe81"}}, 0x80}, 0x1}, 0x0) 18:13:37 executing program 1: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000200)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x80480911, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffdce, &(0x7f00000000c0)}) 18:13:37 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff7d440000bfa100000000000007010000f8ffffffb702000003000000bf130000000000008500000006000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000010000)={r0, 0x100000000000000, 0xe, 0x100, &(0x7f0000020000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000140)=""/256, 0x500}, 0x28) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x0, 0x0) 18:13:37 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000000040)) [ 105.512620] [ 105.514393] ********************************************************** [ 105.521099] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 105.527792] ** ** [ 105.535874] ** trace_printk() being used. Allocating extra memory. ** [ 105.542590] ** ** [ 105.549315] ** This means that this is a DEBUG kernel and it is ** [ 105.556044] ** unsafe for production use. ** 18:13:37 executing program 1: add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100), 0xffffffab, 0xfffffffffffffffb) 18:13:37 executing program 5: r0 = socket(0x1000100000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="1f0000001e0007f1fff7ffe69902007702f105004327a33d6c39080001454a", 0x1f) 18:13:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x70}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) [ 105.562753] ** ** [ 105.569551] ** If you see this message and you are not debugging ** [ 105.576253] ** the kernel, report this immediately to your vendor! ** [ 105.582949] ** ** [ 105.589649] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 105.596346] ********************************************************** 18:13:38 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(r0, 0x800452d2, &(0x7f00000000c0)={0x1, [0x0]}) 18:13:38 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) read(r0, &(0x7f0000ec6000)=""/50, 0x12) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 18:13:38 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000580), 0x20) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000180)) 18:13:38 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0xc06855c8, &(0x7f00000008c0)={'veth0_to_team\x00'}) 18:13:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) 18:13:38 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x481, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x800, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xa}}}}}}}, &(0x7f00000002c0)) 18:13:38 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/netlink\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 18:13:38 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1000000000003f, 0x38c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) [ 105.977818] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 105.995566] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 106.039558] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:13:39 executing program 0: exit(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x4) migrate_pages(0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0xdb51) 18:13:39 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0xc06855c8, &(0x7f00000008c0)={'veth0_to_team\x00'}) 18:13:39 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000580), 0x20) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000180)) 18:13:39 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/netlink\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 18:13:39 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write(r0, &(0x7f0000002280)='-', 0x1) 18:13:39 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1000000000003f, 0x38c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) 18:13:39 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(r0, 0x800452d2, &(0x7f00000000c0)={0x1, [0x0]}) 18:13:39 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0xc06855c8, &(0x7f00000008c0)={'veth0_to_team\x00'}) 18:13:39 executing program 5: r0 = socket(0x1f, 0x80003, 0x1) getpeername$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000180)=0x14) 18:13:39 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x5b45) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f00000003c0)}}, 0x10) 18:13:39 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1000000000003f, 0x38c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) 18:13:39 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000580), 0x20) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000180)) 18:13:39 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(r0, 0x800452d2, &(0x7f00000000c0)={0x1, [0x0]}) 18:13:39 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/netlink\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 18:13:39 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0xc06855c8, &(0x7f00000008c0)={'veth0_to_team\x00'}) 18:13:39 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1000000000003f, 0x38c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) 18:13:40 executing program 0: exit(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x4) migrate_pages(0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0xdb51) 18:13:40 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000580), 0x20) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000180)) 18:13:40 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) 18:13:40 executing program 5: futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x1000000) 18:13:40 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0xc06855c8, &(0x7f00000008c0)={'veth0_to_team\x00'}) 18:13:40 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(r0, 0x800452d2, &(0x7f00000000c0)={0x1, [0x0]}) 18:13:40 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/netlink\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 18:13:40 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1000000000003f, 0x38c) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) 18:13:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, [0x7]}) 18:13:40 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0xc06855c8, &(0x7f00000008c0)={'veth0_to_team\x00'}) 18:13:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x6, 0x0) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x800) 18:13:40 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000580), 0x20) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000180)) 18:13:40 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0xc06855c8, &(0x7f00000008c0)={'veth0_to_team\x00'}) 18:13:40 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1000000000003f, 0x38c) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) 18:13:40 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0x800452d2, &(0x7f00000000c0)={0x1, [0x0]}) 18:13:40 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 18:13:41 executing program 0: exit(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x4) migrate_pages(0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0xdb51) 18:13:41 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000180)) 18:13:41 executing program 5: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x3305, &(0x7f0000001200)) 18:13:41 executing program 1: mlock(&(0x7f0000fef000/0x11000)=nil, 0x11000) mlockall(0x1) 18:13:41 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0xc06855c8, &(0x7f00000008c0)={'veth0_to_team\x00'}) 18:13:41 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(r0, 0x800452d2, &(0x7f00000000c0)={0x1, [0x0]}) 18:13:41 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1000000000003f, 0x38c) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) 18:13:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/netlink\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 18:13:41 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(r0, 0x800452d2, &(0x7f00000000c0)={0x1, [0x0]}) 18:13:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/netlink\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 18:13:41 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) 18:13:41 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0xc06855c8, &(0x7f00000008c0)={'veth0_to_team\x00'}) [ 108.806118] capability: warning: `syz-executor5' uses 32-bit capabilities (legacy support in use) 18:13:41 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000180)) 18:13:41 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000a, 0x31, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000100)=""/148, 0x18) 18:13:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/netlink\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 18:13:41 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(r0, 0x800452d2, &(0x7f00000000c0)={0x1, [0x0]}) 18:13:42 executing program 0: exit(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x0) migrate_pages(0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0xdb51) 18:13:42 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0xc06855c8, &(0x7f00000008c0)={'veth0_to_team\x00'}) 18:13:42 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) 18:13:42 executing program 6: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227c, &(0x7f0000000180)) 18:13:42 executing program 3: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/netlink\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 18:13:42 executing program 4: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(r0, 0x800452d2, &(0x7f00000000c0)={0x1, [0x0]}) 18:13:42 executing program 5: r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00}, 0x20) mmap$binder(&(0x7f00004be000/0x1000)=nil, 0x1000, 0x100000b, 0x52, r0, 0x0) close(r0) 18:13:42 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f00000002c0)=@ethernet, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x4, 0x802, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x1f4, 0x0, 0x0, 0x0, "790eaada477f17eb046695eea58af88d0ba3b8f5ca34f33a9a82d81e455bc6ca3479893215467e3bb85ea1247aafde2b17277187bd8fc023bb972d19343108b0"}}, 0x80}, 0x1}, 0x0) 18:13:42 executing program 4: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(r0, 0x800452d2, &(0x7f00000000c0)={0x1, [0x0]}) 18:13:42 executing program 7: r0 = memfd_create(&(0x7f0000000380)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) 18:13:42 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000180)) 18:13:42 executing program 3: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/netlink\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 18:13:42 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) 18:13:42 executing program 1: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x8000000003, 0x300) getsockopt$packet_buf(r0, 0x107, 0x14, &(0x7f0000000040)=""/15, &(0x7f00000000c0)=0xffffffda) 18:13:42 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227c, &(0x7f0000000180)) 18:13:42 executing program 3: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/netlink\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 18:13:43 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) futex(&(0x7f0000004000), 0x400000085, 0x0, &(0x7f0000000040), &(0x7f0000004000), 0x0) 18:13:43 executing program 2: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f00000000c0)=0x5, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) 18:13:43 executing program 4: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(r0, 0x800452d2, &(0x7f00000000c0)={0x1, [0x0]}) 18:13:43 executing program 0: exit(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x0) migrate_pages(0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0xdb51) 18:13:43 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000380000/0x18000)=nil, &(0x7f0000000040)=[@text32={0xa8393820, &(0x7f0000000000)="b9800000c00f3235000800000f309d440f20c03501000000440f22c00fc72ec4e17853bd450000002e0fc75900c4c2f547c4640f01cb66baa000ec0f017e0a", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x353) 18:13:43 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 18:13:43 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/netlink\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 18:13:43 executing program 5: r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00}, 0x20) mmap$binder(&(0x7f00004be000/0x1000)=nil, 0x1000, 0x100000b, 0x52, r0, 0x0) close(r0) 18:13:43 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 18:13:43 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/netlink\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 18:13:43 executing program 2: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) 18:13:43 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(r0, 0x800452d2, &(0x7f00000000c0)={0x1, [0x0]}) 18:13:43 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x805, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x2a) setgid(0x0) listen(r0, 0x0) setresgid(0x0, 0x0, 0x0) close(r0) 18:13:43 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 18:13:43 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4004510f, &(0x7f000084dfff)) 18:13:43 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/netlink\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 18:13:43 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(r0, 0x800452d2, &(0x7f00000000c0)={0x1, [0x0]}) 18:13:43 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) 18:13:43 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x101ff, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 18:13:43 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000540)=""/18, 0x12}], 0x1) sendfile(r0, r1, &(0x7f0000d83ff8)=0x4000, 0x8000fffffffe) 18:13:44 executing program 0: exit(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x0) migrate_pages(0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0xdb51) 18:13:44 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 18:13:44 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/netlink\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 18:13:44 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(r0, 0x800452d2, &(0x7f00000000c0)={0x1, [0x0]}) 18:13:44 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000200)=""/26, 0x1a}], 0x1, 0x0) 18:13:44 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000000)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) 18:13:44 executing program 6: r0 = socket(0x1f, 0x2000000000000005, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x80, {}, 0x1}, 0xe) 18:13:44 executing program 5: r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00}, 0x20) mmap$binder(&(0x7f00004be000/0x1000)=nil, 0x1000, 0x100000b, 0x52, r0, 0x0) close(r0) 18:13:44 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) 18:13:44 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/netlink\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 18:13:44 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(r0, 0x800452d2, &(0x7f00000000c0)={0x1, [0x0]}) 18:13:44 executing program 6: perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:13:44 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 18:13:44 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000680)='/dev/mixer\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f00000006c0)={0x3006, 0x8000}) perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x70, 0x9, 0x0, 0x1, 0x2, 0x0, 0x4, 0x8, 0x7, 0x1000, 0x3, 0xbed7, 0x1f, 0x0, 0xfffffffffffffff7, 0x1, 0x3, 0x9, 0x82bd, 0x7fff, 0x1, 0x3, 0xffffffffffff8000, 0x366, 0x6, 0x36de985e, 0xd981, 0xfffffffffffffbff, 0x3, 0x100000000, 0x5, 0x7f, 0x0, 0x6, 0x7, 0x8, 0x9, 0x0, 0x2, 0x7, @perf_config_ext={0x81, 0x5dd5}, 0x4c80, 0x10000, 0x0, 0x7, 0x101, 0xfffffffffffff43e}, 0xffffffffffffffff, 0xb, r0, 0x1) memfd_create(&(0x7f0000000100)='#},#\x00', 0x7) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x10000000, 0x9201}) 18:13:44 executing program 6: ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000440)) mmap(&(0x7f0000ba1000/0x4000)=nil, 0x4000, 0x1000000, 0x30, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000280)={@dev={0xfe, 0x80}}) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0xffffff43) 18:13:44 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/netlink\x00') preadv(0xffffffffffffffff, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x400000000000) 18:13:45 executing program 0: exit(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x4) migrate_pages(0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0xdb51) 18:13:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x2}) 18:13:45 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(r0, 0x800452d2, &(0x7f00000000c0)={0x1, [0x0]}) 18:13:45 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 18:13:45 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) 18:13:45 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/netlink\x00') preadv(r0, &(0x7f0000006ff0), 0x0, 0x400000000000) 18:13:45 executing program 6: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) mount(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file0/bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000200)=',') 18:13:45 executing program 5: r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00}, 0x20) mmap$binder(&(0x7f00004be000/0x1000)=nil, 0x1000, 0x100000b, 0x52, r0, 0x0) close(r0) 18:13:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) writev(r0, &(0x7f0000003440)=[{&(0x7f0000000200)="6816", 0x2}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x7ff}) [ 112.921308] overlayfs: missing 'lowerdir' 18:13:45 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) 18:13:45 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(r0, 0x800452d2, &(0x7f00000000c0)={0x1, [0x0]}) 18:13:45 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 112.948911] overlayfs: missing 'lowerdir' 18:13:45 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/netlink\x00') preadv(r0, &(0x7f0000006ff0), 0x0, 0x400000000000) 18:13:45 executing program 6: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000005e0007031dfffd946fa2830007000247b9a904005a4e43680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 18:13:45 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) 18:13:45 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x27c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc1}) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000480)={{}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x404c534a, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000280)={{}, 'port1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 18:13:46 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 18:13:46 executing program 0: exit(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x4) migrate_pages(0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0xdb51) 18:13:46 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0x800452d2, &(0x7f00000000c0)={0x1, [0x0]}) 18:13:46 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f00000000c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) 18:13:46 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 18:13:46 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/netlink\x00') preadv(r0, &(0x7f0000006ff0), 0x0, 0x400000000000) 18:13:46 executing program 5: r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00}, 0x20) close(r0) 18:13:46 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/netlink\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x0) 18:13:46 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f00000000c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) 18:13:46 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(r0, 0x800452d2, &(0x7f00000000c0)) 18:13:46 executing program 6: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@nobarrier='nobarrier', 0x2c}, {@acl='acl', 0x2c}]}) 18:13:46 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 18:13:46 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "81182e", 0x7, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f0000000000)) 18:13:46 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000080)='\x00', &(0x7f0000000180)={0x81, 0x0, "30bf4af0a1d6f70ed5a48603dd3028ab92026db322d0d3eabdba975c31157ab1664b1d4b6b60f19884e31cfe572f04edd72307b6c5b954092a89cb673c336296ce38765d3746289224e878c9b9b97976cbce229e31ceab4675e7f284f5d385bac2faad6797c2588a6a6f2be58429ae68baf5316e472b6d86c5"}, &(0x7f00000000c0), 0x1000) [ 114.091925] gfs2: not a GFS2 filesystem 18:13:46 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 18:13:46 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f00000000c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) 18:13:46 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/netlink\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x0) 18:13:47 executing program 0: exit(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x4) migrate_pages(0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0xdb51) 18:13:47 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x48) 18:13:47 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f8, &(0x7f00000000c0)={"73697430000080000000000000000002", @ifru_data=&(0x7f0000000080)="80a7da9d14b8db3ddff783ea97b3ebb3b81cf29056f17d539415589d06c50973"}) 18:13:47 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x200000d8) 18:13:47 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='net/netlink\x00') preadv(r0, &(0x7f0000006ff0)=[{&(0x7f0000005f9c)=""/1, 0x1}], 0x1, 0x0) 18:13:47 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 18:13:47 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f00000000c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) 18:13:47 executing program 5: r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00}, 0x20) close(r0) 18:13:47 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 18:13:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x2) ioctl$TCFLSH(r0, 0x540b, 0x0) 18:13:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000100)='/dev/audio\x00', 0xb, 0x0) 18:13:47 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f00000000c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) 18:13:47 executing program 6: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000000140)='./file0/bus\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/bus\x00', 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000500)=""/220, 0xdc}], 0x1) 18:13:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040), 0x1) 18:13:47 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001280)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0xfffffffffffffffd, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0045516, &(0x7f0000001000)) 18:13:47 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f00000000c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x4b}, 0x40002102) [ 115.256448] ================================================================== [ 115.263875] BUG: KASAN: slab-out-of-bounds in find_first_bit+0xf7/0x100 [ 115.270636] Read of size 8 at addr ffff8801d6b2af10 by task syz-executor1/7223 [ 115.277993] [ 115.279631] CPU: 0 PID: 7223 Comm: syz-executor1 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 115.287967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 115.297325] Call Trace: [ 115.299921] dump_stack+0x1c9/0x2b4 [ 115.303561] ? dump_stack_print_info.cold.2+0x52/0x52 [ 115.308762] ? printk+0xa7/0xcf [ 115.312050] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 115.316819] ? find_first_bit+0xf7/0x100 [ 115.320891] print_address_description+0x6c/0x20b [ 115.325745] ? find_first_bit+0xf7/0x100 [ 115.329813] kasan_report.cold.7+0x242/0x30d [ 115.334232] __asan_report_load8_noabort+0x14/0x20 [ 115.339169] find_first_bit+0xf7/0x100 [ 115.343064] shrink_slab+0x5d0/0xdb0 [ 115.346785] ? shrink_node_memcg+0xc91/0x18f0 [ 115.351288] ? trace_hardirqs_on+0x10/0x10 [ 115.355531] ? unregister_memcg_shrinker.isra.39+0x50/0x50 [ 115.361156] ? shrink_active_list+0x1830/0x1830 [ 115.365816] shrink_node+0x429/0x16a0 [ 115.369607] ? shrink_node_memcg+0x18f0/0x18f0 [ 115.374172] ? kvm_clock_read+0x25/0x30 [ 115.378128] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 115.383138] ? ktime_get_raw_ts64+0x4f0/0x4f0 [ 115.387643] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 115.392658] do_try_to_free_pages+0x3e7/0x1290 [ 115.397246] ? shrink_node+0x16a0/0x16a0 [ 115.401290] ? lock_release+0xa30/0xa30 [ 115.405333] ? check_same_owner+0x340/0x340 [ 115.409638] ? lock_downgrade+0x8f0/0x8f0 [ 115.413768] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 115.419297] ? _parse_integer+0x13b/0x190 [ 115.423448] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 115.428970] try_to_free_mem_cgroup_pages+0x49d/0xc90 [ 115.434141] ? pointer_string+0x1b0/0x1b0 [ 115.438277] ? __mutex_lock+0x6c4/0x1680 [ 115.442324] ? try_to_free_pages+0xb80/0xb80 [ 115.446717] ? memparse+0x171/0x1d0 [ 115.450337] ? get_options+0x380/0x380 [ 115.454210] ? kasan_kmalloc+0xc4/0xe0 [ 115.458078] ? __kmalloc+0x14e/0x760 [ 115.461772] ? kernfs_fop_write+0x33d/0x480 [ 115.466071] ? __vfs_write+0x117/0x9f0 [ 115.470293] ? __kernel_write+0x10c/0x370 [ 115.474429] ? write_pipe_buf+0x181/0x240 [ 115.478560] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 115.484079] ? page_counter_memparse+0xb5/0x1e0 [ 115.488733] ? page_counter_set_low+0x180/0x180 [ 115.493390] ? cgroup_control+0x180/0x180 [ 115.497533] memory_high_write+0x283/0x310 [ 115.501748] ? mem_cgroup_css_released+0x140/0x140 [ 115.506671] ? lock_downgrade+0x8f0/0x8f0 [ 115.510806] ? lock_release+0xa30/0xa30 [ 115.514761] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 115.519933] cgroup_file_write+0x31f/0x840 [ 115.524152] ? mem_cgroup_css_released+0x140/0x140 [ 115.529063] ? cgroup_migrate_add_task+0xcd0/0xcd0 [ 115.533973] ? __kmalloc+0x315/0x760 [ 115.537681] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 115.543211] ? cgroup_migrate_add_task+0xcd0/0xcd0 [ 115.548125] kernfs_fop_write+0x2ba/0x480 [ 115.552256] __vfs_write+0x117/0x9f0 [ 115.555963] ? kernfs_fop_open+0x1020/0x1020 [ 115.560359] ? kernel_read+0x120/0x120 [ 115.564228] ? default_file_splice_read+0x864/0xb10 [ 115.569225] ? splice_direct_to_actor+0x6fc/0x8f0 [ 115.574055] ? do_splice_direct+0x2d4/0x420 [ 115.578355] ? do_sendfile+0x62a/0xe20 [ 115.582230] ? __x64_sys_sendfile64+0x15d/0x250 [ 115.586891] ? iter_file_splice_write+0x1010/0x1010 [ 115.591889] ? check_same_owner+0x340/0x340 [ 115.596189] ? cache_grow_end.part.37+0x95/0x170 [ 115.600933] ? rcu_note_context_switch+0x730/0x730 [ 115.605853] __kernel_write+0x10c/0x370 [ 115.609819] write_pipe_buf+0x181/0x240 [ 115.613782] ? do_splice_direct+0x420/0x420 [ 115.618086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 115.623603] ? splice_from_pipe_next.part.9+0x296/0x340 [ 115.628946] ? __ia32_sys_membarrier+0x150/0x150 [ 115.633681] __splice_from_pipe+0x38e/0x7c0 [ 115.637982] ? do_splice_direct+0x420/0x420 [ 115.642283] splice_from_pipe+0x1ea/0x340 [ 115.646417] ? do_splice_direct+0x420/0x420 [ 115.650735] ? splice_shrink_spd+0xd0/0xd0 [ 115.655570] ? security_file_permission+0x1c2/0x230 [ 115.660567] default_file_splice_write+0x3c/0x90 [ 115.665301] ? generic_splice_sendpage+0x50/0x50 [ 115.670040] direct_splice_actor+0x128/0x190 [ 115.674431] splice_direct_to_actor+0x318/0x8f0 [ 115.679084] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 115.684600] ? pipe_to_sendpage+0x400/0x400 [ 115.688917] ? do_splice_to+0x190/0x190 [ 115.692879] ? security_file_permission+0x1c2/0x230 [ 115.697882] ? rw_verify_area+0x118/0x360 [ 115.702019] do_splice_direct+0x2d4/0x420 [ 115.706152] ? splice_direct_to_actor+0x8f0/0x8f0 [ 115.710980] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 115.716510] ? __sb_start_write+0x17f/0x300 [ 115.720833] do_sendfile+0x62a/0xe20 [ 115.724530] ? do_compat_pwritev64+0x1c0/0x1c0 [ 115.729096] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 115.734623] ? _copy_from_user+0xdf/0x150 [ 115.738754] __x64_sys_sendfile64+0x15d/0x250 [ 115.743230] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 115.747796] do_syscall_64+0x1b9/0x820 [ 115.751663] ? finish_task_switch+0x1d3/0x870 [ 115.756137] ? syscall_return_slowpath+0x5e0/0x5e0 [ 115.761051] ? syscall_return_slowpath+0x31d/0x5e0 [ 115.765964] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 115.770976] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 115.775807] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 115.780974] RIP: 0033:0x455e29 [ 115.784144] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 115.803267] RSP: 002b:00007fbfcfac0c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 115.810954] RAX: ffffffffffffffda RBX: 00007fbfcfac16d4 RCX: 0000000000455e29 [ 115.818202] RDX: 0000000020000040 RSI: 0000000000000014 RDI: 0000000000000014 [ 115.825449] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 115.832700] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000ffffffff [ 115.839955] R13: 00000000004c1113 R14: 00000000004d1540 R15: 0000000000000000 [ 115.847216] [ 115.848834] Allocated by task 4476: [ 115.852460] save_stack+0x43/0xd0 [ 115.855917] kasan_kmalloc+0xc4/0xe0 [ 115.859615] __kmalloc_node+0x47/0x70 [ 115.863394] kvmalloc_node+0x65/0xf0 [ 115.867088] mem_cgroup_css_online+0x169/0x3c0 [ 115.871648] online_css+0x10c/0x350 [ 115.875254] cgroup_apply_control_enable+0x777/0xe90 [ 115.880332] cgroup_mkdir+0x88a/0x1170 [ 115.884198] kernfs_iop_mkdir+0x159/0x1e0 [ 115.888333] vfs_mkdir+0x42e/0x6b0 [ 115.891852] do_mkdirat+0x27b/0x310 [ 115.895457] __x64_sys_mkdir+0x5c/0x80 [ 115.899323] do_syscall_64+0x1b9/0x820 [ 115.903191] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 115.908354] [ 115.909963] Freed by task 1: [ 115.912963] save_stack+0x43/0xd0 [ 115.916403] __kasan_slab_free+0x11a/0x170 [ 115.920615] kasan_slab_free+0xe/0x10 [ 115.924396] kfree+0xd9/0x260 [ 115.927480] acpi_ns_evaluate+0x97f/0x9bc [ 115.931608] acpi_evaluate_object+0x48c/0x8cf [ 115.936090] acpi_evaluate_integer+0x129/0x280 [ 115.940650] acpi_find_child_device+0x1f3/0x320 [ 115.945307] acpi_pci_find_companion+0x11a/0x150 [ 115.950046] acpi_platform_notify+0x73/0x1e0 [ 115.954433] device_add+0x3f7/0x16f0 [ 115.958135] pci_device_add+0x5f8/0xa90 [ 115.962087] pci_scan_single_device+0x237/0x340 [ 115.966733] pci_scan_slot+0x13a/0x3e0 [ 115.970603] pci_scan_child_bus_extend+0x5f/0x680 [ 115.975432] pci_scan_child_bus+0x17/0x20 [ 115.979564] acpi_pci_root_create+0x899/0xb1b [ 115.984057] pci_acpi_scan_root+0x63a/0x850 [ 115.988365] acpi_pci_root_add.cold.7+0x14b/0xcd5 [ 115.993187] acpi_bus_attach+0x3c1/0x9b0 [ 115.997234] acpi_bus_attach+0x1aa/0x9b0 [ 116.001283] acpi_bus_attach+0x1aa/0x9b0 [ 116.005331] acpi_bus_scan+0xeb/0x170 [ 116.009109] acpi_scan_init+0x403/0x8fe [ 116.013063] acpi_init+0x941/0xa19 [ 116.016595] do_one_initcall+0x127/0x913 [ 116.020639] kernel_init_freeable+0x49b/0x58e [ 116.025133] kernel_init+0x11/0x1b3 [ 116.028741] ret_from_fork+0x3a/0x50 [ 116.032430] [ 116.034043] The buggy address belongs to the object at ffff8801d6b2af00 [ 116.034043] which belongs to the cache kmalloc-32 of size 32 [ 116.046509] The buggy address is located 16 bytes inside of [ 116.046509] 32-byte region [ffff8801d6b2af00, ffff8801d6b2af20) [ 116.058190] The buggy address belongs to the page: [ 116.063108] page:ffffea00075aca80 count:1 mapcount:0 mapping:ffff8801da8001c0 index:0xffff8801d6b2afc1 [ 116.072541] flags: 0x2fffc0000000100(slab) [ 116.076759] raw: 02fffc0000000100 ffffea00075ac988 ffffea00075acbc8 ffff8801da8001c0 [ 116.084632] raw: ffff8801d6b2afc1 ffff8801d6b2a000 000000010000003f 0000000000000000 [ 116.092491] page dumped because: kasan: bad access detected [ 116.098192] [ 116.099793] Memory state around the buggy address: [ 116.104706] ffff8801d6b2ae00: 00 06 fc fc fc fc fc fc fb fb fb fb fc fc fc fc [ 116.112048] ffff8801d6b2ae80: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 116.119395] >ffff8801d6b2af00: 00 00 05 fc fc fc fc fc 00 00 00 fc fc fc fc fc [ 116.126732] ^ [ 116.130598] ffff8801d6b2af80: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 116.137943] ffff8801d6b2b000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 116.145275] ================================================================== [ 116.152802] Kernel panic - not syncing: panic_on_warn set ... [ 116.152802] [ 116.160179] CPU: 0 PID: 7223 Comm: syz-executor1 Tainted: G B 4.18.0-rc3-next-20180709+ #2 [ 116.169877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 116.179229] Call Trace: [ 116.181824] dump_stack+0x1c9/0x2b4 [ 116.185462] ? dump_stack_print_info.cold.2+0x52/0x52 [ 116.190662] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 116.195430] panic+0x238/0x4e7 [ 116.198717] ? add_taint.cold.5+0x16/0x16 [ 116.202875] ? do_raw_spin_unlock+0xa7/0x2f0 [ 116.207291] ? do_raw_spin_unlock+0xa7/0x2f0 [ 116.211699] ? find_first_bit+0xf7/0x100 [ 116.215758] kasan_end_report+0x47/0x4f [ 116.219728] kasan_report.cold.7+0x76/0x30d [ 116.224048] __asan_report_load8_noabort+0x14/0x20 [ 116.228995] find_first_bit+0xf7/0x100 [ 116.232894] shrink_slab+0x5d0/0xdb0 [ 116.236607] ? shrink_node_memcg+0xc91/0x18f0 [ 116.241204] ? trace_hardirqs_on+0x10/0x10 [ 116.245445] ? unregister_memcg_shrinker.isra.39+0x50/0x50 [ 116.251157] ? shrink_active_list+0x1830/0x1830 [ 116.255842] shrink_node+0x429/0x16a0 [ 116.259657] ? shrink_node_memcg+0x18f0/0x18f0 [ 116.264242] ? kvm_clock_read+0x25/0x30 [ 116.268224] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 116.273251] ? ktime_get_raw_ts64+0x4f0/0x4f0 [ 116.277763] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 116.282778] do_try_to_free_pages+0x3e7/0x1290 [ 116.287354] ? shrink_node+0x16a0/0x16a0 [ 116.291400] ? lock_release+0xa30/0xa30 [ 116.295357] ? check_same_owner+0x340/0x340 [ 116.299661] ? lock_downgrade+0x8f0/0x8f0 [ 116.303801] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 116.309336] ? _parse_integer+0x13b/0x190 [ 116.313488] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 116.319012] try_to_free_mem_cgroup_pages+0x49d/0xc90 [ 116.324192] ? pointer_string+0x1b0/0x1b0 [ 116.328322] ? __mutex_lock+0x6c4/0x1680 [ 116.332370] ? try_to_free_pages+0xb80/0xb80 [ 116.336772] ? memparse+0x171/0x1d0 [ 116.340380] ? get_options+0x380/0x380 [ 116.344253] ? kasan_kmalloc+0xc4/0xe0 [ 116.348121] ? __kmalloc+0x14e/0x760 [ 116.351827] ? kernfs_fop_write+0x33d/0x480 [ 116.356134] ? __vfs_write+0x117/0x9f0 [ 116.360005] ? __kernel_write+0x10c/0x370 [ 116.364148] ? write_pipe_buf+0x181/0x240 [ 116.368457] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 116.373978] ? page_counter_memparse+0xb5/0x1e0 [ 116.378632] ? page_counter_set_low+0x180/0x180 [ 116.383284] ? cgroup_control+0x180/0x180 [ 116.387429] memory_high_write+0x283/0x310 [ 116.391648] ? mem_cgroup_css_released+0x140/0x140 [ 116.396562] ? lock_downgrade+0x8f0/0x8f0 [ 116.400692] ? lock_release+0xa30/0xa30 [ 116.404651] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 116.409843] cgroup_file_write+0x31f/0x840 [ 116.414066] ? mem_cgroup_css_released+0x140/0x140 [ 116.418978] ? cgroup_migrate_add_task+0xcd0/0xcd0 [ 116.423890] ? __kmalloc+0x315/0x760 [ 116.427588] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 116.433117] ? cgroup_migrate_add_task+0xcd0/0xcd0 [ 116.438030] kernfs_fop_write+0x2ba/0x480 [ 116.442168] __vfs_write+0x117/0x9f0 [ 116.445863] ? kernfs_fop_open+0x1020/0x1020 [ 116.450255] ? kernel_read+0x120/0x120 [ 116.454132] ? default_file_splice_read+0x864/0xb10 [ 116.459130] ? splice_direct_to_actor+0x6fc/0x8f0 [ 116.463963] ? do_splice_direct+0x2d4/0x420 [ 116.468266] ? do_sendfile+0x62a/0xe20 [ 116.472135] ? __x64_sys_sendfile64+0x15d/0x250 [ 116.476788] ? iter_file_splice_write+0x1010/0x1010 [ 116.481793] ? check_same_owner+0x340/0x340 [ 116.486099] ? cache_grow_end.part.37+0x95/0x170 [ 116.490841] ? rcu_note_context_switch+0x730/0x730 [ 116.495753] __kernel_write+0x10c/0x370 [ 116.499711] write_pipe_buf+0x181/0x240 [ 116.503670] ? do_splice_direct+0x420/0x420 [ 116.507984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 116.513515] ? splice_from_pipe_next.part.9+0x296/0x340 [ 116.518870] ? __ia32_sys_membarrier+0x150/0x150 [ 116.523620] __splice_from_pipe+0x38e/0x7c0 [ 116.527932] ? do_splice_direct+0x420/0x420 [ 116.532247] splice_from_pipe+0x1ea/0x340 [ 116.536380] ? do_splice_direct+0x420/0x420 [ 116.540685] ? splice_shrink_spd+0xd0/0xd0 [ 116.544907] ? security_file_permission+0x1c2/0x230 [ 116.549906] default_file_splice_write+0x3c/0x90 [ 116.554642] ? generic_splice_sendpage+0x50/0x50 [ 116.559379] direct_splice_actor+0x128/0x190 [ 116.563772] splice_direct_to_actor+0x318/0x8f0 [ 116.568422] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 116.573942] ? pipe_to_sendpage+0x400/0x400 [ 116.578246] ? do_splice_to+0x190/0x190 [ 116.582201] ? security_file_permission+0x1c2/0x230 [ 116.587201] ? rw_verify_area+0x118/0x360 [ 116.591335] do_splice_direct+0x2d4/0x420 [ 116.595478] ? splice_direct_to_actor+0x8f0/0x8f0 [ 116.601186] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 116.606707] ? __sb_start_write+0x17f/0x300 [ 116.611018] do_sendfile+0x62a/0xe20 [ 116.614715] ? do_compat_pwritev64+0x1c0/0x1c0 [ 116.619467] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 116.624985] ? _copy_from_user+0xdf/0x150 [ 116.629121] __x64_sys_sendfile64+0x15d/0x250 [ 116.633601] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 116.638180] do_syscall_64+0x1b9/0x820 [ 116.642047] ? finish_task_switch+0x1d3/0x870 [ 116.646540] ? syscall_return_slowpath+0x5e0/0x5e0 [ 116.651450] ? syscall_return_slowpath+0x31d/0x5e0 [ 116.656363] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 116.661537] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 116.666379] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 116.671547] RIP: 0033:0x455e29 [ 116.674722] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 116.693888] RSP: 002b:00007fbfcfac0c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 116.701586] RAX: ffffffffffffffda RBX: 00007fbfcfac16d4 RCX: 0000000000455e29 [ 116.708835] RDX: 0000000020000040 RSI: 0000000000000014 RDI: 0000000000000014 [ 116.716086] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 116.723337] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000ffffffff [ 116.730586] R13: 00000000004c1113 R14: 00000000004d1540 R15: 0000000000000000 [ 116.738331] Dumping ftrace buffer: [ 116.741854] (ftrace buffer empty) [ 116.745549] Kernel Offset: disabled [ 116.749156] Rebooting in 86400 seconds..