[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 19.279458] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 20.845101] random: sshd: uninitialized urandom read (32 bytes read) [ 21.082993] random: sshd: uninitialized urandom read (32 bytes read) [ 22.191482] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.192' (ECDSA) to the list of known hosts. [ 27.692554] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/31 16:21:19 fuzzer started [ 28.973749] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/31 16:21:21 dialing manager at 10.128.0.26:36251 2018/07/31 16:21:33 syscalls: 1808 2018/07/31 16:21:33 code coverage: enabled 2018/07/31 16:21:33 comparison tracing: enabled 2018/07/31 16:21:33 setuid sandbox: enabled 2018/07/31 16:21:33 namespace sandbox: enabled 2018/07/31 16:21:33 fault injection: enabled 2018/07/31 16:21:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/31 16:21:33 net packed injection: enabled 2018/07/31 16:21:33 net device setup: enabled [ 48.413486] random: crng init done 16:23:18 executing program 0: 16:23:18 executing program 2: 16:23:18 executing program 7: 16:23:18 executing program 3: 16:23:18 executing program 4: 16:23:18 executing program 5: 16:23:18 executing program 6: 16:23:18 executing program 1: [ 146.763547] IPVS: ftp: loaded support on port[0] = 21 [ 146.777533] IPVS: ftp: loaded support on port[0] = 21 [ 146.782659] IPVS: ftp: loaded support on port[0] = 21 [ 146.833984] IPVS: ftp: loaded support on port[0] = 21 [ 146.856728] IPVS: ftp: loaded support on port[0] = 21 [ 146.858926] IPVS: ftp: loaded support on port[0] = 21 [ 146.887957] IPVS: ftp: loaded support on port[0] = 21 [ 146.922426] IPVS: ftp: loaded support on port[0] = 21 [ 149.316587] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.323319] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.361652] device bridge_slave_0 entered promiscuous mode [ 149.389194] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.395733] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.407101] device bridge_slave_0 entered promiscuous mode [ 149.422098] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.428682] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.457433] device bridge_slave_0 entered promiscuous mode [ 149.498051] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.504545] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.522843] device bridge_slave_1 entered promiscuous mode [ 149.532259] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.538775] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.553315] device bridge_slave_0 entered promiscuous mode [ 149.562208] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.568683] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.578108] device bridge_slave_1 entered promiscuous mode [ 149.587599] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.594074] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.617229] device bridge_slave_0 entered promiscuous mode [ 149.627191] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.633716] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.650193] device bridge_slave_0 entered promiscuous mode [ 149.664304] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.670834] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.683921] device bridge_slave_1 entered promiscuous mode [ 149.693754] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 149.701974] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.708435] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.718550] device bridge_slave_0 entered promiscuous mode [ 149.726418] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.732918] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.745729] device bridge_slave_0 entered promiscuous mode [ 149.762164] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.768640] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.787631] device bridge_slave_1 entered promiscuous mode [ 149.796956] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.803544] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.825121] device bridge_slave_1 entered promiscuous mode [ 149.833996] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 149.843660] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 149.854066] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 149.868177] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 149.876463] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.882998] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.921558] device bridge_slave_1 entered promiscuous mode [ 149.935438] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.941970] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.952178] device bridge_slave_1 entered promiscuous mode [ 149.958893] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.965377] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.984166] device bridge_slave_1 entered promiscuous mode [ 149.995865] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 150.004883] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 150.013936] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 150.024648] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 150.032292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 150.085947] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 150.108236] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 150.187789] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 150.197297] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 150.232684] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 150.270186] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 150.375188] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 150.468869] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 150.480737] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 150.542285] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 150.593705] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 150.638120] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 150.670978] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 150.682487] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 150.703346] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 150.714525] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 150.732575] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 150.739647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.758374] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 150.768981] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 150.836651] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 150.843698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.856489] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 150.866349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 150.874981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.903803] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 150.914603] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 150.931470] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 150.940772] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 150.952204] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 150.961216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.996476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.032644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 151.042783] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 151.052866] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 151.098125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.118686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.136204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.153115] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 151.161864] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 151.171990] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 151.179297] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 151.186281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.196705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.205288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.231888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.248910] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 151.282585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.319490] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 151.326570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.352489] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 151.364657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.423561] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 151.430572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.455221] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 151.485234] team0: Port device team_slave_0 added [ 151.551657] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 151.593799] team0: Port device team_slave_0 added [ 151.623423] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 151.645094] team0: Port device team_slave_0 added [ 151.670245] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 151.688572] team0: Port device team_slave_1 added [ 151.709622] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 151.720434] team0: Port device team_slave_0 added [ 151.746971] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 151.765684] team0: Port device team_slave_1 added [ 151.794285] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 151.819251] team0: Port device team_slave_0 added [ 151.836613] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 151.849895] team0: Port device team_slave_1 added [ 151.864093] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 151.875488] team0: Port device team_slave_0 added [ 151.891298] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 151.900514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 151.909840] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 151.928688] team0: Port device team_slave_1 added [ 151.943359] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 151.969087] team0: Port device team_slave_0 added [ 151.983790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.001925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.021121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.035804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.052477] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 152.061141] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 152.068865] team0: Port device team_slave_1 added [ 152.077318] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 152.086409] team0: Port device team_slave_1 added [ 152.097158] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.112206] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.119229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.130841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.146632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.171850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.181332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.190078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.199962] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 152.208628] team0: Port device team_slave_0 added [ 152.214507] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 152.221499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.229643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.245660] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.254737] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 152.264759] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.274492] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 152.298464] team0: Port device team_slave_1 added [ 152.310997] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 152.319172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.331167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.364770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.380841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.388721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.397288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.405363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.413471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.423281] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 152.431112] team0: Port device team_slave_1 added [ 152.439795] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.451681] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.461528] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.470682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 152.482754] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.490435] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.508859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.521780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.542604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.570801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.593608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.603239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.610883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.618982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.626731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.635103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.642980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.651223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.660724] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.668133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.677761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.694712] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 152.704653] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.716810] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.727289] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.737507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.771667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.808666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.828726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.843581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.851655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.859712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.867733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.875600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.884410] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.892412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.900797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.911204] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.920587] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.930233] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.938691] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.946419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.965179] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.987931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.010784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.024339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.033797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.042596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.051426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.062928] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 153.070534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.078850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.103257] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 153.125922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.142763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.172957] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 153.185284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.208600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.240740] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 153.249190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.267723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.355660] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 153.362946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.384917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.327349] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.334119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.341336] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.347776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.362855] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.370316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.412193] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.418687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.425414] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.431854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.503533] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.633584] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.640091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.646814] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.653222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.666389] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.691678] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.698166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.704889] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.711345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.761984] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.782460] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.788917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.795646] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.802105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.821755] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.893893] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.900421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.907397] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.913851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.950015] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.966827] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.973297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.980009] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.986438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.007750] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.146859] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.153601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.160353] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.166789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.188378] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.424147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.437939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.454867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.466212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.473515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.480984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.488655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.192360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.223302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.467713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.598888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.699939] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 160.767257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.787671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.812932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.839470] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 160.849979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.993557] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 161.071606] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 161.237179] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 161.256103] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 161.266108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.283666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.311382] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 161.327415] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 161.333743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.352592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.414293] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 161.422254] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 161.484856] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 161.491211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.502675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.639955] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 161.646288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.656506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.824500] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.842717] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 161.851562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.867265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.884276] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 161.895588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.910592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.942712] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 161.949263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.965562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.991290] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.029701] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 162.036126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.044220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.079970] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.139278] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.430371] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.462409] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.479280] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.589782] 8021q: adding VLAN 0 to HW filter on device team0 16:23:36 executing program 3: exit(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = dup3(r0, r1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x14) 16:23:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000000001000000000000000000000000000000000000000000030008000080f60b"]) 16:23:36 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000333f88)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000fcffffff0000030006000000000002004e20e0000001000000000000002402000100f8ffffff0000000200000000030005000000000002004e20e00000a0ea863accd2ce5ea2"], 0x60}}, 0x0) 16:23:36 executing program 2: perf_event_open(&(0x7f0000000280)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) read(0xffffffffffffffff, &(0x7f0000000100)=""/224, 0xe0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x2}, 0x20) 16:23:36 executing program 4: perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="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", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc020660b, &(0x7f00000001c0)=0x1000000004) 16:23:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000000000000000000000000", @ANYBLOB="6900000000000000280012000c0001007665746800000000180002001400010000000000312554d7f7083fd340ac6dd3fe026a62072a727dc69d5b07d3e69ef6a2aaa155754a9917b73546a7dbc09abcbb516c22d211ff0c92abf003c891e06e1b2c9d186281dcd171382f19ecaa1e647edd013014ac700c32839216", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x3}}, 0x0) 16:23:37 executing program 2: r0 = socket(0xa, 0x2, 0x0) sendto$inet(r0, &(0x7f00004e9000), 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) 16:23:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000240)=[{0x20, 0x29, 0x2, "2b07df2fd0846bc0964f4ffde3d917e308"}], 0x20}}], 0x1, 0x0) [ 165.450614] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 16:23:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="26000000130047f10701c1b00ef900000700000000ffffdf09ef18ffff000700000014006e35", 0x26) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast1, @in=@broadcast}}, {{@in6=@local}}}, &(0x7f0000000000)=0xe8) mmap(&(0x7f0000f95000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000f95fd7)={&(0x7f0000f98ff0)=@ax25, 0x10, &(0x7f0000f98000), 0x0, &(0x7f0000f91000)}, 0x0) 16:23:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x105000, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[]}}, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x50401, 0x0) r5 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x5, 0x82) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000180)=r5) ioctl$TCSBRKP(r2, 0x5425, 0xf84) sendmsg$nl_generic(r3, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="141000003e00050700000000000000069abf2ff604fd0e5534fd40ca24f9ec87a7900546bf63a53adb56064dfd19b9a48b2f2c57b28535f78158ee9c71e1e4d641cb93fb93f3c164fff190b67345ba81e7335dde879393ad102cd3bf7cdedf0bbedea7c5d310bfb10ea039508d9f0fbec035680175344072e3cebade1c896035f32f677271b31d3bd379d06891203b375655b2414325130eccddebe7364747e592efa5b9702b06b5400d27303f9d318eafa5bebd74c8fcfe4f9f21a307d0c2ad623891bb"], 0x14}}, 0x0) 16:23:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20080, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x2718, &(0x7f0000000000)=""/13, &(0x7f000033bffc)=0xd) 16:23:37 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28021) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x7, 0x301000) r2 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{}]}) ioctl$FICLONE(r0, 0x40049409, r1) kcmp(r2, r3, 0x5, r0, r0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x1, 0x80000063, 0x2}, {}], 0x8e) 16:23:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x8) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x7f, &(0x7f0000000040)="19497f0c799e74b3bc6e4b2ba80526fefa684925445d9e9f3d5661c65b2a90bfa8f9d92864195a728831cb0e4e4f2922fcdfe4c59b34fb7de59e77851d47dde81bfcc415ea3dceb9d7bb26db3ab313d2402b221d1d2bf2660b66de671ceb6770c92105ae192f5abe495ac99e4a732259103a132a900f6eaa0b32840f33bbe385db8f351b43", 0x85) syz_emit_ethernet(0x36, &(0x7f0000000140)={@empty, @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6558}}}}}}, &(0x7f0000000000)={0x0, 0x1, [0x0, 0x5d]}) 16:23:37 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x3, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f0000000100)={0x7, 0x6, 0x3, 0xfffffffffffff000, 'syz0\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x204080, 0x0) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x400, @ipv4={[], [], @local}, 0x5}, 0x1c) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x20a000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SG_SET_DEBUG(r5, 0x227e, &(0x7f0000000140)=0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16:23:37 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000f59000), 0x4) sendto$inet(r0, &(0x7f0000000080), 0xfffffffffffffe2d, 0x40804, &(0x7f0000000100)={0x2, 0x3, @loopback}, 0x5834e0848db89b8b) sendto$inet(r0, &(0x7f00005c8000)="c3401c344654f3c7d9fe1ba48c8e399aa4eedc3d6bd8ebd65c856a45d61154adc2b2a976fbffffffffffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x81, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000300)='^', 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="d0b115b1d69900fd38983ba83a9edace62e7e04b33b1bba6ed83415e2a4cb8e79c140896173f9059e799b42ee6e38bfc4722e8e6fb382e4bb60cead1097aac90a80797f25c6b64592c171b4b2058ed7dfbd8314c13237ea1911bc402eebef18bdd5d3d49a6b29bf979a6a2695756e341b47545c7f0e6", 0x76, 0x0, &(0x7f0000000080)={0x2, 0x40, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) sendto$inet(r0, &(0x7f00000001c0)="322792bd6734dd44edf52c6b1b6bd3d06437e1e682eb000607563dce8c1ea0d242ec93d19116fd4473eb0cd7fa177bb17891c0280f5cb6be7baa2d486f0a69b787279e192b671926ca10bfcdfa59c718c154739f4e3644d56bddd0f97cb88a8e3bec09d0a7216c03cc9bb5f778759032cf1a549f5df8623af43791d6246056932e21", 0x82, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) shutdown(r0, 0x1) 16:23:37 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='status\x00') exit(0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000001c0)={0x20}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0x20, 0xfff, "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", 0xc0, 0x3, 0xe58f, 0x100000000, 0x1, 0xfffffffffffffffb, 0x6}, r1}}, 0x120) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040)={0x6, 0xe00000000000000, 0xffffffff80000000, 0x7}, 0x10) pread64(r0, &(0x7f0000000480)=""/100, 0xadfb317ec1ecb493, 0x0) get_thread_area(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x9}) 16:23:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x2, 0x401) r2 = socket(0x8, 0x1, 0x7) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000000)) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x3c, &(0x7f0000000080)={@loopback}, 0x2d) 16:23:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x200, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x800000007fff) close(r1) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x7ff, 0x4}) 16:23:37 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x50e4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0xc) write$FUSE_ATTR(r1, &(0x7f0000000140)={0x78, 0x0, 0x5, {0xcf20, 0xffffffffffffff01, 0x0, {0x5, 0x8ea, 0x80000000, 0x101, 0x2, 0x8001, 0xffffffffffffff17, 0x1, 0x5, 0xfc00000000000000, 0x0, r2, 0x0, 0x7, 0x2}}}, 0x78) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) fadvise64(r0, 0x0, 0x8000, 0x4) 16:23:37 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="bf160000000000004061000000000000616200000000000085100000010000009500000000000000bf100000000000000f20000000000000950000000000000057d239b5806f6fb572de891138bee7491810084e0a7592415e1a503a3e9c07fea564395e9fc76185a818cbeaf2ec654f2f4b8268163e3d4000000041d8c9d368d64f8707aa6c7fa5d7abdf21dee02e25022aa69823e9f30f615862d04eed7dc97270eb64b97548f9bccaa0b5783f72d3a60035fb20a825694260e35d90b48f9b55c529b005fa6242d0538ea7feb8c7f3d2632b23a95d3c0004a7438ef24fe868e9bedba6a0a5a6fd383739ef601fe672be4f203191f56b2e46dafbd21a840c7557197bb7da22704c0c16be7793a156cd65b1fe125257da94374e8740ff536170f1a808c7991e05b7866dae8e30361638b214367bdd7cc480d16feb42f55b43aa62b6ff6117e7423a49001ff0a2679d763e16291b6870f90eca66bfd473da118a7007653f23f20c40f2a84610ac85089d6c2d1d6448c3323b3829ff29fb0086982d78a23be87abca4b1dd8d7f3e8eaf145684e4fe22610d5c459d4b8ac44fc534a939a471c4361ca940da290d9d9f3f6bf123629fc82985a68ee50620217818619abe69d5940cb4b8c2b91bfd6de0a8b8c233c1cc37a49df73001da9a2d9fa9aba37d5abaeb8eb7b251cd2dc284f81c3ff82e93d9534300"], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r0, &(0x7f0000000140)=@un=@abs, &(0x7f00000000c0)=0x80) 16:23:37 executing program 6: r0 = socket$inet6(0xa, 0x803, 0x100000001) connect$inet6(r0, &(0x7f0000000040), 0x1c) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x440100, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000080)={0xcd8210e4a54c9d57, 0x0, @pic={0x2, 0x1ff, 0x0, 0xa4, 0x8, 0x1, 0x9, 0xf43, 0x3, 0x1, 0xffffffff, 0x20, 0x8, 0x80000001, 0x56e, 0x4}}) sendmmsg(r0, &(0x7f0000008340)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000001340)}}, {{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000003900)=[{0x10}], 0xf5}}], 0x2, 0x0) 16:23:37 executing program 7: r0 = socket(0x200000000001b, 0x1, 0xffffffffffffffed) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000100)=""/174) setsockopt(r0, 0x10f, 0x7f, &(0x7f0000000000)="00210300", 0x4) 16:23:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = dup2(r0, r0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000200)=0x2, 0x4) r2 = socket$key(0xf, 0x3, 0x2) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000240)={0x61af, 0x6, 0x6, 0x4, 0xfff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r3 = memfd_create(&(0x7f0000000000)='securityloem0selfsecurity)\x00', 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="6500000003bd8aaf08642cc61f7ba101c886c38b03fc2bd60e1afd33c261385d4094fd4c688b466483aa71674cf77893874fc9dbc163086ad5000038d138620fa3de7a2dd9ab212b09ac558db02d320bb9ebca68ac8da2213dc759c8d1652a3661535786b26a83a0"], &(0x7f00000000c0)=0x6d) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={r4, 0xf4, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x1, @empty, 0x400}, @in6={0xa, 0x4e23, 0xa4f, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}, 0x1}, @in6={0xa, 0x4e20, 0x9, @mcast1, 0xfff}, @in6={0xa, 0x4e20, 0x7, @mcast2, 0x1ff}, @in6={0xa, 0x4e22, 0x1ff, @dev={0xfe, 0x80, [], 0xe}, 0x5316}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, [], 0x1b}, 0x200}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x19}, 0xfffffffffffffffb}, @in={0x2, 0x4e20}]}, &(0x7f00000001c0)=0x10) sendmmsg(r2, &(0x7f0000000180), 0x400000000000117, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000002c0)=0x3, 0x4) 16:23:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={r0}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x9, @remote}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast}, 0x10) 16:23:37 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x14}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x4008af04, &(0x7f00000127c0)={'team0\x00'}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000011000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000100)) close(r0) 16:23:37 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score\x00') sendfile(r0, r1, &(0x7f0000000080), 0x1) ioctl$void(r0, 0xc0045c78) 16:23:37 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000140), &(0x7f0000000340)}, 0xd) socketpair$inet_sctp(0x2, 0x9, 0x84, &(0x7f00000004c0)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000003c0)=""/140, 0x8c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000080)={'team_slave_1\x00', 0x7}) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000040)={r0, &(0x7f0000000100), &(0x7f00000001c0)=""/168}, 0x18) 16:23:37 executing program 3: mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8002, &(0x7f0000000000)=0x7, 0x8, 0x7) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80c00, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x3, 0x1) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000100)="0f300f01f3b88e000f00d8ea44b3c7003ef30f1bc6ea0d00c000369c0f013d0fdb37a5", 0x23}], 0x1, 0x4, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x100000000, 0x0, 0x53, 0x0, 0x1, 0x0, 0x6e}], 0x1) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='cpu\t\t.?\x00\x00') recvfrom$llc(r1, &(0x7f0000000240)=""/64, 0x40, 0x2000, 0x0, 0x0) r3 = fcntl$getown(r2, 0x9) openat$cgroup_ro(r0, &(0x7f00000002c0)='cpuacct.usage_user\x00', 0x0, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x2, 0x4, 0x4, 0x7fffffff, r3}) 16:23:37 executing program 0: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000001000), 0x1000) lstat(&(0x7f0000000280)='./file0/file1\x00', &(0x7f00000004c0)) chroot(&(0x7f00000003c0)='./file0\x00') stat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x1b, 0x0, 0x0, 0xfffffffffffff634, 0x0, 0x8}}, 0x50) stat(&(0x7f0000000640)='./file0/file1\x00', &(0x7f00000005c0)) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000002000), 0x1000) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x1b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x200080, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="0162e700661672fa1c24d9a280faa37940941dc49032574e7e7499bcf333ee544f430b4eccc3e3b6974cf7a0838a37b521f2ca9ea035adf43456a25c9931000297", 0x41}], 0x1, &(0x7f0000000680)=[@iv={0x98, 0x117, 0x2, 0x7d, "ff7757d19161d70ed63d220002cf1f53162ba9325baa2d94b27aaa7ec9ce913c2e8f84e6c7a31166137917cff1243181284a2844db5d615f19d8a8ac085f123e9c1e58a9b040132e75cb2330e81302963f41cd42cba104fac298a8039a9a582a799884c317c8ec9395ecb8387f50c71aa9bb0ded90fc16a45192fa9bee"}], 0x98}, 0x4000080) 16:23:37 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="66b8b6000f00d0c4c21d9ca90e000000d9e866b85b000f00d0b82bff00000f23c80f21f8350800d0000f23f8c4e11de943000f01ca66baf80cb8f0c5018fef66bafc0cec66b840000f00d8b80a0000000f23d00f21f835000000090f23f8", 0x5e}], 0x1, 0x0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000180)=0x11, 0xfffffffffffffd1c) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000073, 0x101]}) 16:23:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_settime(0x5, &(0x7f0000000000)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socketpair$inet(0x1e, 0x2, 0x0, &(0x7f0000000180)={0x0, 0x0}) 16:23:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r1, r1, r1) setregid(0x0, r1) 16:23:38 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0xffffffffffffffff, 0x2, {0x7, 0x1b, 0x2, 0x100, 0x7, 0x1, 0x200, 0x9}}, 0x50) ioctl$sock_inet_SIOCGARP(r0, 0x890b, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {}, 0x0, {0x2, 0x0, @dev}, 'veth0\x00'}) 16:23:38 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x2c) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x10001, 0x240000) write$P9_ROPEN(r1, &(0x7f0000000100)={0x18, 0x71, 0x1, {{0x20, 0x2, 0x8}, 0x5}}, 0x18) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000080)=0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f00000000c0)=""/60}, 0x18) 16:23:38 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x4) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x84) 16:23:38 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x400000019) write(r1, &(0x7f00000001c0), 0x0) 16:23:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffbbfffffff, 0x6, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f00000002c0)="9b247f9c1793", &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f0000000480)}) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[], 0xf6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000380)=""/42, 0xf0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80, 0x0) 16:23:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0xfffffffffffffffe, 0xa00000000) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\td=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) quotactl(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x9}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000480)={r2, 0xf2, "1b3b7ff6870ff07a81321bfabdbafe5ac64334b6e2b7a832184bf8189e90fc78020e3286771eaaf30a23735d12b41a8116d86d1067d839ba4b1adee499091d06ad1b02305287b088b30c6b98cf6f4eb633714cb079a8caa689728343b59f37b57b1151498432a864804ce8a7ecc2af027c9db1c7befe214c50f546cedbdc7ce8bcc09ccdb727224122a67b31da8ea7dcdb7a3f6f0902f30f0823359730630ff364a4007da0f21e48112cebfcec1a1d12eef262eb39131540bbb63820f07fe85ebc37bc19b09d8ba555ae059e06a8d4eb1f3bb5c2ea411b6b4bc1a4a3f3047ddb703b02eecb95a2e2858522f02899c4bbdd5c"}, &(0x7f0000000380)=0xfa) read$FUSE(r0, &(0x7f00000030c0), 0x1000) read$FUSE(r0, &(0x7f00000050c0), 0x7915bb489ee9298f) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) umount2(&(0x7f0000000180)='./file0\x00', 0xa) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x40, &(0x7f0000000600)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x3}}]}}) write$FUSE_DIRENT(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="9000000000deac3cca0000000200000000000000010000001400c6da0000000b000000000066ce656d316e6f246576656d31000000000000000900000061781a0a3c0000000000002c000000000000619fcd38cff2c94f5a3276ce8c9461000500002200002b7379737465746a48be1b31486df7b3bb4a0e9c621967726f7570246367726f000400000000000000000000000000"], 0x90) 16:23:38 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x6f, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e20, @multicast1}}) close(r0) 16:23:38 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) 16:23:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1, 0x1, [@dev]}, 0x14) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x401, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x1, 0xfffffffffffffdd1) ioctl$VT_RELDISP(r2, 0x5605) exit_group(0xff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'ip_vti0\x00', 0x3}, 0x18) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2, @loopback, @rand_addr=0x11}, 0xc) 16:23:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @multicast1}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}, 'ip6_vti0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000140)=""/79, &(0x7f00000001c0)=0x4f) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f00008f9000)=""/12, &(0x7f0000000000)=0xc) 16:23:38 executing program 1: syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffe, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x8001, 0x0) syz_open_dev$sndseq(&(0x7f00000005c0)='/dev/snd/seq\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x800, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r0, r1) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000200)="e57580b53b9ecd0d5a1f6ce4b706a850bfdcd164b01c853101d7c248689f1f234ddf6ed8bdd9fb44efb7354131c993d9664da88b95e38c5c3a3a72b6d5a4c28fb28b86fe4ab3e8e82e3709599015c1e1d7a3592e75f4ba1d82f80960fe2072c2c4c6bf60a6f8572c497db0434bb50f5702fbd91cf060fd1594b227f39a85a28fc0f281da7519f3a0cc08eb81d053569a34fc4ff591278d4ff27e652500920701da4a1f1a22fc86f5e356b1ee2f3c44e2c56a39bb15c886910fc3fccfa3d66215a0d277473d91263e9d545b56dd6031d9d019d06556d9c9eef58da632279c685a13bc00995f39f1081ce81f12dcdaa3f5b148ba8008") r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x42202) r4 = memfd_create(&(0x7f0000000300)='\x00', 0x3) accept4$packet(0xffffffffffffff9c, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000006c0)=0x14, 0x800) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={@ipv4={[], [], @local}, @empty, @dev, 0x0, 0x0, 0x0, 0x0, 0xb546, 0x2000000, r5}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000140)={{0x2, 0x0, 0x2, 0x6, 0x101, 0xffff}, 0x3f, 0x0, 0x8, 0x4302, 0x5, "0bd6620e3919a13788cdb13f0cf59f7fbbc6ae6fc50dea241a2fb408ed1ea55e70439ff72057a726e0eb4e18b3440a7934c0c5a83cc58fd40a3c1fb72ace59ff9a77448c213742f1866f4f6cfaa652b42e8424144ed388be1e1fd9d51d29f34dd7e165cfe97e060db03b7509b1d9232bd097022cd8741643e00452c3b8a9abc3"}) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000780)=""/4096) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000002, 0x8010, r0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f00000000c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)) r6 = request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000380)='\x00', 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r6, 0x7) close(r3) 16:23:38 executing program 6: r0 = getpid() r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xb, 0x0) read(r1, &(0x7f0000000100)=""/158, 0x9e) ioctl$int_in(r1, 0x80000040045010, &(0x7f00000000c0)=0x5) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0xb2) r2 = fanotify_init(0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000240)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x100000, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x40}}, {@max_read={'max_read', 0x3d, 0x7}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x3}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions='default_permissions'}]}}) readv(r2, &(0x7f0000004740)=[{&(0x7f0000000500)=""/149, 0x95}], 0x1) readv(r1, &(0x7f0000000880)=[{&(0x7f0000000840)=""/32, 0x20}], 0x1) 16:23:38 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x9, 0x0, 0xffffffffffffff9c, 0x0, [0xa]}, 0x2c) write$P9_ROPEN(r0, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0x8, 0x2, 0x3}, 0x96a}}, 0x18) 16:23:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x9) ioctl(r0, 0x200008912, &(0x7f00000005c0)="0a5cc80700315f85714070") bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1d}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="87000000008000004700000000010000801ac4e28988c0db8de4ffccd3a8f4a21e78e2d2522f56a3bbb566b0ce260f64b2889a762bc1699e72373011e2c49e7cbaee1529332d1d5f467f648de10d1133ae9d32de2ee33153aba0ed852f2366e248c766946c32d297d037fd74af14520aeeb0d525f32f5bf788d118cb7736186461a776614fef543e446d1734569857fffa7e39aa056b3d7ec1f2c00dd4a583a137a68873a48ea6910d2dfb6b3d"], &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x48) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x101001, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000001c0)={r2, 0x5, 0x0, 0x1, 0x4}, &(0x7f0000000200)=0x18) 16:23:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x1000, &(0x7f0000000140)="025cc80700145f8f37007095e0290a0a85fee502f7b5f010695c8fdaa6598e3be7b9c6de4363d306850dadf15b8431e0b18eef76ea2c09c9b404ed93a0e1eb217900f9fa7b855778b062326d247963803094e8c5d14514ca3daac081c8cd9a6a155252b0d52445f4d809ce3cb955a97a7c7c623508bb1b29341682ba5132180f87468ff259b96995dd89a0551e") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x100000000, 0xff}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x3, 0xfff, 0x101}, 0x10) clock_gettime(0x0, &(0x7f0000005280)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005080)=[{{&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000280)=""/194, 0xc2}, {&(0x7f0000000380)=""/210, 0xd2}], 0x2, &(0x7f0000000480)=""/57, 0x39, 0x8}, 0x2e203936}, {{&(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/135, 0x87}], 0x2, &(0x7f0000001640)=""/153, 0x99, 0x161}, 0x7}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/136, 0x88}], 0x2, &(0x7f0000002800)=""/101, 0x65, 0x5}, 0x24}, {{&(0x7f0000002880)=@sco, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002900)=""/176, 0xb0}, {&(0x7f00000029c0)=""/161, 0xa1}], 0x2, 0x0, 0x0, 0x3}, 0x3}, {{&(0x7f0000002ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002b40)=""/205, 0xcd}, {&(0x7f0000002c40)=""/124, 0x7c}, {&(0x7f0000002cc0)=""/110, 0x6e}, {&(0x7f0000002d40)=""/226, 0xe2}, {&(0x7f0000002e40)=""/33, 0x21}, {&(0x7f0000002e80)=""/16, 0x10}, {&(0x7f0000002ec0)=""/29, 0x1d}], 0x7, &(0x7f0000002f80)=""/77, 0x4d, 0xffff}, 0x9}, {{&(0x7f0000003000)=@alg, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003080)=""/207, 0xcf}, {&(0x7f0000003180)=""/206, 0xce}, {&(0x7f0000003280)=""/21, 0x15}], 0x3, 0x0, 0x0, 0x1}, 0xb7}, {{&(0x7f0000003300)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003380)=""/96, 0x60}, {&(0x7f0000003400)=""/60, 0x3c}, {&(0x7f0000003440)=""/221, 0xdd}, {&(0x7f0000003540)=""/188, 0xbc}, {&(0x7f0000003600)=""/73, 0x49}, {&(0x7f0000003680)=""/248, 0xf8}, {&(0x7f0000003780)=""/2, 0x2}, {&(0x7f00000037c0)=""/226, 0xe2}, {&(0x7f00000038c0)=""/49, 0x31}, {&(0x7f0000003900)=""/144, 0x90}], 0xa, &(0x7f0000003a80)=""/82, 0x52, 0xa4f}, 0x8}, {{&(0x7f0000003b00)=@can, 0x80, &(0x7f0000004f00)=[{&(0x7f0000003b80)=""/194, 0xc2}, {&(0x7f0000003c80)=""/129, 0x81}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/202, 0xca}, {&(0x7f0000004e40)=""/130, 0x82}], 0x5, &(0x7f0000004f80)=""/214, 0xd6, 0xa6}, 0x1f}], 0x8, 0x10000, &(0x7f00000052c0)={r3, r4+10000000}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005340)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000005500)={&(0x7f0000005300)={0x10, 0x0, 0x0, 0x100010}, 0xc, &(0x7f00000054c0)={&(0x7f0000005380)={0x124, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x84, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80000001}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x28}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x17}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x22a4}]}, 0x124}, 0x1, 0x0, 0x0, 0x804}, 0x40000) [ 166.921430] sched: DL replenish lagged too much 16:23:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000200)="baf80c66b890aeb48366efbafc0c66ed0f01d166b9870500000f320f00d26766c74424008a4e00006766c74424023b2600006766c744240600000000670f011424660f629800980f20d20f20c06635000001000f22c0baf80c66b8eae9878566efbafc0cb80532ef66b98508000066b8249c000066ba000000000f30", 0x7c}], 0x34a, 0x0, &(0x7f0000000040), 0x7d45ff3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000040)=0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000000c0)="9a122d58100301f426660f72f100660f38140326ffc40f1871000f000b0f30660ffe260f68a9d39b0000", 0x2a}], 0x1, 0x20, &(0x7f00000003c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:23:38 executing program 0: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) accept(r1, &(0x7f0000000180)=@nfc_llcp, &(0x7f0000000080)=0x80) mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070") write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @ext={0x0, &(0x7f0000000340)}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') chown(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) dup2(r0, r2) 16:23:38 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x6f, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e20, @multicast1}}) close(r0) 16:23:38 executing program 4: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x80000001}, {0xa, 0x0, 0x0, @remote}}, 0x5c) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x200) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000040)={0x7001, 0x1, 0x1, 0x9, 0x5}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f00000000c0), 0xc, &(0x7f0000001640)=[{&(0x7f00000020c0)=ANY=[@ANYBLOB="1000f3070000000000000048b153"], 0x1}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) 16:23:38 executing program 1: r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380), 0x0, 0x0, 0xfffffffffffffffe) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6fac4c22, 0x2100) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x11002, &(0x7f0000000540)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}}) r4 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, r0) r5 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r4) r6 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000280), &(0x7f0000000440)='\x00', 0x1, r5) r7 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00003eb000)="b3", 0x1, r5) keyctl$update(0x2, r7, &(0x7f0000000480)="df02754677212dfc3e2acc26fdc3ffa64813da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa023895113293535d1c0066d20e0f275188b4b4c187e18774fc2227cbb60fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f252510d87bd91d03e7dc2faed85adcd88ca30e75b1e143a72d94defa187e48b89efbbbcc9b9a9a307353df7a21affce4e9149eb122cbc356cb681365afd979e97b57b596e901864a68679f", 0xc0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r6}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'sha256-generic\x00'}}) 16:23:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB='0000000000000040000,user_id=\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000001000), 0x1000) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)=""/152, 0x98) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x8}}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) close(r0) r1 = getuid() getgroups(0x6, &(0x7f00000001c0)=[0x0, 0xee01, 0xee00, 0x0, 0xee01, 0xee01]) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x90000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}]}}) 16:23:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x80000001) ioctl(r0, 0x800008912, &(0x7f0000000280)="6f33bc153035cab9764070") syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb08060006080006ffffffffffff0d000000aaaaaaaaaa04ac1414aa000000"], &(0x7f0000000100)={0x0, 0xffffffffffffffff, [0x0, 0x77d]}) 16:23:38 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000000081ff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000100)=0xe8) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r2, 0x40000000000) fallocate(r2, 0x3, 0x0, 0x80000000) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000140)={@local, @remote, r1}, 0xc) 16:23:38 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20000, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000280)=0x0) fchownat(r2, &(0x7f0000000040)='./file0\x00', r3, r4, 0x100) read(r0, &(0x7f0000000340)=""/168, 0xa8) sendmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f00000002c0)={&(0x7f0000000200)={0x4, 0xa21, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x1f4, 0x0, 0x0, 0x0, "741dc7f3e3f09bf46acaa04aa58254c378ddc34a06ddd119870d5af926d23b71f716d8574226a52a6ce9eab2f4b09d1b853aedb533af733c3ab0fa3b2b94f3cf"}}, 0x80}}, 0x0) 16:23:38 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x40080, 0x4) ioctl$KDDELIO(r0, 0x4b35, 0xb0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000600)={{0x7, 0x2, 0x100000001, 0x401, '\x00', 0x8}, 0x1, [0xffff, 0x4, 0x3, 0x7f, 0xffffffffffff0000, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x5, 0xb7, 0x4, 0x6, 0xff, 0x5, 0x80, 0x4, 0x4, 0xb5, 0x4, 0x7fff, 0x0, 0x8, 0x2, 0x3978, 0xfffffffffffffffa, 0x7, 0xffff, 0x71, 0x2, 0x2, 0x0, 0x6842, 0x401, 0xffffffffffffffff, 0x1, 0x3ff, 0x5, 0x7f, 0x5f2, 0x2, 0x3f3fbf6a, 0x7fff, 0x5, 0x7, 0x8, 0x1, 0xfffffffffffffffc, 0x1, 0x200000000, 0x3, 0x3f, 0x97f9, 0x401, 0x3ff, 0x4b, 0x3683, 0x1, 0xffffffffffffff7b, 0x80, 0x0, 0xffff, 0x7fffffff, 0x7, 0x3, 0x4, 0x400, 0x7, 0x3, 0xffffffff, 0x7fffffff, 0x10001, 0xfd3, 0x5, 0x7, 0x0, 0x9, 0xfffffffffffffffd, 0x3, 0x0, 0x1, 0xffff, 0x7, 0x0, 0x100000000, 0xffffffffffffff35, 0xfffffffffffffff8, 0x0, 0xffffffff, 0x8, 0x100000001, 0x0, 0x5, 0x1127, 0x4, 0x6, 0x409, 0x800, 0x6, 0x4e1, 0x1, 0x1ff, 0x3, 0x9, 0x7, 0xfffffffffffffffe, 0x800, 0x0, 0x8, 0x2, 0x4, 0x0, 0x5, 0x8, 0x8001, 0x5143, 0x1ff, 0x3ff, 0x1000, 0x2, 0x6, 0x2, 0x3f, 0x0, 0x0, 0x1, 0xff]}) sendfile(r2, r3, &(0x7f0000000000), 0x80000003) 16:23:38 executing program 5: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000100000009000000000000000000020000000000000000200000"], 0x1c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 16:23:38 executing program 3: r0 = socket(0x1e, 0x2, 0x5) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10007, 0x3, 0x100000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00006e9c68)}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x880, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000080)) 16:23:39 executing program 6: close(0xffffffffffffffff) r0 = shmget$private(0x0, 0x3000, 0x78000920, &(0x7f0000ffa000/0x3000)=nil) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000500)) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/37) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/null\x00', 0x2c0d80, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000001b80), &(0x7f0000001bc0)=0x4) getpgid(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)) r2 = socket$inet6(0xa, 0x4, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x20000) recvmsg$kcm(r3, &(0x7f0000001b00)={&(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000600)=""/183, 0xb7}, {&(0x7f00000006c0)=""/233, 0xe9}, {&(0x7f00000007c0)=""/180, 0xb4}, {&(0x7f0000000880)=""/94, 0x5e}, {&(0x7f0000000900)=""/133, 0x85}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/177, 0xb1}], 0x7, &(0x7f0000000080)=""/12, 0xc, 0x3b6}, 0x2) gettid() ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000140)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xe8, "795344127e27a0c3f32b22373b6977ca1b520d72544206bf3eb2f2f44e1127b273908e9f32b17311af424236230d529f78f2e67bfc57646ce1a9aa41082599b1b58b69cf864b06d1daacdb0c7c245eed6e7f89d8deb7bffa2fc5146856dea48003bc5e2f6fdc17a41cdf04b2cb748ae33301d1b0939fd2d484f32e168766265e05cf392e4b2e72d95a24d6e7c1936acadc3b37285d8e9007ca6b495b5d710e8d4a1ef12cdea2965e68c23748f01748ad325fd5c7326c5f8ece1a19e9fe2317afe0d4a92c8b501285312858a5835aba180db34153cdc16623731773ae0d46bebdf80e0f57e184b90f"}, &(0x7f00000001c0)=0xf0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000200)={r5, 0x3, 0x0, 0x3ff, 0x36d2}, &(0x7f0000000440)=0x18) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r4, 0x10000001) write(r4, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCFLSH(r4, 0x540b, 0x0) syncfs(r2) writev(r6, &(0x7f0000000300)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 16:23:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x2}}, [0x8, 0x7fff, 0x3, 0x8000, 0x3, 0xffffffffffffffb6, 0x6, 0x9d7c, 0x9, 0x83, 0x8001, 0x7f, 0x8, 0x7, 0xc00000000000]}, &(0x7f00000001c0)=0x100) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000200)={r2, 0x1f}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x1004840, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x10081, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000240)=0x2) 16:23:39 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x200000, 0x0) sendmsg$unix(r1, &(0x7f0000001580)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001500)=[{&(0x7f00000000c0)="2ae3e86ce259032f9d33123182b381bfb9cd7b1166d8c83a0a19dd9be9bfebced1746c218f2647aab1d84d5ee838396c9dd86e759fc12486cc3ea58805cae7452cac142119df2c41cf5148ee21127ed3b4f63ca46b7ef7f328f791ed5968bf5694c2142abe5defe6ee160bf3aef29ff37c176d9951b136a71901916907ff1b05b4e8e338ce4d1df62d19802e9e7cc1", 0x8f}, {&(0x7f0000000180)="0231788fb97af5fb26fa9ad294eed2e891b7e0fe043d", 0x16}, {&(0x7f0000000240)="c251", 0x2}, {&(0x7f0000000280)="8472c8c60d5a1aac7b17f0d5a3c102ade4045c20f1cb7f58ed872ae807414e37fafe28a9709bcf03239b5d34a2d0f23e7e976e277a8f23eb44c421e79ff629501c557684c879a5e092a7b19a5faf9dca0376ca8189a01f9b7eb9e3ca0b0cd3464b474392b200952f65abdebd8133df042aa823de32b04e64962e6cf6c07f8d6a10cf50815a0fe24c518fe61ce9085e40add6b6278cee97a8cddf83cd4ba3336a12dc1bf3c9dff250fd117fec703fcd1e4479611c7c5dd0119d518fc460f4059d6dbaca454597391eeeb9e66ec02ed76be40a0454238dcee9410674ec8719c6bf9f561bff33218d3d3a", 0xe9}, {&(0x7f0000000380)="b720d98d0287aae5549aa3691f182d1f84a1b807c8cd002ccee9fc7a3c415b10691073fc48dd69b7b28a9d91bd30530bfb3f9f1a4be9256d811ebc87ac30491e659b8462516bc4c075d3fe930fee192aa022e4a345a80ab97c58b4ec2381a2614abca17cd348a4edbf9ce6aee2d50cd4a77e6f41b0b4f33e272652ae61bb768b1f7ae1ff33e00d0fa0d402c21d0a2240949c0ace57bb4e6a7a1e95ea899002dac17df896071d6413d05f858979b03fbb8888886378e35bfb7638d4e8fb3b1cb628406ed2ba62a106ffdb35c14c542daeb3ffa1c1819f04332f978ec4a8d9d85ba8a1fcdec5893c8c3eb266276066986abfbb1e170fa551a8dcc2982d900dc8d2b392101e91a7e582c714543b6c6a7b5bed000efba0815b5fdb903e0fe8170b5616158f116f872494efe214bad82b274a26750321eee8d0e5ce1f23ee43f3d76d0d8da8a61966eed95564578ad5c9277637e6c923df1219dac2a74c8d4d8ae414519bbcb637347af24a3439b3f061b6a5249c918a0146106bfb19b7922af9c6e27769801c25b411132ff2a6aa9be9e55f9261c819fa3109b6803ba406e6b86856e2648f494def2976e50941802e4db1ea79b8a749b35d93e8db4905661b2161d91b38265266eeaedc8516577066b51ee7c23513b41d02a534b9ff716526f833ea30e6dfa6ec2ac2e265dfe6f25ad745ce1c282f66ee94d9bde64e94b279f04cb453c71a5ec4e65b7934ca5a40fb7091961e57c67b306dc3d84ca607a5387ee968cc2dce2c3f1ae277db39604fad39a7d0b70a1b2d7f2a526ad9861c32a89111960a544c6f06f9ec24085cee0d304968c4f4265368466f81ee0c77f195c46165df971173ccaa89f76e7566116ca67ba968b60aa28484376048db46ae75f54c7120b59798da686afdc2f598ab74c27d05c1211683cb054b229232eb7a52dbe5074bfa17c41984bef27e8a7ecfb4f4ffe30978c707d4f157a8a6cf99f66502d1affca71b347a91584a5285c2f7e73b28f509578a79d6065a2dd502d7c5b92bdd403e61a43446952a114509bcc28e6f4938c7863ab437613a953d00faca70825db1074b14bf378352a8a91d6bd70e62b8acd43ddb2b92421fe2d1b109b3567c1726b9d68c2981ddd274c2b4816853f9662c9d686dee50cc434d120f69fd092985954f71b3e9e0b6bbb7911c40ae7d9841fbd052286c5c1458a1c9e7a18a7f1af91c1c560544e5102bf2490261b25eff40bc53dfa50c144e05e8d3ffb375f984b2d1c07d451c120ca9cc4f2bf00187a11d969795b9b987c3384fcce21987ee679aea134ecabd9d31f42477f689764f1c035b3e31c43aa32c9e99b526d70c1c3fd81435a4347e3f086c4af3da084de7c6b876d39839a535c0a2c3466c3c5521e1010b6c72d7a79f8b176e5dc7a88261a3113cd3a02abd2f789ee19181aec2a847d79f1a2c158402268bb07a47417af9bd34482abff25e7394173b83f222d1f32fc491c70d642e9281f0fc68e809791a0c9afee9eee940478383062ec226e68f4b2c505c834714da7b8f25b2f1f55c58e16f54b178a119d7758f799ddfb1f2286de4f64f986c8730436fd1d69342e185efac8f3a731c807552d4043ef00906ebdce9a88880add24b2e317cc30d600322332b8288cb98729b3d5e14a6d64722aa19b3b3a0ece228bf81b05d5829d127b738d05edf3aa233030db3e231efe81e3ab082e2f250a591e42c240d0e1b3744b297e940ca3f46b9037668b5263a897e423437d82b6a30130e9fbe65b9de18b0179fe6c32d83f6a2adeaadaaa04941fb5e46aa5c36ea644442ed6a1d6c105062b7a72be017e234e9765acf317f133da77dca6c30ef45f36defcbdf6ac046ea0a0d1b24cde952863a35ecaec5fe3faec3a5f74dd9608d232fd57195c80fea84b556d883f4d697387e751510cc25acbc65deb592769fc638d89c2a1d399609b6bf55e019b9332bc4ffc950264182df46985e9d166565c79c9e5d47c796b9c0585c0051098610f66ffe9e8f7b438b2d0a692ca8c87bf33cb4792957f4ef30e684c4bbeb148405c9583f3c17237945f9b35041b055ecb5e47f87442ffffde592a1471e7a6dd5c1985cbadfea15f80cc29131c86469a9be0f5b59c5ac42b8e0163b10205fcace6ee423b8d646ef8a47d2650718b289fa11f74193d4a10e25a02abf911761a2e98efb240770e1861f43441c6da190bb60844c6073f2e2a4c30c8760256d354040c828eb292e928e25d6fd9b0beb0e279140c0f925c64d5a0c8da7c20f66b63320798a4b52a77453264abead2dfd2d779e21ec1b3aa501c58a136727b52312febd369224ab6db465a12bb8dba9ef1972e1c697595680b94c8e2a8c5961a5f89bff544f08e321e04ef658dfa6e8a82da2660a570a4a792db42e358189624a9cfc7af495558befb8d091cee1d9ac32a0e1641d72508982ace9f90d87db393fed40905fd265f4da18333deeee998d230723f6566f6ba8e81067d9056dc6b464f3e6f2745682f79623c1e98e2839e629d3126bba500ce33987a447b319f91d3fe9106934b32b45a0888440148949fa429943953a348c093495ef953b7b88ce058bd186a0cb0564ea5b97cafd9506a359a50e6cabf83cfac8edf74804efadb3abd2d254153762a61074f7fb55cea2205511136a0addcf8e401291c0369a2064d5280e8e8055d692957432449e510ea4809042ed032a0014764c1e26e816c3e8c514e75b344dd28e422f7f4bced84ffe58f2d1fc8c787fde55b6a95de1dd94fdc02c2278fd42d6805f89fadadbf1e76818dd129c402c6df2b60df2669b84a12e8d4c5a158fe1711ad9a8ee6bd9542039d65553a557fc70c23ca1afedfd464b9ade2d8d33ecc66d09376453f3060fd6f35d2d6eda2e29d0ab4e8a13f1cf13edf4d23e581835138f49fa5c00e94167693bcd95d5c64db33a6f74a08669d2b6d06775af6f052d97ee6cf3498dfc58cdad50326e348f96fb25ca112d1378e139a6260224737c50cfb11340b8773f1a69f6c66534cce34b57cb37481f9a98251560b982f7fba2662fe54070c731d5045308c2f5918992dae1c9c87439373fccff777cdac1d00b16ee532fa60572f5238321aef7eca6281c2d7398db9d3b0cf290e7b5b58c124b87d7ca2752a9ddf31b8e0a922b37ca4365197d7b8224130e4202a70a7b169a492f65d8dba61bae1d1f762e9148002d20ade838f1d3263618f832b5c5327254a8f560df91a38a9808cca42ff4c78093988bf710e637ec9389749072218f59a7626f84b5bf641e1ce1d3a8bf1f95b3a3758a859c12f5e3550d711da0a8290d253598b2a81488a8dd74586c43f46f98a5c675993fd77d5a2292691e8111441860a9e618f2bbeed216a1a01a1fd0fa15902ecd5db2ea9ae5002b58148635af769d0097779c6cbfcd5fae216f0fa253c68c35d6f23819d55f5c6d508d210d4dc617295ee045b4230c0435d4d2a2d121e92d7c0452e81c1c9e4d76e4d036cc80c940bc5f7fd4830dd29891db94b13dc7c8f61d2956660b39e369148e3cf3dfba39c64b993bab12f0b469b25f50a7289bbe049d732f794f27c4419733e25ef3a5305c626e7f767b21537105f147300db8046ee120743e35474de879e561a1ef20eaf991da62786f6f31c66e7a5cf88affa2f6e88fdc766bcc5685b86675d74d6befc93257fc9f76bae44f2e61925677fe7db37d310875e4b63895dbbba4062222fccc928ce2a2773bd14e29a14012de3eb3f28ed2b6c4414601c4e6b58e0ff10f522ec5425ca7ad479acf4193c15054cb853cebb4d1e7100c45363265f2d78451c3cbbaccc45f2c63635bb53afddd537b8256ad2583aa56e13685e56e7bf9a5f595657e4bb56529d494dd68e0da979c014dac8c132bb61ca2a76abea63b4e3335c26b5c4c0f97d6d26bb96e6796ffe87043cca12c6304204c28f435b1d7cd82e96cc91a8cc65f20559aba641a559155df4c587890e11852185d5f6496d9fde599ca4ff6b9eb9c91de25410407f0f3cc27ea2e5eab58defa94833f0871226774a199eb254d67b81d877b74a52e94061f4d9910761b8fed739df1fc4761165889e95225a9dd1099196f4e406280ea98cea2b595588a9cc9da63ce5ac2b91461a138e61661128776296063e3978e74ada5a5b2c8b94bdf6e9d919da8405e346a7a62f0bad49e5ce66fb9eaba8f9ea8e7461df78941530c9bdc8785f5c4d3bc0f226bdb2b3cc6183f9828f8d826008e4bf3bb85c433dcfea0000fd4c0357d661047139f4e4403af9776e902568c2eb6dda2fac1f8414f85286d362fd809fb88a34daf886d2a817217272d515dc80854a8ee6b17e8cd6d75e27bbea2119e355122121f1f08b8f764642624b1ee3bf94716c4ae90e7794c1ff6d5754839cf41fbd0ae06ed36c79a576bceaffd359f59184a0232a5375e55c7b7e0e2c812a8888d87ac50aafc7ef6920a0fc70ff6ed8f9124108d5833461d1c46e16757c826c422d9b9b89c4670ba030c390b2a3dd51fb19e60432ecea53e89f3427fe51b490d66c219946ee51fb5eb562981e1cc09d3b5ab68f8166debdd14419da74fc57534a4cb0943ea8a1623f683d7add5ae9705e59a4ed55e6afef38a59869aecde8db410805b46e94b069083ace79ade1653f7cebbdbcc4f8b0216eac0a3bc2034bb7f053a2f65c57cc506aeb28bd091e41307d9dc1ecf053592ae2cc8f95eb237cc4302f99d84d1953483d39fb6109b0bf178cdee245fccab1ce3ae8107cd8f709576487b4b8719ed3488e4f6c9412eb6a16640e441f2d28f622a9e77b8f6a333e776279b346efcbfc324b4e80c7a9c2d2dfe1ae367f9a9228c5f0fe4236c27738dc68c77bedbdd4eed32b9ae2406a85bcf17b8ef00a3e6fbf2c898fda0bc4b33aef7862640fa2f531c0df6a67abef48b4ade148610b3a5e501afa25ff31b7d292d202b3e94bb1ebf4bfc762eb0ece8b1455fcc736dbfd84214b3edd0e6a6079867ab6687d334ebc07d8669b3b9e97d846d0262b6250d0ea296e5ff203e84431f748762491dcb86242a5ffc5a798e76b0d264664b5826ef07cfd1a28b3a11c556b8cf17fc48fafb42fbaaeec4f1f236d8385a8ff6b4234804723323d3ae8ad0d18958881401c4ad10afcb7b256b09231c9e4b54ea750d805b3cbab1512cf81a38b2290a8d93c95ffd10d442c6a509536c3c3b1f16064b57c92d390730a6ae8b3a637f212c028601611af0c43509d45b626dd4dd50264fc2569b0c288f236d40789ccbe767f5eed9ae96493467ad9df2eb8cc7428958e5318da9e3c4d68943d19c14d765c1d6baaf23dc93bab22603126ab8bf453bccecef64dc6842589507b40e766838852b0a0648fd18bf26dc10e3ddb8194ac7cb010391fe067aac339f05c692d4c57b4a94f32e57823c28a11f504df22a33ca41333971023ea09a01c854ebe4772f708e42b0052ac655793810c05d5b9e6a65d1a665fa358603745eded0c48c48daea3c9e6f4f94f5df0a6e8da124c9571364e0514fb026998c1ee18c3dde9ba38683503b894561eb6c3d21bedc2d3f8c06295d99fef2ab3d9d3b2457401fb03e35bd9ad7e18c4c00d8bd4042ba7db3306d458cce321d45c972cc029945f1d9b55028d8403cf7df7f02f2d05224e1deddaf2859c77d3cd934c0ed5d51d1da61b46277f854a5f5b25dcbd1512570fe9a2ebbcdba7fdd3b83eb78dd1f4d779f3144370316a93bdc969616675f3d6384252e5739291205f811961660e3284491d53e3f8ac2fa551f9ff5adf46a272a4fa5a65ad52fef7af4ddfa", 0x1000}, {&(0x7f0000001380)="431e497d6d1e69c7865ff2856e786c5186ea7a9a4ab1ea9d2f6685c5b818963c1f40a82709c2253d9abd66e2819f3abd", 0x30}, {&(0x7f00000013c0)="633ec7effe00f84a40053593151d8eb1ac16ab2ba0313067767a0f23f306ad583c104202eedfaa3f4259170377a74ee71494fc56884e2359dbfa9c99018f2e5b30797a4034eae0e2db53bf6fd38748101443d53c446e0a39dfe2e9c0eeddd626b5e33c2d9fc636589b79b190d02feaea8ad60be96b42f1b9c58e111bfb65f6b1bd0d1580ca68c24f1ed22eb98e7280dd60d37dbc5abd53bce1f82c482182b27aafe4740e955d52d900d6e9bf263ad49fb5004f0d964c2703c09b4145fec3fed613d15818c79870f388ff0264cc36373bc33e270b683090de13568897", 0xdc}, {&(0x7f00000014c0)="335589013db25a", 0x7}], 0x8, 0x0, 0x0, 0x10}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setfsuid(r2) setfsuid(r2) 16:23:39 executing program 7: socket$vsock_dgram(0x28, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x100000000003, 0x20000000000001, 0x2}, 0xf) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000340), &(0x7f0000000240), 0x2}, 0x20) 16:23:39 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000000b000)={&(0x7f0000000100)={0x10, 0x5}, 0xc, &(0x7f0000beeff0)={&(0x7f000063de2c)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@rand_addr}, {@in6=@mcast2, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 16:23:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f0000000100), 0xc, &(0x7f0000000700)={&(0x7f0000000500)=@setlink={0x40, 0x13, 0x101, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @broadcast}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_getroute={0x1dc, 0x1a, 0xb00, 0x70bd2a, 0x25dfdbfb, {0xa, 0x80, 0x10, 0x3, 0xfd, 0x4, 0xff, 0x3}, [@RTA_GATEWAY={0x14, 0x5, @local}, @RTA_PREF={0x8}, @RTA_PRIORITY={0x8, 0x6, 0xffffffff}, @RTA_MARK={0x8, 0x10, 0x401}, @RTA_ENCAP={0x118, 0x16, @nested={0x114, 0x71, [@generic="126b18cf5faf36070cae9684977341", @typed={0x100, 0x8d, @binary="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"}]}}, @RTA_ENCAP={0x7c, 0x16, @generic="a500a7a00dd6f36a76c876e8903685f8e9e1954ce9648dbe625f18d65dc0534859cbacaa88d6fcb734470d7afea3f97a529aeb7f61799eeb4bf93d54e669213e75486c982bb52cd386d1d4b1bb1f4a4c60afd61675bcfdd515de6fe032206e0865b30d78301bda2f027f1fdaf8b25c91ee88a509c76f"}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x24040800}, 0x8010) 16:23:39 executing program 0: r0 = accept4$bt_l2cap(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80800) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, {0x3, 0x6, 0x44, 0xcbcf, 0xff, 0x9ef}, 0xc0, 0x8}, 0xe) r1 = syz_open_dev$sndctrl(&(0x7f0000309000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0xc0045520, &(0x7f0000000040)=""/85) 16:23:39 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x6f, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$LOOP_CTL_REMOVE(r0, 0x4004556e, 0x0) 16:23:39 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x10f8) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0xfffffffffffffff5, 0x1}, 0x50) 16:23:39 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = getpgid(0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x8) preadv(r0, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/130, 0x147}], 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) read(r2, &(0x7f00000000c0)=""/11, 0x22b) io_setup(0x4, &(0x7f0000000040)=0x0) io_cancel(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x2, r0, &(0x7f00000001c0)="b63ddffe9f40dff6e2646ad878b9b0bdf5ce0143218772727d215a446d206c7dafb70e45703366bc5af588531181a00e606dff20bdc1542a7188503270489e7a4114e934dd9be8a025bf5aea057b75dfd06a14045187c3b0f001c09dfc651ecdf2edc717ca631212c9dcf0ab70cbae571fbd37d16e4c4b3d6440a4dc6ad30777ceb43a5a1303ea02e68c86d927c29e14241bf76c8899c4376e9d8fd1df56ebb2f68df88194defe35ef14a5409ad001325b14cfb07585bb8fbfec15e9", 0xbc, 0x100000000, 0x0, 0x0, r0}, &(0x7f0000000280)) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$VT_WAITACTIVE(r4, 0x5607) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000100)) 16:23:39 executing program 7: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x80000, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000200)=0x9) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000080), &(0x7f0000000180)=0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0xa09, 0x0, 0x0, {{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x5, [{{@in6=@remote}, 0x0, @in6}]}]}, 0xfc}}, 0x3) 16:23:39 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRES32], 0x1}}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{&(0x7f0000000680)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f00000007c0), 0xeb4, &(0x7f0000000800)=""/4096, 0x1000}}, {{&(0x7f0000001800)=@pppoe={0x0, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002d80), 0x1, &(0x7f0000002e00)=""/90, 0x5a}}], 0x2, 0x0, &(0x7f00000037c0)={0x0, 0x1c9c380}) [ 168.068657] Unknown ioctl 1074025684 [ 168.094136] Unknown ioctl 1074025684 16:23:39 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) open(&(0x7f000054a000)='./bus\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff2a, 0x5, &(0x7f0000000540)=[{&(0x7f0000000180)="25706728551e7aff9c9a582d984a85d7f4088fd9269c279c0847e092bd80dd15022d66dbd48478d7bbb10988026064c8e49642f9bedb99fb9683cf586328b0c4b7ccc131c864ed8ea0f113183bdaed06025c7e98ffc51123b90ca0d42cf6a17bd53da650e9abe04c000301f6ff6d499769e54691dacb4fda4483", 0x7a, 0x5fb3d51f}, {&(0x7f0000000200)="cb512bcce54410503283f2b6ddf294f885db73c68770ad9f9168cf62a5958017256419ff967c52753f947c522518904596ec6ce3e96af11e6af66d9fc1f69a13e77b930dbaf7122974b432f5d2def94333ce39ebb828707e17171f990a07741ff78aa4b6cbd5c44f1d2d6e39c3dcefe298888728cae538881b669103b20297ef159abf30ce17861ad70ce345763f1018dfcc61278a0e208b99de2fa9519863059b046ec13a9749d4a54ce4", 0xab, 0x4}, {&(0x7f0000000400)="39d0785b6bab10ee3afcd74f4a6e2ba3167fd83977865e3d89122aa6203e836fe36fe002b43471d4c2696c0e963a9cb3222fe44f8f5bd58699f3a7e4b7a8e1a47c09f4b54cb000946c274e1abaa948027148783714b6beef6730b73720565cd2bfbd216119e272b81a3e724c5bf594f4be57b0ad84e27d65d28af936b55309da543a2a9a8115e157bb12f928edd156e657029586ec02f294b86db9225c88d8142251", 0xa2, 0x563}, {&(0x7f00000002c0)="04efd59f9bb62875b20fd9a1f1936eae0fe6b170f6e9fee8f196aba6ef3369495761fb2ce03b89ff9241b19a280fd82aa090b2400ece492c99637be36a13415f33", 0x41, 0x1}, {&(0x7f0000000100)="430baf624def62d9b54a40cfba37892e3eef487876295e81cbbe6230e7c99fd36e21fa9f55", 0x25, 0x4}], 0x2, &(0x7f0000000380)={[{@shortname_mixed='shortname=mixed'}, {@rodir='rodir'}, {@shortname_mixed='shortname=mixed'}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@rodir='rodir'}]}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$int_in(r0, 0x900000c0045002, &(0x7f00000000c0)) 16:23:39 executing program 0: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = socket(0x2, 0x2, 0x0) shutdown(r1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000000eff4)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2, 0x0) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000040)={0x3, 0x4, 0x5, 0x6, 0x1, 0x7f}) epoll_wait(r2, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) shutdown(r1, 0x1) 16:23:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet(0x10, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000080)='%system[\x00', 0x2) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000150007041dfffd946f61830002200a0009000000fe1c40000c1ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ebea8653b1cc7e63975c02007b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:23:39 executing program 5: socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000180)=r2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5501, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a}) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f00000001c0)={0x0, 0x40000000000000, 0xd}) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) [ 168.196258] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. [ 168.234860] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 168.269180] FAT-fs (loop1): invalid media value (0xef) [ 168.275608] FAT-fs (loop1): Can't find a valid FAT filesystem 16:23:40 executing program 6: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) r2 = gettid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0xfffffe85, &(0x7f0000000080)={0x8005}) close(r0) process_vm_writev(r2, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000200)=""/191, 0xbf}, {&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000440)=""/138, 0x8a}, {&(0x7f0000000080)}], 0x6, &(0x7f0000000880)=[{&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000580)=""/177, 0xb1}, {&(0x7f0000000640)=""/105, 0x69}, {&(0x7f00000006c0)=""/79, 0x4f}, {&(0x7f0000000740)=""/148, 0x94}, {&(0x7f0000000800)=""/28, 0x1c}, {&(0x7f0000000840)=""/56, 0x38}], 0x7, 0x0) r3 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 16:23:40 executing program 7: socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) socket$can_raw(0x1d, 0x3, 0x1) io_setup(0x8, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x16b, r0, &(0x7f0000000000)="100000004ee793000000000000000000", 0x10}]) 16:23:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20000fff}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="c7000000c3a71bf666499a104e44b798871d3e9360a9c34a2402c2fe38dcfff7b28bc80e1e7831863f37e0aa49a8e9f76bc3015ec2bafd1f24b3f167706fc6b603d6da850abb4a0100467dab9a693445d08f73ced08d7b4ad8fe1cfad62222bc3838169e0f3570091bfe6c9e99f76a20b59d1d1bf3953bd3c400f9b5fa2377ee4c428e1b369d268190d061fd582f91cbacd7f0378f08fa0c0ca7975dbc4e58751f6a8d509f11d66bcee30e3d87d5e76a331e5e823bc3b43624da778e02dfa833b0115bee994d777d5b39000000000000f3219e8cd74ed485fe91"], &(0x7f0000000000)=0xcf) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r1, 0x7}, 0x8) getpid() getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000001a00), &(0x7f0000001b00)=0x4) 16:23:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x200000002, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='\x00', 0xffffffffffffff9c}, 0x10) getsockopt$netlink(r2, 0x10e, 0x5, &(0x7f0000000100)=""/239, &(0x7f0000000200)=0xef) getsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 16:23:40 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dd58ce565aa9a9d325ebac7627ffe7a54cdbd77b3", 0x2b}, 0x60) listen(r0, 0xfff) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) 16:23:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025c3f0a00145f8f764070f91776748e45af952c84273cf01c1d9b5f8ca2a54792e7a695b68f70b6e081c8ed4b56b94ca8617894e0f08fc12ce6bfe573bcc5fcd4057382a758c9784a4777ecc0dc7125fe9c05399f5ea0f323") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x470b02, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0x1000, 0x97, &(0x7f00000005c0)="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", &(0x7f0000000100)=""/151, 0xffff}, 0x28) r2 = socket(0x5, 0x82, 0x100000000) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)="6e65742f707363686564000dd5f4608e66e327c1a936a27de1958bcf2b1f3dca1cc7f85e5b90c67c82b13597ba6265de6917782a429e971f4d600a36762383aaf11950e6a30d71656262fe67989cf68f04281428f59d6fe3b891f2c8136eea20ddafd7515b92744d7ea6fb041a96f8778e1eb5352687a7d1c294859b29f6b14dbc81ee9daea4c01e1909c0a2dffe2c958399d8f2e51c130000000054f24cba2b717d958736a79a3b7fdc0f1065f92be1ad80471debe743276dff85bb92fcfd9f77ffa5bf450ef92cc0edacbbf482dab05b557c5e62f873e5fcd035b1cc73a55957b496a1f82b083038420c1cd1e9000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x80000002) 16:23:40 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000000)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x4002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=@hopopts={0x7b, 0x28, [], [@jumbo={0xc2, 0x4, 0x4d93112c}, @ra={0x5, 0x2, 0x1}, @pad1, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x50, {0x5, 0x12, 0xffffffffffffffff, 0x704, [0x4, 0x1, 0x0, 0x9795, 0x3, 0x1, 0x7, 0x6, 0x9]}}, @generic={0x9, 0xd6, "f36c73819ce78663b32df6341e306ea67221b1621dadd8430b9d03f3e2ef515d6bedcb2df54309232e63546904e7c995df29ce41109894e1b0168ab3a75544d9e2123aae7ed9334599d4f6f71a48c879e78e24c54667ea4e921294271d689eb305864a28f58dce02ea3775fbb856bb0617934cbd1c9dbb63d232e406dce3a7a047dae88302adc0241e857990a17f4e9b5736dfe9ec8c89302e6c5927df67d02477941d10e4fadcb1b575615dd87bb1443dceb6cf9076ef3ac003a3e89caccc318ac724ae6038b3adeaadb8ea187820f913dc641bd17c"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x148) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x30}, &(0x7f0000000040)=0x18) 16:23:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x40000000000001) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x90d, 0x1}]}) ioctl$EVIOCSKEYCODE(r1, 0x80284504, &(0x7f0000002ffc)=[0x1001f]) 16:23:40 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000001140)=0xfffffffffffffe83) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x288800, 0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0xff, &(0x7f0000000180)={0xea}, 0x8) [ 168.743971] syz-executor3 (6884) used greatest stack depth: 15512 bytes left 16:23:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0x4, 0x1000, 0x100000, 0x2, 0xffffffffffffffff, 0xffff}, 0x2c) 16:23:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0xfffffc6d, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {r1, 0x3f, 0x0, 0x0, 0x0, @ib={0x1b, 0x4, 0x9, {"9955f29b4249a0085e17f3d0e8b0e58f"}, 0x7, 0x0, 0xfff}, @in={0x2, 0x4e21, @multicast1}}}, 0x118) r2 = memfd_create(&(0x7f0000000440)='\x00', 0x2) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000540)=0x1e04, 0xffffffffffffff1a) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000800)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"8420e139ff841b4126b7f193d36af535"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), r1, 0x2}}, 0x18) 16:23:40 executing program 6: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000400)="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", 0x3) bind(r0, &(0x7f0000000000)=@llc={0x1a, 0x33f, 0x20, 0x6, 0x6, 0x3ff}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) [ 169.043191] FAT-fs (loop1): invalid media value (0xef) [ 169.048668] FAT-fs (loop1): Can't find a valid FAT filesystem [ 169.067506] ================================================================== [ 169.075098] BUG: KASAN: use-after-free in p9_poll_workfn+0x660/0x6d0 [ 169.081584] Read of size 4 at addr ffff8801d47c9144 by task kworker/1:3/4948 [ 169.088751] [ 169.090367] CPU: 1 PID: 4948 Comm: kworker/1:3 Not tainted 4.18.0-rc7+ #170 [ 169.097453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.106826] Workqueue: events p9_poll_workfn [ 169.111267] Call Trace: [ 169.113853] dump_stack+0x1c9/0x2b4 [ 169.117471] ? dump_stack_print_info.cold.2+0x52/0x52 [ 169.122646] ? printk+0xa7/0xcf [ 169.125915] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 169.130659] ? p9_poll_workfn+0x660/0x6d0 [ 169.134800] print_address_description+0x6c/0x20b [ 169.139639] ? p9_poll_workfn+0x660/0x6d0 [ 169.143777] kasan_report.cold.7+0x242/0x2fe [ 169.148179] __asan_report_load4_noabort+0x14/0x20 [ 169.153100] p9_poll_workfn+0x660/0x6d0 [ 169.157063] ? p9_read_work+0x1060/0x1060 [ 169.161209] ? graph_lock+0x170/0x170 [ 169.164999] ? lock_acquire+0x1e4/0x540 [ 169.168974] ? process_one_work+0xb9b/0x1ba0 [ 169.173988] ? kasan_check_read+0x11/0x20 [ 169.178137] ? __lock_is_held+0xb5/0x140 [ 169.182200] process_one_work+0xc73/0x1ba0 [ 169.186430] ? trace_hardirqs_on+0x10/0x10 [ 169.190668] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 169.195325] ? lock_repin_lock+0x430/0x430 [ 169.199563] ? __sched_text_start+0x8/0x8 [ 169.203716] ? lock_downgrade+0x8f0/0x8f0 [ 169.207877] ? graph_lock+0x170/0x170 [ 169.211666] ? find_held_lock+0x36/0x1c0 [ 169.215824] ? lock_acquire+0x1e4/0x540 [ 169.219808] ? worker_thread+0x3dc/0x13c0 [ 169.223952] ? lock_downgrade+0x8f0/0x8f0 [ 169.228103] ? lock_release+0xa30/0xa30 [ 169.232077] ? kasan_check_read+0x11/0x20 [ 169.236213] ? do_raw_spin_unlock+0xa7/0x2f0 [ 169.240612] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 169.245196] ? kasan_check_write+0x14/0x20 [ 169.249438] ? do_raw_spin_lock+0xc1/0x200 [ 169.253757] worker_thread+0x189/0x13c0 [ 169.257746] ? process_one_work+0x1ba0/0x1ba0 [ 169.262240] ? graph_lock+0x170/0x170 [ 169.266036] ? graph_lock+0x170/0x170 [ 169.269839] ? find_held_lock+0x36/0x1c0 [ 169.273896] ? find_held_lock+0x36/0x1c0 [ 169.277959] ? kasan_check_read+0x11/0x20 [ 169.282280] ? do_raw_spin_unlock+0xa7/0x2f0 [ 169.286692] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 169.291789] ? __kthread_parkme+0x58/0x1b0 [ 169.296017] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 169.301034] ? trace_hardirqs_on+0xd/0x10 [ 169.305249] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 169.310777] ? __kthread_parkme+0x106/0x1b0 [ 169.315096] kthread+0x345/0x410 [ 169.318464] ? process_one_work+0x1ba0/0x1ba0 [ 169.322957] ? kthread_bind+0x40/0x40 [ 169.326756] ret_from_fork+0x3a/0x50 [ 169.330471] [ 169.332091] Allocated by task 6868: [ 169.335722] save_stack+0x43/0xd0 [ 169.339258] kasan_kmalloc+0xc4/0xe0 [ 169.342957] kmem_cache_alloc_trace+0x152/0x780 [ 169.347619] p9_fd_create+0x1a7/0x3f0 [ 169.351407] p9_client_create+0x8ed/0x1770 [ 169.355631] v9fs_session_init+0x21a/0x1a80 [ 169.359939] v9fs_mount+0x7c/0x900 [ 169.363492] mount_fs+0xae/0x328 [ 169.366848] vfs_kern_mount.part.34+0xdc/0x4e0 [ 169.371418] do_mount+0x581/0x30e0 [ 169.374953] ksys_mount+0x12d/0x140 [ 169.378567] __x64_sys_mount+0xbe/0x150 [ 169.382528] do_syscall_64+0x1b9/0x820 [ 169.386403] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 169.391570] [ 169.393183] Freed by task 6868: [ 169.396449] save_stack+0x43/0xd0 [ 169.399890] __kasan_slab_free+0x11a/0x170 [ 169.404109] kasan_slab_free+0xe/0x10 [ 169.407903] kfree+0xd9/0x260 [ 169.410995] p9_fd_close+0x416/0x5b0 [ 169.416895] p9_client_create+0xa9a/0x1770 [ 169.421132] v9fs_session_init+0x21a/0x1a80 [ 169.425440] v9fs_mount+0x7c/0x900 [ 169.428969] mount_fs+0xae/0x328 [ 169.432324] vfs_kern_mount.part.34+0xdc/0x4e0 [ 169.436904] do_mount+0x581/0x30e0 [ 169.440447] ksys_mount+0x12d/0x140 [ 169.444347] __x64_sys_mount+0xbe/0x150 [ 169.448323] do_syscall_64+0x1b9/0x820 [ 169.452203] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 169.457379] [ 169.458996] The buggy address belongs to the object at ffff8801d47c90c0 [ 169.458996] which belongs to the cache kmalloc-512 of size 512 [ 169.471661] The buggy address is located 132 bytes inside of [ 169.471661] 512-byte region [ffff8801d47c90c0, ffff8801d47c92c0) [ 169.483521] The buggy address belongs to the page: [ 169.488448] page:ffffea000751f240 count:1 mapcount:0 mapping:ffff8801dac00940 index:0xffff8801d47c9d40 [ 169.497897] flags: 0x2fffc0000000100(slab) [ 169.502223] raw: 02fffc0000000100 ffffea0007411a08 ffffea0007409048 ffff8801dac00940 [ 169.510093] raw: ffff8801d47c9d40 ffff8801d47c90c0 0000000100000005 0000000000000000 [ 169.517957] page dumped because: kasan: bad access detected [ 169.523659] [ 169.525272] Memory state around the buggy address: [ 169.530192] ffff8801d47c9000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 169.537541] ffff8801d47c9080: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 169.544900] >ffff8801d47c9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.552245] ^ [ 169.557778] ffff8801d47c9180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.565134] ffff8801d47c9200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.572486] ================================================================== [ 169.579845] Disabling lock debugging due to kernel taint [ 169.586054] Kernel panic - not syncing: panic_on_warn set ... [ 169.586054] 16:23:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") syz_mount_image$iso9660(&(0x7f0000000240)='iso9660\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1252c3fe3c0e35fd53473df3a71ba8ef143e2c42a0495d7dde6c7c2d7a640ffbe4bdbe60c644db3ff97051c89e542e7ec7b266db177275366af54dea2628087b730cd0bcc8d6aceb03ebf6d8a30a0000000000000000"]) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)="5e759e6f6138dabe382b2f22185663aef5d44b937d651c53c4a5bfd4b360f8350ce55cb467239b6ddefc066c19e6a02be884f8521fc0bf4e5d1374311e4ca52041cfcbf4f55906e111bc4e590e73074e6036dc063db4bba03b2e9c78144ea0527bde6e7eab2136324619e739f4bba9505928ff07542a3fef37ae844f299600acb43398e75a7b0e7db0e65fae6b0ac1f5134490fdd6d40fe99564", 0x9a, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000140)=""/142, 0x8e) 16:23:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x8) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x800, &(0x7f00000001c0)=0x1) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x20000000005}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) 16:23:41 executing program 7: r0 = socket(0x4, 0x3, 0x10001) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'bond0\x00', {0x2, 0x4e21, @remote}}) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f00003fd000)) prctl$intptr(0x18, 0x0) 16:23:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000040)="0296884ff2db5f8f764070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000000c0)=0x7, 0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000052001f0014f9f407002c04000a00071008000100ffffffff0800000000000000", 0x24) 16:23:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r1, 0x80000080044dff, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f00000000c0)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80000, 0x0) 16:23:41 executing program 0: syz_emit_ethernet(0x22, &(0x7f00000000c0)={@random="00f09121a10f", @remote, [{[], {0x8100, 0x2, 0x3192, 0x3}}], {@can={0xc, {{0x2, 0x7, 0x1ff, 0x2}, 0x2, 0x2, 0x0, 0x0, "1862fb23d1a768a2"}}}}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000002c0)=0x4) mount$9p_xen(&(0x7f0000001440)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='9p\x00', 0x7048, &(0x7f0000001480)=ANY=[@ANYRESOCT, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="493eef16d31e276fb2cbe184dedc906ed486c0cdb091ce78751664d16c1b53c092209c7838d5482d15", @ANYPTR64, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR64, @ANYRES32, @ANYRES64]], @ANYRES16, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR64, @ANYRES16, @ANYBLOB="c3655411047a7874e8204fbbce7b85c271f3e69f13ecb2bc29c349b2642f97a122eead644ce97169f55b46dc3bea0c0f49c950f40df6e76517aa651946a242f3f05f0d1a9c85eb65bf0ce71f4b49c8156cbea53707c7734bb3e74a3b152e350ed4ab652a628c325c8b00c2441df508ab9c59d52254c8e551d4ba3e917d9479877747d0773013908753ad7fef51835e22145e22404f54eeaeaf17f8b0a8ba20cb86bddc377d829b9e85d64894ebac73c1802cffee8a769d9b4ce764452d901a68af00323eb303b49bfdc9179053bd1e2b71d00a1c5481b0d17e6c989d4c56459da53cfaee28831f920c1f94185be47c025049e1f652120120aa82919f81609b983aea1bfaa3a14884aced641569424cda23fad59f841bdd09a01be90c5e8e1c0ff794dfb1463fcfe067be418b0b9a8aed1df46e3bce5f2dae48f37c8acc985c5a54e8c11cdce35f2bd2b003e5fac1f86c459e8d52f8f292a210bb12ab035548b88e55af942de578f513e07e0d1151665a002524e8cd21d2af2d2a67488efb8e5d9e379b1fc25d27fc44a4a3ee760d3c4d29d5858d3634a385b6c92012f2ed48c524b99250f38fe768f774f5d28c552cfd8066ee241aac728442e9b9dd553f6a5460bf24523e69afc690f35a9cacde00d819e82dae0fd957401386298fcd7ee5c4af6cc6b143473950d02fe8ceaa0b95fbe99e57da0910ce27806dbd298d4baee384eb8f726888a777fa8dcf20d2dae0c5e279da31cdc2c9b73678cfe9f346d3baaea9bba35016e9557eb77fbb7979e2dda1173057e91b87fcf627ae29294ef249fbbbe0a14f0f9a5f352975bb918604749cea104ecbe771df8da1722d2f5109bcd29aaf92cd71677bc25f77e1268918b9ac75f5c381e0a2a2b85c93e33ca8f38848ae8a70d13f8bc80a7306a2329a0ad827ef2ba815aac33ea7aabee990b9012cac37ef2113229a62929de86c5bbb02b483caf09a1766da9a4f41af0a00c26300a8e69050b14d09fd85052ed6d35deb06ae36e1791b23ba8381ce84d8312666781fe95f5ec1a061aaee92767a122ca1f923d1ad160531f5e867c8e09089cbd71bb8c6d6d55da5ae53fec902a8d5000c2e1083d91ae80624f35e5ed2fcb0ed438fc514b78d35815ec7814e0922a71272448ab9c50f2500e768c21754cc12be16881a9c0659db09ae941c8a3f090da6514293dcb132b4503044e1c6c9f71c2c1f3e5fb7e4b4f0136b1dcdf2b7dc6f7b2b2cb6a83a34adab7a0796ac6cd56f42980f4d8b273b0250c10961f9e89e7dc795107cb7e959cffeedd3bb86fed23b8ef45fc0e80c088c75d596efab8fb9aa892547cb3a8ae813a5c5ab1ea449ecc1a3739009335e1e80905ced7bce4ec05c661c6426ccce5d7283fd3627ec4dbcd162bb893e4a55a4d64220ff2824bdfbe66d748f4ea5779692652517730fa569675bf1c5b2b522a0a5ed99ec5c5d9a6ce5b6c85781a7eaf082cf29f13db7a757e840556dee35d6188397ccb4e6b9fb7fdbb1c55d77f3c3c6678dc2714eaaddd7a18cd621b0516a09575f51b797aae6ffd7a7ba002672761069a9312f01d9b4cc54bc89d62e234e1abb5bc72bd2b0e79bd1fdf101b839e9b276bacba2969cdcaa234336dad5724c8a4a9700f8bf1668e54f52203a277ee310568a4db7300f2211ed6f1191cb5d593869695e23fd31428f593f03914ad037d7f0fd54633762d8be0ab445f8e17acd57597a20880a96856f75da5d1f05fef6e0fe2232154a0eb18b694fef6513b13d9f9dfe4c07aa2d8e8057dc3ae27969f36b4f9a81c8aae60d4db4e79a20c73dc68ab82cc8b7b55c7b0024690f7490a35039067f87e82e0c689a2e49b6713e11f89b3e8bccaff66b8e7bb4d34604a3d0aef13c3e1b4e836b922ca5412ae547d7518467c937b004c425f0034286f9f35e67703a4c47b97f783a6fcaafc273c7fc47d4b618fc2ff903828acd61eb9a5a073d3620df4e2689a5ad9888158cb7166fc71f33d5814cf19fbe84bd9588c0939b82718b31ffc21013e27aa466da3ad62ed7be1a051f6942701830b83fb2a46d7d900d889aae3fe9c6285fbc787e62492f8427ea5c1b2256ee3f483a36e0fca01baf7a02d382b734776bf5b10eeaabab2c39f930bf2b930f33ad2e53ff606c1cfc0a0c9d8bd2078ea900ca0f4c3bfbca857280e025307173399fb8d7da2e655b5125da307dd7e75cfe493da497fa19a8efc1d0c9636d02b77dcdc4014baddd3e0c6f6a1f3cc2f49b43285fde6f5d844ef87585345d3d43724066789a19d1788abe6de4ea8ce1abbfa92d8d4bf40839af15fe0c5dd338a41619e41f259306441ab1edc9a3df093ae7a05a6aca23ced9cf3020c0ceed9435e0842488494d7204abd9362eacf546cff7ce775f1193b73912fea4d9d0dce8976cf613ba215e6701ac4d3f41684c352043f63d6dec4215e0c7bc984b6950c580f0d162fa5cae7a369b33e1fbe1b5feb2be3299628b7010b66eeca6f91103cc41cd9c5cbb48d24811298f3d90847e765ca232459a9e64902cca76357476fcaecf38d139590912dd86cc015c627e358868d34cf8aa6c1cd210e028a97f545105e27de26ebe1701b700189fcfc0f2fb78b71168083614f1b0c08e7bab0d696b436d222ac47f3c1951d6ee4163c41fb625e72a808e1b5f353a98b650482611b24497083aaa52f75b6998ddff4e058ce5bc67b17eb41368dc054555134d2c55708fffa6751b0e3d112772a97e225cffe93b18a072b1cac97433b9dcfc5e9df8e4a64b941dbf7aa2978daa97796edf251895680fa766dd69e4d12efef321f559657b2e24c5800bced7dc6fe805f3b82bb8774e269e69ea0fe96690a5625315d06302ef527cb756f71331a452f05e312b11c6dc54b0160122230c1f40014e5896a3e8b9ccbb62fdda5108feaa5a83be0e253b98966030f5d2887427b5512947be9957de56139432e04d18732c90a3ab52d6083a5ae8d720cd01ac632d5298ff7f1e8f87ebbe975b35755dcdbd998849983b73d21622f4d3cc78141b5c60c144e950279921ca3865f58e9b96e9db2a79a3e899a19651774eeaf17412879ed01868f9e873e47e42b65e16ba4451c57d6d6817642a43ced5fa7e9b95756a1f0457b93c2cae5907ea4be49aecbd7749e0482ad98f65f4c2aa0b6faad13dc09586cbb35ebdab82f4c68b717028ece0ecbdc5d5639f62ce7f2f4b2e9db1aca008c6c2a6bfed58d34a26b33881ed1169db91000a1733fabec9dcc8eaae4c43a2f7c92e0e14a833d3686b385f8924b86d7f42b6a4cbc42baf0a284f3fef31d0bb42a6ed0ed3a62c69f85b8ca44cbe105a974d0bfdbd4c1511f07520a2f1048760d38ab5af1f18d6d6b7a420f21613d6f26be31c7df67a31b9305936c0c5a12843f20dff45460baca34f7cfee5aafee01db8c33f7971b8fbe51a74a582c89f7bbf925a7fcaa9cb178304108f50a1f28db1565ec214e0b1f9dcedb457a70fd748c0fcd2e7d9ac848654074e1113cf7184b7cee3240ddf24562ee7224a811e32a20ec06ff1fb6e7198a09e14a166d842ae3d0e9a12b06fc56e2a37082f6876b57eff2e181235646245d8ea8e6d5c560f5b2ac364c5abe1d78eca8414f0276b3bca0ec8798ae4b162c7177e437e607859e3bc10d6ef47a47db8da3946d51d31b722ac8f749c1b20fae8f03016f6261b5f19d6aefbd1a58622cccad3e36a750add6473adac1d6fffad9e92c8466d34d3955677be05b5c675fc6d86edb8c643fe3653d740c37ac065af47ec1c2d3387c9c44b82c6b01b2581dfa10cd3454e865ad1b432470082d9d0500f0e7a4c55f29b3ccc0b633ead56d2e325005a24dd91fc041fdf4956dee1a3689cb77348eacc05dc94e248456a224d7e9aa949da1a8927ebcee57912cc7434784620674d18d91cb51c7e393913da950f07e917edfe93dbebca4d0d27020c98e3a9ed6ced664522bb07447d9b81299a8ea614ade40c08f1cb7a7a2e1a1e01d88f3095b5d0f98a1429b213ee10a36374165789c18ab32831b5197943dc894d0450ffaca0c4b746461d980f695449ffba83c9671f7b4494d8c7ff229c70a19092def517f1861bec631b473f04adb735a2f96c676e90311c8117384e40ed13ca6fa8cfd5f126174f67b7a3d21af6684684915f52146b6c23b8997f8e28b4bfefcbae489a685fe99b446a2b4b7f53fd4025e662ff839aef47f7229c9f9618edcd6ea8badca47b16f4a4d3f78bc366d4d45bd522cc11aa09af6d2d1f87ef488bb12df922ea2647c0c487080986a8b88c3e2c2f5e60950cd0e0789775afd9b903bca6ac930bf9a73da086699c21acd03be3be92c096a1c495761c6b7b031664752dae21e3ae63bef8db7a7683485d5228fd262ebe18b7005118bdb7377383e00b12d50cb6f59e63f08c6be0f32813568df913737a36b4d02d2efcc41dc6277c8aad62005bb4f68cd79aa333f2c387611c826820a97a2ce1ae86272d290fb98f9268986a11ebabecf0a97564d448242f34b8472782081bc74349078a643246b71189406c818f680b928882d2702e89fa59461198781b7dd2d5f378a9ddd9f89dc2fdeec4782a46f1cec3dc4e995aa44cdf63c9db2fa8946bbe152af8ab374e3d263a84a3c13efa4531d274b9b0e6380b6d0c90cf06f52f74ce1a963c3a50872b925c8f3b3ed8adebff6b1d45a3d8ee870fd6a0ccacee30d6383aa5a549e6778ab1df4b5a4a34df8b909a52b14ec4498186c2ac49ca2c897e481fc7485bfc5b2ac75d766c4f2566d0d96dcdda3671ad97bba022dcf5cee29df7cc77362d014f156226ddbd60e7241b1550e903089a62a9a5243b091509990295c9661dad20dea663f41299b55e4a256cc2afda41181f5cf3067feff4d2755e14225f8fde1725ad7d390847d323cdd30d8a679f99ce878fb6cc0c09d4a10bac9f6a4f82f50c9f2a8beb2506af6aa298be380fbfe9e287afd265f65a2be6bb770d4fda149cda48b7164e0c98b121cfacba26cdcdcac52db783abcbe3f5d6aa6668e96cf347d99af8fa39bad9696e55180f1384c287b9a4846bb842f13ac2739c32f78eb9e43af1dc547e7f5ba9506947cadd0d9c300c4c4b5e0db46e275bdee93bfec872393e0cd532b4bbce33f0744943d028d0cf04b5e769f38dd4cde53236b15205428a0f2ab054614cb5e8ee75203e7d361357d9d18bf920b89d5302abb99132bc65061fffd7d754461eb779c791de0f40ea650b7306a38923d0b16d5e9c3d2a7ae74dc5f92a6ec81335e4923666ea800252b8f16db2a790ac837e88f4fa02094e8466c14a113d19cd68bdcb2ee347429e41457c6dbbadf30cce81db4c501fe66538cea2711a186acf0745d7d2ac2083b4ae5dc00a7c705e758fa0cde813f6c2b13100117d3f40c3184c735de23ceeeabcdc22d1d3f33e0bd133f5e7402a0c88bc629c80576781597cbb1c81b342600f4528148886d03f1d5aae033dbb275cf5d5b8d37f497386e2b076ad21a10fbbafb7785972497ae1c383c1c463654263d90c632156304843f92fcbad7ad032a2ce97a91b78963a87f42df9a318c5ad5ae3237ff9ce64836a457b02d1338d3b54e4e40a2950a0869a839d114b40f80fb1a5579ce6c0363a641af673f5183e38090a05b058fa5cb4cb91a40804c7302d3261b630530807d0d8844d0d6aa2a3094bec0c571fc86bf0367822e37156cdc3adae604c622322d0b0bf8cc22dcb00b813cfc0a651edfe64209759c3dabb36e7ce801392c6836e87b578a548b36da0f59d5d624bff87a1330c4ccdedee7e0a82a73e6cb1e8", @ANYBLOB="df6312809e977fff621b47a545232f29cc78b4a8a1d8f8c1923b23e1025c409c1e4bb50bcfd2ea764d2ac2a07e0137cd1f51c6a54d578809f927a3ff52f36a43b39c9cec2f1a7c7555e89c941dc5db9c0086ea6a8d2016022930887be30c", @ANYRES32, @ANYRESHEX, @ANYRES16], @ANYRES16, @ANYRES16, @ANYRESOCT], @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYRESOCT]) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x179, &(0x7f0000000300), 0x68068, &(0x7f0000000380)={[{@noacl='noacl'}]}) 16:23:41 executing program 4: unshare(0x2000400) socket$inet6(0xa, 0x1, 0x0) [ 169.593444] CPU: 1 PID: 4948 Comm: kworker/1:3 Tainted: G B 4.18.0-rc7+ #170 [ 169.601937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.611307] Workqueue: events p9_poll_workfn [ 169.615723] Call Trace: [ 169.618337] dump_stack+0x1c9/0x2b4 [ 169.621981] ? dump_stack_print_info.cold.2+0x52/0x52 [ 169.627181] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 169.631947] panic+0x238/0x4e7 [ 169.635153] ? add_taint.cold.5+0x16/0x16 [ 169.639326] ? do_raw_spin_unlock+0xa7/0x2f0 16:23:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0a5cc80700215f85714070") r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x2) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000400), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000340)={0xa0, 0x19, 0x1, {0x1000, {0x63, 0x1, 0x3}, 0x4, r2, r3, 0x2, 0x3f, 0x3, 0x100000000, 0x6, 0x80000001, 0x80000001, 0x7, 0x0, 0x8, 0x7, 0x7, 0x6, 0x2, 0x4}}, 0xa0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, @local, @dev, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000100)) [ 169.643767] ? do_raw_spin_unlock+0xa7/0x2f0 [ 169.648211] ? p9_poll_workfn+0x660/0x6d0 [ 169.652365] kasan_end_report+0x47/0x4f [ 169.656342] kasan_report.cold.7+0x76/0x2fe [ 169.660673] __asan_report_load4_noabort+0x14/0x20 [ 169.665032] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue [ 169.665629] p9_poll_workfn+0x660/0x6d0 [ 169.665649] ? p9_read_work+0x1060/0x1060 [ 169.679763] ? graph_lock+0x170/0x170 [ 169.683582] ? lock_acquire+0x1e4/0x540 [ 169.687604] ? process_one_work+0xb9b/0x1ba0 [ 169.692054] ? kasan_check_read+0x11/0x20 [ 169.696222] ? __lock_is_held+0xb5/0x140 [ 169.700305] process_one_work+0xc73/0x1ba0 [ 169.704554] ? trace_hardirqs_on+0x10/0x10 [ 169.708818] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 169.713096] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 169.713509] ? lock_repin_lock+0x430/0x430 [ 169.725042] ? __sched_text_start+0x8/0x8 [ 169.729201] ? lock_downgrade+0x8f0/0x8f0 [ 169.733391] ? graph_lock+0x170/0x170 [ 169.737203] ? find_held_lock+0x36/0x1c0 [ 169.741284] ? lock_acquire+0x1e4/0x540 [ 169.745272] ? worker_thread+0x3dc/0x13c0 [ 169.749436] ? lock_downgrade+0x8f0/0x8f0 [ 169.753860] ? lock_release+0xa30/0xa30 [ 169.757850] ? kasan_check_read+0x11/0x20 [ 169.762012] ? do_raw_spin_unlock+0xa7/0x2f0 [ 169.766434] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 169.771034] ? kasan_check_write+0x14/0x20 [ 169.775298] ? do_raw_spin_lock+0xc1/0x200 [ 169.778502] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 169.780848] worker_thread+0x189/0x13c0 [ 169.780868] ? process_one_work+0x1ba0/0x1ba0 [ 169.780885] ? graph_lock+0x170/0x170 [ 169.780903] ? graph_lock+0x170/0x170 [ 169.804370] ? find_held_lock+0x36/0x1c0 [ 169.808449] ? find_held_lock+0x36/0x1c0 [ 169.812533] ? kasan_check_read+0x11/0x20 [ 169.816700] ? do_raw_spin_unlock+0xa7/0x2f0 [ 169.821125] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 169.826245] ? __kthread_parkme+0x58/0x1b0 [ 169.830503] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 169.835573] ? trace_hardirqs_on+0xd/0x10 [ 169.839748] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 169.845325] ? __kthread_parkme+0x106/0x1b0 [ 169.849665] kthread+0x345/0x410 [ 169.853048] ? process_one_work+0x1ba0/0x1ba0 [ 169.857551] ? kthread_bind+0x40/0x40 [ 169.861371] ret_from_fork+0x3a/0x50 [ 169.865656] Dumping ftrace buffer: [ 169.869282] (ftrace buffer empty) [ 169.872972] Kernel Offset: disabled [ 169.876594] Rebooting in 86400 seconds..