[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 33.842549] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 37.023786] random: sshd: uninitialized urandom read (32 bytes read) [ 37.453218] random: sshd: uninitialized urandom read (32 bytes read) [ 38.992634] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.46' (ECDSA) to the list of known hosts. [ 44.529618] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/09 06:13:08 fuzzer started [ 45.931737] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/09 06:13:11 dialing manager at 10.128.0.26:40163 2018/07/09 06:13:13 syscalls: 1587 2018/07/09 06:13:13 code coverage: enabled 2018/07/09 06:13:13 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: errno 524 2018/07/09 06:13:13 setuid sandbox: enabled 2018/07/09 06:13:13 namespace sandbox: enabled 2018/07/09 06:13:13 fault injection: enabled 2018/07/09 06:13:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/09 06:13:13 net packed injection: enabled [ 50.652497] random: crng init done 06:14:19 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x88}) 06:14:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = accept(r0, &(0x7f00000001c0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, &(0x7f0000000040)=0xffffffff0000001c) sendto$inet6(r1, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) accept(0xffffffffffffffff, &(0x7f0000001380)=@generic, &(0x7f0000001400)=0x80) shutdown(r2, 0x2) memfd_create(&(0x7f0000001300)="2f5b5d7d7d6d643573756d6e6f6465766e6f6465768b40747275737465646b657972696e67766d6e6574302c73656c696e75785c00", 0x0) 06:14:19 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)) 06:14:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a80)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="bc0000001900010027bd7000ffdbdf2580140099fe00c80b0010000008000700000063f40c00090008000063", @ANYBLOB="08000100ffffffff400008001dad2e85b485f7ecc9916338fe657a6bde23a424d1762fd21dd5763fafe966b22e9b24309e063e95d7a6ad703bc8f63317e8c34c59087733f9ed9d3b2400080025432150f5b7b34fe752b27435e0fe93916faa84d570f1a6b06c8fa960f5840008000100", @ANYBLOB="080007000300000010000000", @ANYBLOB="08000400"], 0x4}, 0x1}, 0x0) 06:14:19 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) getxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='com.apple.system.Security\x00', &(0x7f0000000540)=""/242, 0xf2) rmdir(&(0x7f0000000000)='./file0\x00') 06:14:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgid(0x0) r2 = getpid() getpgid(r2) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x20}, 0x28000}, 0x0, 0x0, r1, 0x0) pipe2(&(0x7f0000000100), 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000140)) getrlimit(0x0, &(0x7f0000000000)) 06:14:19 executing program 6: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000034c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'osx.', 'v\x00'}, &(0x7f00000000c0)='/\x00', 0x2, 0x1) write(r3, &(0x7f00000001c0), 0xfffffef3) readv(r2, &(0x7f00000025c0)=[{&(0x7f0000001200)=""/213, 0x3c7}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000001340)=""/217, 0xfffffd27}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x1000000000000193) tee(r2, r1, 0x400000000008, 0x0) tee(r0, r3, 0x9, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @val={0x0, 0x80, 0xff, 0x40}, @x25={0x0, 0x0, 0x1}}, 0xd) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000000100)) 06:14:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) acct(&(0x7f0000000180)='./file0\x00') r1 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) accept4$packet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x14, 0x800) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={@empty, @mcast2={0xff, 0x2, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, 0x7ff80, 0xf36e, 0x0, 0x100, 0x1, 0x100, r2}) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000040)={@local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}, @broadcast=0xffffffff}, 0xc) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='veth1_to_bond\x00', 0x10) sendto$inet(r3, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000100), 0xffffffff) sendfile(r0, r0, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000480)=""/188) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flistxattr(r1, &(0x7f0000000380)=""/207, 0xcf) ioctl$TCFLSH(r1, 0x540b, 0x101) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_wait(r1, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000080)=0x10, 0x4) [ 116.133830] IPVS: ftp: loaded support on port[0] = 21 [ 116.235195] IPVS: ftp: loaded support on port[0] = 21 [ 116.239319] IPVS: ftp: loaded support on port[0] = 21 [ 116.275484] IPVS: ftp: loaded support on port[0] = 21 [ 116.294756] IPVS: ftp: loaded support on port[0] = 21 [ 116.294818] IPVS: ftp: loaded support on port[0] = 21 [ 116.341823] IPVS: ftp: loaded support on port[0] = 21 [ 116.364433] IPVS: ftp: loaded support on port[0] = 21 [ 118.643436] ip (4757) used greatest stack depth: 54424 bytes left [ 119.833630] ip (4839) used greatest stack depth: 54328 bytes left [ 120.569192] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.575718] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.613408] device bridge_slave_0 entered promiscuous mode [ 120.645328] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.651863] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.670707] device bridge_slave_0 entered promiscuous mode [ 120.700443] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.706938] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.730311] device bridge_slave_0 entered promiscuous mode [ 120.745380] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.751842] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.781430] device bridge_slave_0 entered promiscuous mode [ 120.812233] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.818752] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.846891] device bridge_slave_0 entered promiscuous mode [ 120.872013] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.878586] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.902209] device bridge_slave_0 entered promiscuous mode [ 120.911160] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.917642] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.931478] device bridge_slave_0 entered promiscuous mode [ 120.940315] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.946766] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.957703] device bridge_slave_1 entered promiscuous mode [ 120.973433] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.979893] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.006203] device bridge_slave_1 entered promiscuous mode [ 121.029204] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.035706] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.052094] device bridge_slave_1 entered promiscuous mode [ 121.065191] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.071661] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.104109] device bridge_slave_0 entered promiscuous mode [ 121.114556] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.121102] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.145263] device bridge_slave_1 entered promiscuous mode [ 121.158464] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.164956] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.186113] device bridge_slave_1 entered promiscuous mode [ 121.201253] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 121.210186] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.216658] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.234467] device bridge_slave_1 entered promiscuous mode [ 121.252609] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.259149] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.296107] device bridge_slave_1 entered promiscuous mode [ 121.308952] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 121.334381] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 121.347247] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 121.355577] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.362103] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.403476] device bridge_slave_1 entered promiscuous mode [ 121.433176] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 121.440830] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.489638] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 121.531434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 121.571410] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.585148] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.598921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.674180] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 121.730560] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.782227] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.817311] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.928987] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 122.195612] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 122.319905] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 122.365631] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 122.450252] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 122.469080] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 122.544426] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 122.574423] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 122.631000] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 122.641031] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 122.696646] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 122.734244] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 122.747694] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 122.789935] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 122.796975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.823109] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 122.885496] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 122.892597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.929819] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 122.941857] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 122.951430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.976748] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 123.019442] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 123.026502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.046810] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 123.080630] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 123.088118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.107921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 123.115691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.177514] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 123.184620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.233242] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 123.240296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.256259] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 123.268267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.310420] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 123.319003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.349438] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 123.358119] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 123.366235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.388676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.447380] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 123.454347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.515213] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 123.522580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.586995] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 123.608344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.656155] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 123.665336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.966166] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 123.987392] team0: Port device team_slave_0 added [ 124.026353] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 124.055427] team0: Port device team_slave_0 added [ 124.174428] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 124.182887] team0: Port device team_slave_0 added [ 124.209944] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 124.240335] team0: Port device team_slave_0 added [ 124.268810] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 124.301936] team0: Port device team_slave_1 added [ 124.320518] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 124.341961] team0: Port device team_slave_1 added [ 124.367539] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 124.394505] team0: Port device team_slave_0 added [ 124.409141] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 124.433161] team0: Port device team_slave_0 added [ 124.455451] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 124.468471] team0: Port device team_slave_0 added [ 124.479248] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 124.497500] team0: Port device team_slave_1 added [ 124.515564] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 124.540626] team0: Port device team_slave_1 added [ 124.568278] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 124.580287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.594476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.612369] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 124.623614] team0: Port device team_slave_0 added [ 124.640660] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 124.657849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.693565] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.728799] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 124.741017] team0: Port device team_slave_1 added [ 124.749569] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 124.757834] team0: Port device team_slave_1 added [ 124.785481] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 124.798452] team0: Port device team_slave_1 added [ 124.810159] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 124.817189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.830969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.865240] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 124.880249] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 124.887418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.904230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.934878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.954024] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.982088] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 124.990805] team0: Port device team_slave_1 added [ 124.998159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 125.008149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.026903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.065686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 125.075384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 125.087210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.103503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.124496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.146158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.168481] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 125.176416] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.184713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.213506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.222274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.232141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.244178] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 125.251224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.260709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.289171] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.296894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.310150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.333688] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 125.340656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.354521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.385988] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 125.393621] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 125.400941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.432125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.458837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.475085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.507497] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 125.515870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.531664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.545864] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 125.557321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.573750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.583663] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.591004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.600510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.612117] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.619495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.636649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.681676] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 125.689824] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 125.698236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.741138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.772589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.789394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.799168] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.807810] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 125.829289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.850757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.861351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.870514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.883819] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 125.897569] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.906975] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 125.916665] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.924800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.945474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.974879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.009379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.041014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.079376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.091304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.107376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.156112] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 126.163735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.177508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.195599] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 126.203853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.237638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.274460] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 126.282377] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 126.289825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.308264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.364810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.392344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.435809] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 126.445340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.468701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.299570] ip (5306) used greatest stack depth: 54120 bytes left [ 128.655577] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.662110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.668910] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.675386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.723735] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 128.740653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.788270] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.794775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.801594] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.808129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.915288] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 128.932690] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.939154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.945981] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.952423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.992917] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 129.029028] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.035533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.042377] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.048835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.090192] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 129.326897] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.333367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.340210] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.346640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.364136] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 129.372419] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.378869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.385677] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.392123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.407426] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 129.438165] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.444620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.451554] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.458028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.490169] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 129.716665] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.723132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.729950] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.736414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.770771] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 129.787672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.796855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.815454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.823454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.839450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.857457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.865397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.884572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.920404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.062409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.106265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.141601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.225413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.284973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.517877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.878969] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 141.014855] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 141.086368] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 141.125706] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 141.203970] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 141.274819] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 141.301332] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 141.538195] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 141.891785] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 141.898266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.912895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.046823] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 142.053291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.061462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.101931] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 142.119354] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 142.139005] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 142.146513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.160785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.192375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.221988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.248208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.275987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.364233] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 142.370592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.386437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.533003] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 142.539324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.556785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.610391] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 142.616729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.629016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.964713] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.156878] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.190394] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.219785] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.241766] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.433189] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.512424] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.755525] 8021q: adding VLAN 0 to HW filter on device team0 06:14:53 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clock_gettime(0x0, &(0x7f00000001c0)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r2}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 06:14:53 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x0, 0x2}}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) dup3(r1, r0, 0x80000) 06:14:53 executing program 2: r0 = shmget(0xffffffffffffffff, 0x2000, 0x7c000b43, &(0x7f0000ffd000/0x2000)=nil) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000000500)=""/183) 06:14:53 executing program 7: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000034c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) readv(r2, &(0x7f00000025c0)=[{&(0x7f0000001200)=""/213, 0x3c7}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000001340)=""/217, 0xfffffd27}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x1000000000000193) tee(r2, r1, 0x400000000008, 0x0) tee(r0, r3, 0x9, 0x0) 06:14:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x30f}, 0x1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) dup2(r3, r0) 06:14:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) [ 149.879922] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 149.898518] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 149.917679] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:14:54 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x0, 0x2}}) 06:14:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = accept(r0, &(0x7f00000001c0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, &(0x7f0000000040)=0xffffffff0000001c) sendto$inet6(r1, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) accept(0xffffffffffffffff, &(0x7f0000001380)=@generic, &(0x7f0000001400)=0x80) shutdown(r2, 0x2) memfd_create(&(0x7f0000001300)="2f5b5d7d7d6d643573756d6e6f6465766e6f6465768b40747275737465646b657972696e67766d6e6574302c73656c696e75785c00", 0x0) [ 150.124469] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:14:54 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x0, 0x2}}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) dup3(r1, r0, 0x0) 06:14:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e0, 0x390, 0x4f0, 0x238, 0xf0, 0x0, 0x650, 0x650, 0x650, 0x650, 0x650, 0x6, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xc8, 0xf0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80}, [], [], 'bond_slave_1\x00', 'ip_vti0\x00'}, 0x0, 0xc8, 0xf0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @local={0xfe, 0x80, [], 0xaa}, [], [], 'bridge0\x00', 'team0\x00'}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @ipv6}}}, {{@uncond, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote={0xfe, 0x80, [], 0xbb}, @ipv4=@broadcast=0xffffffff}}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @mcast2={0xff, 0x2, [], 0x1}, [], [], 'ip6gretap0\x00', 'ifb0\x00'}, 0x0, 0xc8, 0x110}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14}, @ipv4=@multicast2=0xe0000002}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x640) 06:14:54 executing program 5: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) 06:14:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r0, &(0x7f0000000200)="a8", 0x1) sendfile(r0, r0, &(0x7f0000317000), 0xff8) 06:14:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) close(r1) 06:14:54 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x21040100, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 06:14:54 executing program 6: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000034c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'osx.', 'v\x00'}, &(0x7f00000000c0)='/\x00', 0x2, 0x1) write(r3, &(0x7f00000001c0), 0xfffffef3) readv(r2, &(0x7f00000025c0)=[{&(0x7f0000001200)=""/213, 0x3c7}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000001340)=""/217, 0xfffffd27}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x1000000000000193) tee(r2, r1, 0x400000000008, 0x0) tee(r0, r3, 0x9, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @val={0x0, 0x80, 0xff, 0x40}, @x25={0x0, 0x0, 0x1}}, 0xd) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000000100)) [ 151.043713] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 151.061654] print_req_error: I/O error, dev loop0, sector 0 [ 151.067607] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 151.076087] print_req_error: I/O error, dev loop0, sector 5496 [ 151.082193] Buffer I/O error on dev loop0, logical block 687, lost async page write [ 151.092945] print_req_error: I/O error, dev loop0, sector 1280 [ 151.099095] Buffer I/O error on dev loop0, logical block 160, lost async page write [ 151.107530] print_req_error: I/O error, dev loop0, sector 0 06:14:55 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) acct(&(0x7f0000000180)='./file0\x00') r1 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) accept4$packet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x14, 0x800) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={@empty, @mcast2={0xff, 0x2, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, 0x7ff80, 0xf36e, 0x0, 0x100, 0x1, 0x100, r2}) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000040)={@local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}, @broadcast=0xffffffff}, 0xc) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='veth1_to_bond\x00', 0x10) sendto$inet(r3, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000100), 0xffffffff) sendfile(r0, r0, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000480)=""/188) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flistxattr(r1, &(0x7f0000000380)=""/207, 0xcf) ioctl$TCFLSH(r1, 0x540b, 0x101) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_wait(r1, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000080)=0x10, 0x4) 06:14:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") prctl$void(0x2) 06:14:55 executing program 4: openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x40040, 0x183) 06:14:55 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0xffffffff80000000, 0x101001) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3f}) 06:14:55 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 06:14:55 executing program 1: 06:14:55 executing program 1: 06:14:55 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 06:14:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='coredump_filter\x00') pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 06:14:55 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)) 06:14:55 executing program 4: rt_sigsuspend(&(0x7f0000000040), 0x8) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x80, &(0x7f00000000c0)) 06:14:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000ac9000)="290000002000190600003fffffffda060200000003000000000000000d00140000050000000500e8ff", 0x29}], 0x1) 06:14:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x37, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e0, 0x390, 0x4f0, 0x238, 0xf0, 0x0, 0x650, 0x650, 0x650, 0x650, 0x650, 0x6, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xc8, 0xf0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80}, [], [], 'bond_slave_1\x00', 'ip_vti0\x00'}, 0x0, 0xc8, 0xf0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @local={0xfe, 0x80, [], 0xaa}, [], [], 'bridge0\x00', 'team0\x00'}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @ipv6}}}, {{@uncond, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote={0xfe, 0x80, [], 0xbb}, @ipv4=@broadcast=0xffffffff}}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @mcast2={0xff, 0x2, [], 0x1}, [], [], 'ip6gretap0\x00', 'ifb0\x00'}, 0x0, 0xc8, 0x110}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14}, @ipv4=@multicast2=0xe0000002}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x640) 06:14:55 executing program 5: 06:14:55 executing program 7: 06:14:56 executing program 6: [ 152.179573] print_req_error: I/O error, dev loop0, sector 136 [ 152.185719] Buffer I/O error on dev loop0, logical block 17, lost async page write [ 152.193644] print_req_error: I/O error, dev loop0, sector 4712 [ 152.199708] Buffer I/O error on dev loop0, logical block 589, lost async page write [ 152.213586] print_req_error: I/O error, dev loop0, sector 0 06:14:56 executing program 3: 06:14:56 executing program 1: 06:14:56 executing program 7: 06:14:56 executing program 5: 06:14:56 executing program 0: 06:14:56 executing program 6: 06:14:56 executing program 7: 06:14:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create(0x6) epoll_wait(r1, &(0x7f0000000240)=[{}], 0x1, 0xfffffffffffffff7) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x8003) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 06:14:56 executing program 0: 06:14:56 executing program 1: 06:14:57 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x3, 0x0, 0x3}}) 06:14:57 executing program 6: 06:14:57 executing program 5: 06:14:57 executing program 3: 06:14:57 executing program 7: 06:14:57 executing program 1: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)) 06:14:57 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 06:14:57 executing program 3: 06:14:57 executing program 7: 06:14:57 executing program 6: 06:14:57 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 06:14:57 executing program 5: 06:14:57 executing program 1: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x49) 06:14:57 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f000091dff5)='/dev/loop#\x00', 0x0, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 06:14:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 06:14:57 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c0a0b5aff6e10b500000780cc08001c0006000000", 0x24) 06:14:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x2, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@loopback=0x7f000001, @in6=@remote={0xfe, 0x80, [], 0xbb}}, @sadb_x_sec_ctx={0x1, 0x18}]}, 0x40}, 0x1}, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x33, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x223, 0xbb}, {[@rr={0xffffff94, 0x3}]}}, @icmp=@timestamp_reply={0xe}}}}}, &(0x7f0000000100)) 06:14:57 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 06:14:57 executing program 7: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @loopback=0x7f000001, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @loopback=0x7f000001}}}}, &(0x7f0000000000)) 06:14:57 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000640)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) write$evdev(r0, &(0x7f0000000780), 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000140)) tkill(r1, 0x1004000000016) 06:14:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x1000000008912, &(0x7f0000000280)="024a903d6d345f8f762070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001800010000000000000000000a00900000000000943f2e0000f9ffa9b5cb8db972c7febe63859807a86595f76e66"], 0x1}, 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 06:14:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000056c0)={&(0x7f00000008c0)=@bridge_getlink={0x28, 0x12, 0x23, 0x0, 0x0, {0x7}, [@IFLA_EXT_MASK={0x8, 0x1d}]}, 0x28}, 0x1}, 0x0) 06:14:58 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 06:14:58 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) acct(&(0x7f0000000180)='./file0\x00') r1 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) accept4$packet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x14, 0x800) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={@empty, @mcast2={0xff, 0x2, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, 0x7ff80, 0x0, 0x0, 0x0, 0x1, 0x100, r2}) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000040)={@local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}, @broadcast=0xffffffff}, 0xc) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='veth1_to_bond\x00', 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000100), 0xffffffff) sendfile(r0, r0, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) semget$private(0x0, 0x3, 0x5) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x101) socket$inet_icmp_raw(0x2, 0x3, 0x1) 06:14:58 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 06:14:58 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x100000001, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1}) 06:14:58 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000000)={0x7}) 06:14:58 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) setpgid(r1, 0x0) 06:14:58 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 06:14:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) [ 154.933122] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 154.973654] tpacket_rcv: packet too big, clamped from 65550 to 65406. macoff=82 06:14:59 executing program 3: 06:14:59 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x81, 0x80}) 06:14:59 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 06:14:59 executing program 5: 06:14:59 executing program 3: [ 155.357991] print_req_error: I/O error, dev loop0, sector 0 [ 155.362170] print_req_error: I/O error, dev loop0, sector 2176 [ 155.370083] Buffer I/O error on dev loop0, logical block 272, lost async page write 06:15:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000640)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) write$evdev(r0, &(0x7f0000000780), 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000140)) tkill(r1, 0x1004000000016) 06:15:00 executing program 2: 06:15:00 executing program 5: [ 156.263711] print_req_error: I/O error, dev loop0, sector 2176 [ 156.269869] Buffer I/O error on dev loop0, logical block 272, lost async page write 06:15:01 executing program 7: 06:15:01 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 06:15:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002700ff0a0000000000000000030000000c000100080001009c8f0ee02cab1adf1885d9fa2a5b4f40fe86622a23baa35babbb9ff830e47bfdd9c7ff66de4e3293b070c06c"], 0x1}, 0x1}, 0x0) 06:15:01 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2, &(0x7f0000001fd8)=@raw=[@initr0={0x18}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 06:15:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x4000) 06:15:01 executing program 4: 06:15:01 executing program 2: 06:15:01 executing program 4: 06:15:01 executing program 3: 06:15:01 executing program 2: 06:15:01 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 06:15:01 executing program 7: 06:15:01 executing program 5: 06:15:03 executing program 3: 06:15:03 executing program 5: 06:15:03 executing program 6: 06:15:03 executing program 4: 06:15:03 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000640)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) write$evdev(r0, &(0x7f0000000780), 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000140)) tkill(r1, 0x1004000000016) 06:15:03 executing program 2: 06:15:03 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 06:15:03 executing program 7: 06:15:03 executing program 3: 06:15:03 executing program 7: 06:15:03 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 06:15:03 executing program 3: 06:15:03 executing program 5: 06:15:03 executing program 4: 06:15:03 executing program 6: 06:15:03 executing program 2: 06:15:05 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) fstatfs(r0, &(0x7f0000000000)=""/52) 06:15:05 executing program 7: 06:15:05 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 06:15:05 executing program 4: 06:15:05 executing program 5: 06:15:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x3, 0x7f) sendmmsg(r1, &(0x7f0000001e80)=[{{&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[]}}], 0x1, 0x0) recvmsg(r1, &(0x7f00000012c0)={&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000001240)=""/102, 0x66}, 0x120) 06:15:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x3, 0x7f) sendmmsg(r1, &(0x7f0000001e80)=[{{&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000000000002000000a6000000"], 0x14}}], 0x1, 0x0) 06:15:05 executing program 6: r0 = socket$inet(0x10, 0x2, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) [ 161.462812] raw_sendmsg: syz-executor2 forgot to set AF_INET. Fix it! 06:15:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, [{0x2}]}]}, 0x28}, 0x1}, 0x0) 06:15:05 executing program 4: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x4000004) 06:15:05 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") poll(&(0x7f0000000000)=[{r0}, {r2}], 0x2, 0x0) 06:15:05 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) 06:15:05 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) 06:15:05 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000180), 0xfffffffffffffccb, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 06:15:05 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000000d00)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80dc5521, &(0x7f0000000000)) 06:15:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000180)=@routing={0x2e, 0xa, 0x0, 0x3, 0x0, [@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast1={0xff, 0x1, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xaa}]}, 0x58) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x30f}, 0x1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) dup2(r3, r0) [ 161.675671] bridge0: port 1(bridge_slave_0) entered learning state [ 161.710691] 9pnet: Insufficient options for proto=fd [ 161.738498] bridge0: port 1(bridge_slave_0) entered learning state 06:15:05 executing program 4: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x4000004) 06:15:05 executing program 7: unshare(0x400) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}], 0x1, 0x0) 06:15:05 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) 06:15:05 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) 06:15:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, [{0x2}]}]}, 0x28}, 0x1}, 0x0) [ 161.969590] 9pnet: Insufficient options for proto=fd 06:15:06 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, 0x0) 06:15:06 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0x40086602, &(0x7f0000000000)=ANY=[@ANYBLOB="0d34a9"]) [ 162.034989] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:15:06 executing program 4: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x4000004) [ 162.080023] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:15:06 executing program 7: socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0xa4}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140), 0x8) readv(r0, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) 06:15:06 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) [ 162.258315] 9pnet: Insufficient options for proto=fd 06:15:06 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) [ 162.281236] bridge0: port 1(bridge_slave_0) entered learning state 06:15:06 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = accept(r0, &(0x7f00000001c0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, &(0x7f0000000040)=0xffffffff0000001c) sendto$inet6(r1, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) accept(r0, &(0x7f0000001380)=@generic, &(0x7f0000001400)=0x80) shutdown(r2, 0x2) 06:15:06 executing program 4: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x4000004) 06:15:06 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = getegid() fchown(r0, 0x0, r1) [ 162.369371] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:15:06 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 06:15:06 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x80, &(0x7f00000000c0)) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x100000000, 0x0) 06:15:06 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r0, &(0x7f0000000200)="a85883156f794c05e0b02a03983b5addde9e46e1145c5c3fcb185a36d20d52d097399fd15648c664ce2314b54922a2fd93ade167f14e4535bcf36199e09f537dba6e93a883417038", 0x48) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000317000), 0xff8) quotactl(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, &(0x7f0000000100)) 06:15:06 executing program 4: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4000004) 06:15:06 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) 06:15:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000001400)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000080)=""/165, 0xa5}}], 0x1, 0x0, &(0x7f0000004000)={0x77359400}) sendmsg$nl_route_sched(r0, &(0x7f0000005a00)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000005940)=@getqdisc={0x24, 0x26, 0x201}, 0x24}, 0x1}, 0x0) 06:15:06 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 06:15:06 executing program 4: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4000004) 06:15:06 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 06:15:06 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) [ 162.990307] 9pnet: Insufficient options for proto=fd 06:15:07 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x534efde5d2bae475) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000b40)="80fd02090040", 0x6}], 0x1, 0x0) 06:15:07 executing program 5: pause() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) preadv(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) umount2(&(0x7f00000001c0)='./file0\x00', 0x2) 06:15:07 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 163.281172] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 163.360255] 9pnet: Insufficient options for proto=fd 06:15:07 executing program 6: 06:15:07 executing program 4: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4000004) 06:15:07 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) 06:15:07 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 163.591791] 9pnet: Insufficient options for proto=fd [ 163.616585] 9pnet: Insufficient options for proto=fd 06:15:08 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1}) 06:15:08 executing program 7: socket$packet(0x11, 0x40000000000a, 0x300) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 06:15:08 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x1, &(0x7f00000007c0)=@raw=[@jmp={0x5, 0x0, 0xf}, @initr0={0x18}, @jmp={0x5}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000500)=""/195}, 0x48) 06:15:08 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) 06:15:08 executing program 4: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x4000004) 06:15:08 executing program 6: 06:15:08 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 164.514418] 9pnet: Insufficient options for proto=fd [ 164.517845] 9pnet: Insufficient options for proto=fd 06:15:08 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000000d00)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)) 06:15:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgsnd(0x0, &(0x7f0000000040)={0x2}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000080)={0x0, ""/106}, 0x72, 0x3, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x7}, 0x10000, 0x95, 0x9, 0x3, 0x8000000000, 0x3f}) msgsnd(0x0, &(0x7f00000001c0)={0x3}, 0x8, 0x0) 06:15:08 executing program 4: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x4000004) 06:15:16 executing program 5: 06:15:16 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c}) 06:15:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/protocols\x00') pread64(r1, &(0x7f0000000180)=""/129, 0x81, 0x39) 06:15:16 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c}) 06:15:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00003e4000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000012000902000000000000000000000000", @ANYBLOB="0000000000000000100012000c00f300757365727b00000008000a0000000000"], 0x2}, 0x1}, 0x0) 06:15:16 executing program 4: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x4000004) 06:15:16 executing program 2: r0 = socket$inet(0x10, 0x2, 0x0) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f00000000c0)={0x1fa, 0x7, 0x0, {{0xffffffffffffffb5}}}, 0xffa8) 06:15:16 executing program 6: [ 172.918473] 9pnet: Insufficient options for proto=fd 06:15:16 executing program 2: 06:15:17 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c}) [ 173.134799] 9pnet: Insufficient options for proto=fd 06:15:17 executing program 6: [ 173.167165] 9pnet: Insufficient options for proto=fd 06:15:17 executing program 7: 06:15:17 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c}) 06:15:17 executing program 4: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r0 = inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4000004) 06:15:17 executing program 2: 06:15:17 executing program 3: [ 173.383805] 9pnet: Insufficient options for proto=fd 06:15:17 executing program 5: 06:15:17 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c}) 06:15:17 executing program 6: 06:15:17 executing program 4: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r0 = inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4000004) 06:15:17 executing program 2: 06:15:17 executing program 7: 06:15:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) 06:15:17 executing program 3: [ 173.689855] 9pnet: Insufficient options for proto=fd 06:15:17 executing program 6: 06:15:17 executing program 4: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r0 = inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4000004) 06:15:17 executing program 5: 06:15:17 executing program 2: 06:15:17 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c}) 06:15:17 executing program 7: 06:15:17 executing program 3: 06:15:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) [ 174.038990] 9pnet: Insufficient options for proto=fd 06:15:18 executing program 6: 06:15:18 executing program 2: 06:15:18 executing program 5: 06:15:18 executing program 4: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x0) 06:15:18 executing program 7: 06:15:18 executing program 3: 06:15:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) 06:15:18 executing program 0: 06:15:18 executing program 6: 06:15:18 executing program 5: 06:15:18 executing program 4: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x0) 06:15:18 executing program 2: 06:15:18 executing program 7: 06:15:18 executing program 3: 06:15:18 executing program 0: 06:15:18 executing program 6: 06:15:18 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) 06:15:18 executing program 5: 06:15:18 executing program 4: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x0) 06:15:18 executing program 2: 06:15:18 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000180)) 06:15:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 06:15:18 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/64, 0x17) 06:15:18 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x1100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000140)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x9}}) [ 175.037424] 9pnet: Insufficient options for proto=fd 06:15:19 executing program 5: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$getflags(r0, 0x0) 06:15:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x20, &(0x7f0000000200), 0x4) 06:15:19 executing program 2: 06:15:19 executing program 6: 06:15:19 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x800000020000004, &(0x7f0000000140)={0xa, 0x6b8, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 06:15:19 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) 06:15:19 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000300)=0x40000000000800, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000140)=0x2, 0x4) recvfrom$inet(r0, &(0x7f0000000000)=""/248, 0xf8, 0x40012000, 0x0, 0x0) 06:15:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") fstat(r1, &(0x7f0000006000)) 06:15:19 executing program 4: clone(0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000000)) keyctl$join(0x1, 0x0) 06:15:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0x4) 06:15:19 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a80)={&(0x7f0000000380)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=@ipv4_delrule={0x30, 0x21, 0x619, 0x0, 0x0, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_DST={0x8, 0x1, @remote={0xac, 0x14, 0x14, 0xbb}}, @FRA_SRC={0x8, 0x2, @broadcast=0xffffffff}]}, 0x30}, 0x1}, 0x0) 06:15:19 executing program 7: creat(&(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000040)={0xb, 0x29}, 0xb) [ 175.610365] 9pnet: Insufficient options for proto=fd 06:15:19 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) [ 175.958928] 9pnet: Insufficient options for proto=fd 06:15:20 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) rt_sigsuspend(&(0x7f00009b2000), 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000013) 06:15:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001680)='net/ip6_mr_vif\x00') sendfile(r1, r2, &(0x7f00000000c0), 0x80000002) 06:15:20 executing program 5: 06:15:20 executing program 2: 06:15:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x2, 0x2, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@loopback=0x7f000001, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x10}, @sadb_x_sec_ctx={0x8, 0x18, 0x0, 0x0, 0x35, "8867b0d1811ba0cc74b6174fda2a4328c8dd51fa9479d784d735a03a97bf12416b380de9815879fdb424ee62698e569423795c606e"}, @sadb_x_nat_t_port={0x1, 0x0, 0x4e24}]}, 0x80}, 0x1}, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x33, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x223, 0xbb}, {[@rr={0xffffff94, 0x3}]}}, @icmp=@timestamp_reply={0xe}}}}}, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0xeaf]}) 06:15:20 executing program 7: r0 = inotify_init1(0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) fstatfs(r0, &(0x7f00000000c0)=""/158) 06:15:20 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) 06:15:20 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) r2 = accept4$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x0) write$P9_RWSTAT(r2, &(0x7f0000000240)={0x7, 0x7f}, 0x7) [ 176.127287] 9pnet: Insufficient options for proto=fd 06:15:20 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000380)=""/4096, 0x1) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 06:15:20 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 06:15:20 executing program 5: 06:15:20 executing program 0: 06:15:20 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) 06:15:20 executing program 6: 06:15:20 executing program 4: 06:15:20 executing program 5: [ 176.448875] 9pnet: Insufficient options for proto=fd 06:15:20 executing program 6: 06:15:20 executing program 0: 06:15:20 executing program 7: 06:15:20 executing program 2: 06:15:20 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) 06:15:20 executing program 3: 06:15:20 executing program 5: 06:15:20 executing program 4: [ 177.034166] 9pnet: Insufficient options for proto=fd 06:15:21 executing program 0: 06:15:21 executing program 4: 06:15:21 executing program 7: 06:15:21 executing program 3: 06:15:21 executing program 2: r0 = inotify_init1(0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$setflags(r0, 0x2, 0x0) 06:15:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000002000110200000000000000000200000000000000000000000b00000008000100e0000002140003007465616d5f736c611fbc8f612c922cf71465261b310475d176655f3c00000000"], 0x1}, 0x1}, 0x0) 06:15:21 executing program 6: r0 = memfd_create(&(0x7f0000000680)="0000000010573860b48e03ab0b8110408d893dac540318386fc7e2d740bd31e757e1ae2e39919d036f2e3d2a17abca4287afd240c0f4b24d623af9f16312755a71654bf931e5704191541d13f5762dadc275e112a8030bf0621fa161bc744923b22b21b6ababbc86cdc1e0a0569fbd31345e7978c3c7175089f36fc12006e0575ef969c45e8fb854b36f9a3319fb30c0a76fe0f7a3ccb89b7c7bbede0de110c40d2ed349c687122fa098892b87a16cc3540fdf9cb289a4509aaddcb1e389bf2239dcd6c886587dcefea2204935721c83bacd0f177f5f229407ced0623ac9e98abb967cf5fd5b867eb063f3ba1e0e046aeb0da0312d171f4aa734acc712e6f7273a832227698f5c25fc87f25e961c3fdc9d4e0f2a1ec6a0ef46662046e9ff54f225e07b831d6bc401043f360748cdbb1e750d1d3de8f0b8bddb94362933c22f69bc71c1d69edc4c49f191925f48b6c41c1fd5deebe6981ea2b653f17d8ead11da91fdc4f377722ce6332852d3101c063105191e585ba7cbd3fe352a3e1889c84f626500000000ff2e70", 0x2) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) fcntl$addseals(r0, 0x409, 0x8) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') ftruncate(r0, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)) 06:15:21 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d}, 0x2c}) 06:15:21 executing program 0: r0 = memfd_create(&(0x7f0000000680)="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", 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') ftruncate(0xffffffffffffffff, 0x0) 06:15:21 executing program 4: r0 = inotify_init1(0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)) 06:15:21 executing program 7: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$evdev(r0, &(0x7f00000000c0), 0x0) fcntl$setpipe(r0, 0x407, 0x100000) [ 177.367227] 9pnet: Insufficient options for proto=fd 06:15:21 executing program 3: 06:15:21 executing program 2: 06:15:21 executing program 5: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240), 0x8) mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedreceive(r0, &(0x7f0000000740)=""/240, 0xfffffffffffffe99, 0x400000020010000, &(0x7f0000000600)={0x0, 0x1c9c380}) 06:15:21 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d}, 0x2c}) 06:15:21 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)) 06:15:21 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) 06:15:21 executing program 4: setrlimit(0x0, &(0x7f0000000000)) clone(0x0, &(0x7f0000001340), &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000140)) 06:15:21 executing program 2: r0 = inotify_init1(0x0) close(r0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwritev(r0, &(0x7f00000014c0), 0x0, 0x0) [ 177.789802] 9pnet: Insufficient options for proto=fd 06:15:21 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2}, {0x2, 0x0, @multicast2=0xe0000002}, {0x2, 0x0, @broadcast=0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x5}) 06:15:21 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d}, 0x2c}) 06:15:22 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0x1000f}) [ 178.098785] 9pnet: Insufficient options for proto=fd 06:15:22 executing program 6: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x91) 06:15:22 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 06:15:22 executing program 1: r0 = inotify_init1(0x0) fcntl$dupfd(r0, 0x0, r0) 06:15:22 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) mremap(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x12000, 0x3, &(0x7f00006ed000/0x12000)=nil) 06:15:22 executing program 4: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/65, 0x41) 06:15:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80}, 0xffffffffffffffff}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000300)) 06:15:22 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x14057) 06:15:22 executing program 1: r0 = inotify_init1(0x0) close(r0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) fdatasync(r0) 06:15:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80}, 0xffffffffffffffff}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000300)) 06:15:22 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00@\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0xfffffffffffffffd}) [ 178.933400] device lo entered promiscuous mode [ 178.985161] device lo left promiscuous mode 06:15:23 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000380)=""/4096, 0x3f) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 06:15:23 executing program 7: 06:15:23 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) 06:15:23 executing program 5: r0 = inotify_init1(0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000080)) 06:15:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) dup3(r1, r0, 0x0) 06:15:23 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80}, 0xffffffffffffffff}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000300)) 06:15:23 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) ioctl$void(r0, 0x5451) 06:15:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000e40)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8, 0x1c}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x3c}, 0x1}, 0x0) 06:15:23 executing program 7: nanosleep(&(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f0000000240)) gettid() exit(0x2d5) pipe2(&(0x7f0000000140), 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f000063b000/0x1000)=nil, 0x1000, 0x8000000, 0x31, 0xffffffffffffffff, 0xfffffffffffffffd) writev(0xffffffffffffffff, &(0x7f0000000400), 0x0) remap_file_pages(&(0x7f000019e000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x10) getpgrp(0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) mremap(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x12000, 0x3, &(0x7f00006ed000/0x12000)=nil) [ 179.561147] audit: type=1326 audit(1531116923.559:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7618 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455e29 code=0xffff0000 06:15:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80}, 0xffffffffffffffff}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000300)) 06:15:24 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) mremap(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x12000, 0x3, &(0x7f00006ed000/0x12000)=nil) 06:15:24 executing program 6: 06:15:24 executing program 4: 06:15:24 executing program 3: 06:15:24 executing program 5: 06:15:24 executing program 3: 06:15:24 executing program 1: 06:15:24 executing program 4: 06:15:24 executing program 5: 06:15:24 executing program 6: 06:15:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000300)) 06:15:24 executing program 1: 06:15:24 executing program 4: 06:15:24 executing program 3: [ 181.098354] mmap: syz-executor7 (7657) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 06:15:25 executing program 7: nanosleep(&(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f0000000240)) gettid() exit(0x2d5) pipe2(&(0x7f0000000140), 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f000063b000/0x1000)=nil, 0x1000, 0x8000000, 0x31, 0xffffffffffffffff, 0xfffffffffffffffd) writev(0xffffffffffffffff, &(0x7f0000000400), 0x0) remap_file_pages(&(0x7f000019e000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x10) getpgrp(0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) mremap(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x12000, 0x3, &(0x7f00006ed000/0x12000)=nil) 06:15:25 executing program 6: 06:15:25 executing program 5: 06:15:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000300)) 06:15:25 executing program 3: 06:15:25 executing program 1: 06:15:25 executing program 4: 06:15:25 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) mremap(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x12000, 0x3, &(0x7f00006ed000/0x12000)=nil) 06:15:25 executing program 6: 06:15:25 executing program 3: 06:15:25 executing program 5: 06:15:25 executing program 1: 06:15:25 executing program 4: 06:15:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000300)) 06:15:26 executing program 6: 06:15:26 executing program 1: 06:15:27 executing program 7: 06:15:27 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x2) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x14) 06:15:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x100000040000010e, 0x8, &(0x7f0000788fff), 0x0) 06:15:27 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) 06:15:27 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x2) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x14) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 06:15:27 executing program 1: 06:15:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80}, 0xffffffffffffffff}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000300)) 06:15:27 executing program 2: 06:15:27 executing program 2: 06:15:27 executing program 1: 06:15:27 executing program 5: 06:15:27 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) recvmsg(r0, &(0x7f00000006c0)={&(0x7f0000000000), 0x80, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/20, 0x14}], 0x1, &(0x7f0000000680)=""/35, 0x23}, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 06:15:27 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x100000006, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:15:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80}, 0xffffffffffffffff}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000300)) 06:15:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc) 06:15:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:15:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, &(0x7f00000002c0), &(0x7f0000000600)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x0, 0x0, 'veth1_to_team\x00', 'veth0_to_team\x00', 'ip6_vti0\x00', 'bpq0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @empty, [], 0x6f, 0xe8, 0x118}, [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "9aa7907eb1e54a48106abea576b3cefbadabee6d0561f9f1b22ce7ceecccb6fac7c32eb8fa4f5f024e7331ea3bfd044909f45c7d21b7f7fb53a10e4bf8e9e10c"}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}]}, 0x220) [ 183.618983] kernel msg: ebtables bug: please report to author: entry offsets not in right order 06:15:27 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x2) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x14) 06:15:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80}, 0xffffffffffffffff}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000300)) 06:15:27 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace(0x10, r1) ptrace(0x4201, r1) 06:15:28 executing program 6: 06:15:28 executing program 2: 06:15:28 executing program 5: 06:15:28 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80}, 0xffffffffffffffff}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000300)) 06:15:28 executing program 5: 06:15:28 executing program 2: 06:15:28 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80}, 0xffffffffffffffff}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000300)) 06:15:28 executing program 4: 06:15:28 executing program 6: 06:15:28 executing program 5: 06:15:28 executing program 2: 06:15:28 executing program 1: 06:15:28 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80}, 0xffffffffffffffff}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000300)) 06:15:28 executing program 3: 06:15:28 executing program 2: 06:16:28 executing program 7: 06:16:28 executing program 6: 06:16:28 executing program 4: 06:16:28 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80}, 0xffffffffffffffff}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000300)) 06:16:28 executing program 1: 06:16:28 executing program 5: 06:16:28 executing program 2: 06:16:28 executing program 3: 06:16:28 executing program 4: 06:16:28 executing program 6: 06:16:28 executing program 5: 06:16:28 executing program 3: 06:16:28 executing program 1: 06:16:28 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 244.342321] device bridge_slave_1 left promiscuous mode [ 244.348251] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.449608] device bridge_slave_0 left promiscuous mode [ 244.455397] bridge0: port 1(bridge_slave_0) entered disabled state 06:16:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x800000020000004, &(0x7f0000000140)={0xa, 0x6b8, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 06:16:28 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80}, 0xffffffffffffffff}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000300)) [ 244.682021] team0 (unregistering): Port device team_slave_1 removed [ 244.734958] team0 (unregistering): Port device team_slave_0 removed [ 244.768807] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 244.798090] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 244.865384] bond0 (unregistering): Released all slaves [ 246.064834] IPVS: ftp: loaded support on port[0] = 21 [ 246.753209] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.759789] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.767310] device bridge_slave_0 entered promiscuous mode [ 246.814097] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.820536] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.827913] device bridge_slave_1 entered promiscuous mode [ 246.873365] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 246.919217] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 247.056744] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 247.105566] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 247.321026] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 247.328839] team0: Port device team_slave_0 added [ 247.374860] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 247.382306] team0: Port device team_slave_1 added [ 247.428558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.476948] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.525905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.573396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 247.580625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.590169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.074534] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.080960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.087722] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.094127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.101764] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 248.551221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.839161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.003219] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 250.169389] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 250.175657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.183889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.347491] 8021q: adding VLAN 0 to HW filter on device team0 06:16:35 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, [{0x4}]}]}, 0x28}, 0x1}, 0x0) 06:16:35 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fcntl$setstatus(r0, 0x4, 0x44800) pread64(r0, &(0x7f0000003c00)=""/4096, 0x1000, 0x400000000000000) 06:16:35 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040), 0x0, 0x401) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000340)=""/216) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001980)=""/150, 0x96}], 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 06:16:35 executing program 2: r0 = socket(0x1e, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) listen(r2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$alg(r2, 0x0, 0x0, 0x0) 06:16:35 executing program 1: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fcntl$setown(r0, 0x8, 0x0) 06:16:35 executing program 5: prctl$void(0x2) 06:16:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, [{0x2}]}]}, 0x28}, 0x1}, 0x0) 06:16:35 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80}, 0xffffffffffffffff}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000300)) [ 251.438634] bridge0: port 1(bridge_slave_0) entered learning state 06:16:35 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) [ 251.485174] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.491774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.499353] bridge0: port 1(bridge_slave_0) entered learning state 06:16:35 executing program 2: r0 = socket(0x1e, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) listen(r2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$alg(r2, 0x0, 0x0, 0x0) 06:16:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000400)="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") getdents64(r0, &(0x7f0000007380)=""/4096, 0x23) 06:16:35 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040), 0x1) 06:16:35 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000000c0)=""/139) [ 251.588234] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.594786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.676809] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 06:16:35 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80}, 0xffffffffffffffff}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000300)) 06:16:35 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, [{0x4}]}]}, 0x28}, 0x1}, 0x0) 06:16:35 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f00000000c0)=""/244) 06:16:35 executing program 2: r0 = socket(0x1e, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) listen(r2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$alg(r2, 0x0, 0x0, 0x0) 06:16:35 executing program 1: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) fchmod(r0, 0x0) [ 251.906475] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.913120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.244284] ================================================================== [ 252.251722] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x45f/0x2800 [ 252.258299] CPU: 1 PID: 8187 Comm: syz-executor3 Not tainted 4.17.0+ #22 [ 252.265136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.274493] Call Trace: [ 252.277087] dump_stack+0x185/0x1d0 [ 252.280710] kmsan_report+0x188/0x2a0 [ 252.284506] kmsan_internal_check_memory+0x138/0x1f0 [ 252.289606] kmsan_copy_to_user+0x73/0xb0 [ 252.293756] _copy_to_iter+0x45f/0x2800 [ 252.297729] ? finish_wait+0x10a/0x3e0 [ 252.301647] vhost_chr_read_iter+0x7b3/0xc30 [ 252.306082] ? init_wait_entry+0x1a0/0x1a0 [ 252.310327] vhost_net_chr_read_iter+0xf6/0x130 [ 252.314991] ? vhost_net_exit+0x30/0x30 [ 252.318976] do_iter_readv_writev+0x81c/0xa20 [ 252.323495] ? vhost_net_exit+0x30/0x30 [ 252.327475] do_iter_read+0x303/0xd80 [ 252.331279] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 252.336742] do_readv+0x295/0x5f0 [ 252.340240] __x64_sys_readv+0xe1/0x120 [ 252.344227] ? vfs_readv+0x260/0x260 [ 252.347929] do_syscall_64+0x15b/0x230 [ 252.351814] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 252.356994] RIP: 0033:0x455e29 [ 252.360181] RSP: 002b:00007f992e705c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 252.367896] RAX: ffffffffffffffda RBX: 00007f992e7066d4 RCX: 0000000000455e29 [ 252.375169] RDX: 0000000000000001 RSI: 00000000200002c0 RDI: 0000000000000013 [ 252.382445] RBP: 000000000072bf48 R08: 0000000000000000 R09: 0000000000000000 [ 252.389708] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 252.396972] R13: 00000000004c0cf1 R14: 00000000004d0fb8 R15: 0000000000000001 [ 252.404256] [ 252.405868] Uninit was created at: [ 252.409401] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 252.414523] kmsan_kmalloc+0x94/0x100 [ 252.418360] __kmalloc+0x13a/0x350 [ 252.421909] translate_desc+0xbef/0x1120 [ 252.425960] vhost_update_used_flags+0x469/0x8d0 [ 252.430706] vhost_vq_init_access+0x173/0xa20 [ 252.435205] vhost_net_ioctl+0x2217/0x3450 [ 252.439449] do_vfs_ioctl+0xcbd/0x24b0 [ 252.443338] __x64_sys_ioctl+0x280/0x320 [ 252.447400] do_syscall_64+0x15b/0x230 [ 252.451284] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 252.456542] [ 252.458165] Bytes 4-7 of 72 are uninitialized [ 252.462647] Memory access starts at ffff880148d18060 [ 252.467744] ================================================================== [ 252.475103] Disabling lock debugging due to kernel taint [ 252.480558] Kernel panic - not syncing: panic_on_warn set ... [ 252.480558] [ 252.487915] CPU: 1 PID: 8187 Comm: syz-executor3 Tainted: G B 4.17.0+ #22 [ 252.496140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.505508] Call Trace: [ 252.508109] dump_stack+0x185/0x1d0 [ 252.511753] panic+0x3d0/0x9b0 [ 252.514973] kmsan_report+0x29e/0x2a0 [ 252.518784] kmsan_internal_check_memory+0x138/0x1f0 [ 252.523895] kmsan_copy_to_user+0x73/0xb0 [ 252.528059] _copy_to_iter+0x45f/0x2800 [ 252.532059] ? finish_wait+0x10a/0x3e0 [ 252.536001] vhost_chr_read_iter+0x7b3/0xc30 [ 252.540449] ? init_wait_entry+0x1a0/0x1a0 [ 252.544694] vhost_net_chr_read_iter+0xf6/0x130 [ 252.549368] ? vhost_net_exit+0x30/0x30 [ 252.553344] do_iter_readv_writev+0x81c/0xa20 [ 252.557832] ? vhost_net_exit+0x30/0x30 [ 252.561805] do_iter_read+0x303/0xd80 [ 252.565618] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 252.571090] do_readv+0x295/0x5f0 [ 252.574550] __x64_sys_readv+0xe1/0x120 [ 252.578511] ? vfs_readv+0x260/0x260 [ 252.582212] do_syscall_64+0x15b/0x230 [ 252.586113] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 252.591290] RIP: 0033:0x455e29 [ 252.594474] RSP: 002b:00007f992e705c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 252.602175] RAX: ffffffffffffffda RBX: 00007f992e7066d4 RCX: 0000000000455e29 [ 252.609433] RDX: 0000000000000001 RSI: 00000000200002c0 RDI: 0000000000000013 [ 252.616694] RBP: 000000000072bf48 R08: 0000000000000000 R09: 0000000000000000 [ 252.623952] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 252.631211] R13: 00000000004c0cf1 R14: 00000000004d0fb8 R15: 0000000000000001 [ 252.639059] Dumping ftrace buffer: [ 252.642591] (ftrace buffer empty) [ 252.646282] Kernel Offset: disabled [ 252.649891] Rebooting in 86400 seconds..