[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 33.403745] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 36.622242] random: sshd: uninitialized urandom read (32 bytes read) [ 37.129471] random: sshd: uninitialized urandom read (32 bytes read) [ 38.693236] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.2' (ECDSA) to the list of known hosts. [ 44.275763] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/12 02:13:57 fuzzer started [ 45.890763] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/12 02:14:00 dialing manager at 10.128.0.26:38231 2018/07/12 02:14:02 syscalls: 1589 2018/07/12 02:14:02 code coverage: enabled 2018/07/12 02:14:02 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: errno 524 2018/07/12 02:14:02 setuid sandbox: enabled 2018/07/12 02:14:02 namespace sandbox: enabled 2018/07/12 02:14:02 fault injection: enabled 2018/07/12 02:14:02 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/12 02:14:02 net packed injection: enabled [ 51.088627] random: crng init done 02:15:26 executing program 0: mkdir(&(0x7f0000d90ff8)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0/bus\x00', &(0x7f0000001500)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000001400)) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) mq_getsetattr(r0, &(0x7f0000000080)={0x800}, 0x0) 02:15:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x2000000011, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000000)="957a88ca", 0x4, 0x0, &(0x7f0000000580)={0xa, 0x20008100, 0x5, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) 02:15:26 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000201ffff000000a35323721900000207"], 0x14}, 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 02:15:26 executing program 2: r0 = socket$inet(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x3, &(0x7f0000000100)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 02:15:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r1, 0x80287010) 02:15:26 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x299) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r1}}, 0x18) 02:15:26 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = dup(r0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) 02:15:26 executing program 6: socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) [ 134.737991] IPVS: ftp: loaded support on port[0] = 21 [ 134.778465] IPVS: ftp: loaded support on port[0] = 21 [ 134.796057] IPVS: ftp: loaded support on port[0] = 21 [ 134.817376] IPVS: ftp: loaded support on port[0] = 21 [ 134.821701] IPVS: ftp: loaded support on port[0] = 21 [ 134.864590] IPVS: ftp: loaded support on port[0] = 21 [ 134.877473] IPVS: ftp: loaded support on port[0] = 21 [ 134.879558] IPVS: ftp: loaded support on port[0] = 21 [ 137.526423] ip (4773) used greatest stack depth: 53744 bytes left [ 138.483870] ip (4838) used greatest stack depth: 53504 bytes left [ 138.786841] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.793318] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.834422] device bridge_slave_0 entered promiscuous mode [ 139.137892] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.144399] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.158123] device bridge_slave_0 entered promiscuous mode [ 139.169289] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.175800] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.198839] device bridge_slave_1 entered promiscuous mode [ 139.275864] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.282391] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.323402] device bridge_slave_0 entered promiscuous mode [ 139.358895] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.365400] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.390186] device bridge_slave_0 entered promiscuous mode [ 139.414424] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.420915] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.441076] device bridge_slave_1 entered promiscuous mode [ 139.453439] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.459895] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.484198] device bridge_slave_0 entered promiscuous mode [ 139.503286] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.509749] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.527505] device bridge_slave_0 entered promiscuous mode [ 139.543985] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.550435] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.580374] device bridge_slave_0 entered promiscuous mode [ 139.598631] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 139.609077] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.615535] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.642260] device bridge_slave_0 entered promiscuous mode [ 139.671502] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.678006] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.701919] device bridge_slave_1 entered promiscuous mode [ 139.718280] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 139.726601] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.733072] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.771333] device bridge_slave_1 entered promiscuous mode [ 139.786794] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.793252] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.819072] device bridge_slave_1 entered promiscuous mode [ 139.832159] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.838633] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.864523] device bridge_slave_1 entered promiscuous mode [ 139.886708] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 139.901338] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.907835] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.929670] device bridge_slave_1 entered promiscuous mode [ 139.947475] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.953947] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.982733] device bridge_slave_1 entered promiscuous mode [ 139.997600] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 140.011173] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 140.019140] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 140.032348] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 140.101236] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 140.165581] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 140.254852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 140.290390] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 140.315535] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 140.333657] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 140.363179] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 140.441633] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 140.566148] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 140.737023] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 140.847590] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 140.995384] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 141.084918] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 141.105217] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 141.117576] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 141.134008] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 141.146090] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 141.199416] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 141.220899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 141.230163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.399444] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 141.410867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 141.421326] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 141.438145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.478679] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 141.488467] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 141.497746] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 141.520646] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 141.533606] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 141.545776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.666398] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 141.673400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.722928] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 141.729978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.757117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 141.764133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.779837] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 141.788116] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 141.797938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.846437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 141.853894] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 141.860755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.876174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.942729] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 141.949736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.052635] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 142.059579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.096243] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 142.103192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.116573] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 142.124979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.147167] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 142.167509] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 142.174881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.191788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.355288] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 142.362303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.457928] ip (5053) used greatest stack depth: 53232 bytes left [ 142.509570] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 142.531567] team0: Port device team_slave_0 added [ 142.548511] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 142.564646] team0: Port device team_slave_0 added [ 142.747193] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 142.780764] team0: Port device team_slave_0 added [ 142.830578] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 142.842951] team0: Port device team_slave_1 added [ 142.858359] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 142.871489] team0: Port device team_slave_1 added [ 142.889088] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 142.920428] team0: Port device team_slave_0 added [ 142.947313] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 142.980471] team0: Port device team_slave_0 added [ 143.005606] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 143.039623] team0: Port device team_slave_0 added [ 143.080479] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 143.087850] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 143.099912] team0: Port device team_slave_1 added [ 143.116627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.134429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.153738] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 143.169175] team0: Port device team_slave_0 added [ 143.202907] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 143.210608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.224959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.261713] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 143.273617] team0: Port device team_slave_1 added [ 143.280883] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 143.291884] team0: Port device team_slave_1 added [ 143.299246] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 143.306230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.329577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.358715] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 143.378223] team0: Port device team_slave_0 added [ 143.396556] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 143.409888] team0: Port device team_slave_1 added [ 143.424480] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 143.431947] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 143.451775] team0: Port device team_slave_1 added [ 143.462149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.487351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.519343] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 143.535557] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 143.543767] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 143.553912] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 143.560971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.600725] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.629717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.659159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.690513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.709161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.723308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.733473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.754939] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 143.768411] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 143.783432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.798998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.814372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.829800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.844799] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 143.852831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.871477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.881935] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 143.889574] team0: Port device team_slave_1 added [ 143.897124] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 143.905595] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 143.912898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.926762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.934987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.953690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.978826] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 143.990596] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 143.997618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.022189] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.037253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.062006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.085252] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 144.093146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.105257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.138344] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 144.149274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.157726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.173178] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 144.200197] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 144.210250] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 144.217934] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 144.227768] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 144.234995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.290463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.324801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.353986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.395770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.431190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.439791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.447726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.455669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.463886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.479483] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 144.496426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.505308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.523771] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 144.535317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.556130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.567844] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 144.579815] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 144.587487] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 144.595308] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 144.612878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.667801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.713813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.754515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.785145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.807222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.816975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.825150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.852794] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 144.873714] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 144.882826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.911063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.929541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.951400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.971991] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 144.985288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.012251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.090452] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 145.097928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.122594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.182538] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.189093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.195870] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.202308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.240202] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 147.257372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.522251] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.528706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.535536] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.541974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.551011] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 147.810560] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.817100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.823869] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.830313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.837894] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 147.844693] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.851132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.857956] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.864386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.872807] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 147.889310] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.895757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.902548] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.908969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.917122] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 147.925686] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.932126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.938901] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.945307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.978598] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 147.985532] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.991984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.998756] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.005197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.016422] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 148.232218] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.238705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.245523] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.251965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.269282] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 148.319237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.337611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.362550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.388997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.426596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.450969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.479958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.530328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.623375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.814545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.853727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.880525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.142988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.182346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.204433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.579401] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 159.646924] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 159.814151] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 159.900849] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 159.911385] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 160.142441] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 160.212787] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 160.277410] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 160.604349] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 160.611990] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 160.619291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.637855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.661266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.679655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.961443] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 160.967761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.981443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.060366] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 161.066730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.079745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.110916] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 161.124577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.179484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.210345] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 161.216687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.236811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.302640] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 161.308954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.321431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.381892] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 161.391138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.410891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.606741] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.666225] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.162209] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.231309] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.259240] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.286581] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.314626] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.454631] 8021q: adding VLAN 0 to HW filter on device team0 02:16:01 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) read(r0, &(0x7f0000000300)=""/50, 0x2d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 02:16:01 executing program 3: 02:16:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000140)={"6e6174000000d000"}, &(0x7f0000000000)=0x54) [ 168.588899] IPVS: ftp: loaded support on port[0] = 21 02:16:01 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(r0, &(0x7f0000000100)=""/224, 0xe0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x82, 0x0) dup2(r0, r1) 02:16:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000280), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) sendto$unix(r1, &(0x7f0000000540), 0xfffffffffffffdd6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)=""/62, 0x2000017e}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000440)=""/33, 0x21}], 0x3, &(0x7f0000000700)=""/244, 0xf4}, 0x0) 02:16:01 executing program 6: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) futex(&(0x7f0000004000), 0x400000085, 0x0, &(0x7f0000000000), &(0x7f0000004000), 0x404020000001) 02:16:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x299) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r1}}, 0x18) 02:16:01 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0xa, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000200)}, 0x0) [ 168.939515] IPVS: ftp: loaded support on port[0] = 21 02:16:02 executing program 6: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000280)) [ 169.072759] syz-executor1 uses obsolete (PF_INET,SOCK_PACKET) 02:16:02 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f0000001280)=""/4096, 0x1000) 02:16:02 executing program 7: 02:16:02 executing program 5: 02:16:02 executing program 3: 02:16:02 executing program 1: 02:16:02 executing program 6: 02:16:02 executing program 4: 02:16:02 executing program 5: 02:16:02 executing program 1: 02:16:02 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x299) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0x10f, {&(0x7f00000004c0), r1}}, 0x18) 02:16:02 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(r0, &(0x7f0000000100)=""/224, 0xe0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x82, 0x0) dup2(r0, r1) 02:16:02 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x7ff, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmmsg(r0, &(0x7f0000001e40)=[{{&(0x7f0000001900)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001dc0)=""/121, 0x79}}], 0x1, 0x0, &(0x7f0000001ec0)={0x77359400}) recvmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000002600)=@in6={0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002700), 0x0, &(0x7f0000002740)=""/223, 0xdf}}], 0x1, 0x12260, &(0x7f00000028c0)={0x0, 0x989680}) 02:16:02 executing program 2: 02:16:02 executing program 7: 02:16:02 executing program 4: 02:16:02 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(r0, &(0x7f0000000100)=""/224, 0xe0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x82, 0x0) dup2(r0, r1) [ 169.912157] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 02:16:02 executing program 1: 02:16:03 executing program 2: 02:16:03 executing program 4: 02:16:03 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) write$cgroup_pid(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='8'], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 02:16:03 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 02:16:03 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000080)) write$fuse(r0, &(0x7f0000000200)=ANY=[], 0x4a5) 02:16:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000140)={"6e6174000000d000"}, &(0x7f0000000000)=0x54) 02:16:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xffed) read(r0, &(0x7f0000000280)=""/211, 0xd3) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 02:16:03 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000001c0)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000000)}}], 0x2, 0x0) [ 170.417379] IPVS: ftp: loaded support on port[0] = 21 02:16:03 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000080)) write$fuse(r0, &(0x7f0000000200)=ANY=[], 0x4a5) [ 170.655736] IPVS: ftp: loaded support on port[0] = 21 02:16:03 executing program 0: r0 = socket(0x40000000002, 0xa, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 02:16:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x80000000006, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x10000004b) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) dup2(r1, r0) 02:16:03 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000000c0)="040400000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035060f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046afd77fc7ae664f65bfc370ad30c2750684a7a4938b4b677081c14445c06232055397880d89abad699af485f036c70bbb8a78410e617e9be77", 0xa4, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000180)=@can, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/10, 0xa}], 0x1, &(0x7f0000000400)=""/50, 0x32}, 0x0) 02:16:03 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000001940)=[{&(0x7f00000018c0)=""/127, 0x7f}], 0x1) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000080)) write$fuse(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x4a5) 02:16:04 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="ad", 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x8000) 02:16:04 executing program 1: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f00006fd000), 0x0, 0x0, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) 02:16:04 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000340), 0x8) recvmmsg(r0, &(0x7f0000009640)=[{{&(0x7f0000009180)=@hci, 0x80, &(0x7f0000009400), 0x0, &(0x7f0000009440)=""/45, 0x2d}}, {{&(0x7f0000009480)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000009600)}}], 0x2, 0x0, &(0x7f0000009700)={0x77359400}) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000039000)=0x8, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x1, 0xfffffff5, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, [], "f601929f106531aa"}}}}}}}, 0x0) 02:16:04 executing program 6: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./control\x00') memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) close(r0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) 02:16:04 executing program 5: r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000595ff8)) close(r0) 02:16:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x299) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0x10f, {&(0x7f00000004c0), r1}}, 0x18) 02:16:04 executing program 7: 02:16:04 executing program 2: 02:16:04 executing program 1: 02:16:04 executing program 4: 02:16:04 executing program 3: 02:16:04 executing program 3: 02:16:04 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = getpgid(0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x5e) read(r0, &(0x7f0000000040)=""/28, 0x161) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000133ffc)="71e67a15", 0x4) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) write$sndseq(r3, &(0x7f0000001140), 0x0) 02:16:04 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000000080)={0x0, 0x4}) 02:16:04 executing program 4: 02:16:04 executing program 7: 02:16:04 executing program 5: 02:16:04 executing program 3: 02:16:05 executing program 0: 02:16:05 executing program 6: 02:16:05 executing program 4: 02:16:05 executing program 1: 02:16:05 executing program 7: 02:16:05 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x2) 02:16:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x2, 0x0) ioctl$int_in(r1, 0x800000c0045002, &(0x7f0000000180)=0x10000000) 02:16:05 executing program 0: 02:16:05 executing program 4: 02:16:05 executing program 1: 02:16:05 executing program 2: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000380)='./file1\x00', 0x0) 02:16:05 executing program 7: 02:16:05 executing program 6: 02:16:05 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x48) 02:16:05 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000380)='./file1\x00', 0x2) 02:16:05 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000080)) 02:16:05 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00005c8000)="c3401c344654f3c7d9fe1ba48c8e399aa4eedc3d6bd8ebd65c856a45d61154adc2b2a976fbffffffffffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, &(0x7f0000e66000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) shutdown(r0, 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") recvmmsg(r0, &(0x7f0000003580)=[{{&(0x7f0000001b80)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001f40)=""/4096, 0x1000}], 0x1, &(0x7f0000003040)=""/56, 0xfffffffffffffce8}}, {{&(0x7f0000000100)=@ethernet={0x0, @random}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, &(0x7f0000003480)=""/236, 0xec}}], 0x2, 0x0, &(0x7f0000003700)={0x0, 0x989680}) 02:16:05 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xe, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b55d00000000000000004e2f9663a918fa1efd9b0b"}, 0x9d8}, 0x1}, 0x0) 02:16:06 executing program 7: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000040)='-)posix_acl_access\x00') 02:16:06 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x2000000000000000) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040), 0x45, 0x0) 02:16:06 executing program 5: 02:16:06 executing program 3: 02:16:06 executing program 0: 02:16:06 executing program 2: 02:16:06 executing program 5: 02:16:06 executing program 7: 02:16:06 executing program 6: 02:16:06 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x8000000102) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x0, 0x0, [0x0, 0x20000000, 0x20000000, 0x20000000], 0x0, &(0x7f0000000040)}, 0x78) write$P9_RAUTH(r0, &(0x7f0000000040)={0x14, 0x67}, 0x14) 02:16:06 executing program 3: 02:16:06 executing program 0: 02:16:06 executing program 5: 02:16:06 executing program 4: 02:16:06 executing program 7: 02:16:07 executing program 1: 02:16:07 executing program 3: 02:16:07 executing program 6: 02:16:07 executing program 0: 02:16:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000280), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) sendto$unix(r1, &(0x7f0000000540), 0xfffffffffffffdd6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)) recvmsg$kcm(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)=""/62, 0x2000017e}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000440)=""/33, 0x21}], 0x3, &(0x7f0000000700)=""/244, 0xf4}, 0x0) 02:16:07 executing program 5: socketpair(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f00000000c0)='%d') 02:16:07 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x301, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x600210) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffff8) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1, 0x0) 02:16:07 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000180)) 02:16:07 executing program 3: 02:16:07 executing program 0: 02:16:07 executing program 6: 02:16:07 executing program 1: r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)="af711d90", 0x4}], 0x1, &(0x7f00000004c0)}, 0x0) 02:16:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) fcntl$lock(r0, 0x0, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'irlan0\x00'}, 0x18) 02:16:07 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280), &(0x7f00000017c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) 02:16:07 executing program 0: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xfcd2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) pipe2(&(0x7f0000000000), 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) [ 174.815372] IPVS: stopping master sync thread 7005 ... [ 174.830761] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 02:16:07 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/129, 0x81}, {&(0x7f0000000240)=""/5, 0x5}, {&(0x7f0000000340)=""/193, 0xc1}], 0x3) dup2(0xffffffffffffffff, r0) 02:16:07 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x3, &(0x7f00000002c0)) [ 174.891355] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 174.891886] IPVS: stopping master sync thread 7012 ... 02:16:08 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x40000000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00'}) sendmsg$nl_route(r2, &(0x7f0000005700)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000056c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000013000304000000000000000000000000", @ANYBLOB="ffff1f0000000000140003007600"], 0x2}, 0x1}, 0x0) 02:16:08 executing program 4: syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)) 02:16:08 executing program 3: [ 175.231148] IPVS: ftp: loaded support on port[0] = 21 02:16:08 executing program 2: 02:16:08 executing program 6: [ 175.397977] IPVS: ftp: loaded support on port[0] = 21 02:16:08 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000280), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) sendto$unix(r1, &(0x7f0000000540), 0xfffffffffffffdd6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)=""/62, 0x2000017e}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000440)=""/33, 0x21}], 0x3, &(0x7f0000000700)=""/244, 0xf4}, 0x0) 02:16:08 executing program 3: 02:16:08 executing program 4: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xfcd2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 02:16:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @mcast1={0xff, 0xa, [], 0x1}}, 0x1c) 02:16:08 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) getpgid(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) socket(0x0, 0x0, 0xc) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000080)) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000280)={@loopback={0x0, 0x1}}) write$fuse(r0, &(0x7f0000000200)=ANY=[], 0x4a5) 02:16:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000280), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) sendto$unix(r1, &(0x7f0000000540), 0xfffffffffffffdd6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)=""/62, 0x2000017e}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000440)=""/33, 0x21}], 0x3, &(0x7f0000000700)=""/244, 0xf4}, 0x0) 02:16:08 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x4, &(0x7f00000001c0)) 02:16:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x2000000011, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000100)="957a88ca", 0x4, 0x0, &(0x7f0000000580)={0xa, 0x20008100, 0x2, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 02:16:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3ff}) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0x1000002c1) 02:16:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f0000000040)=""/11, 0xffed) read(r0, &(0x7f0000000280)=""/211, 0xd3) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)) 02:16:09 executing program 6: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 02:16:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x301, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) 02:16:09 executing program 2: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f00000000c0)=0x10407ff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x6000, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x2, 0x2) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xe8) mount$9p_xen(&(0x7f0000000080)='/dev/ppp\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x40, &(0x7f00000002c0)={'trans=xen,', {[{@loose='loose', 0x2c}, {@debug={'debug', 0x3d, 0x7}, 0x2c}, {@cache_none='cache=none', 0x2c}, {@version_u='version=9p2000.u', 0x2c}, {@dfltuid={'dfltuid', 0x3d, r2}, 0x2c}, {@access_user='access=user', 0x2c}, {@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@cache_mmap='cache=mmap', 0x2c}, {@noextend='noextend', 0x2c}]}}) 02:16:09 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000001280)='cgroup.procs\x00', 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x9, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000100)) read(r1, &(0x7f00000022c0)=""/4096, 0x366) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0x3}) 02:16:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200400, 0x2) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, {0x776, 0xb6c, 0x3, 0x3ed, 0x0, 0x4}, 0x80000001}, 0xa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x3324) r3 = syz_open_pts(r1, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000480)=""/200, 0xc8}], 0x1) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000100)) ioctl$TCFLSH(r3, 0x540b, 0x1) 02:16:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x5) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000143000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(cipher_null)\x00'}, 0x58) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000080)=0x6, 0x4) prctl$getreaper(0x0, &(0x7f00000000c0)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000289000), 0x0) delete_module(&(0x7f0000000040)='%}wlan0ppp0posix_acl_accessC]\\{:\x00', 0x200) r3 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) sendmmsg(r3, &(0x7f0000005000)=[{{&(0x7f0000004640)=@un=@abs, 0x80, &(0x7f0000004880), 0x0, &(0x7f00000048c0)}}, {{&(0x7f0000004ec0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80, &(0x7f0000004fc0)}}], 0x2, 0x0) 02:16:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) 02:16:09 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x3e, "f24417b2d12f05f94c0c9e99505898832106bf1cabc061749fe11bd0b69ae77159ccb2d7ce0bf3509f82514a132d70be9b748785dc499673f9306da9dc69"}, &(0x7f0000000040)=0x17d) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r1, 0xbc87, 0x9}, &(0x7f00000001c0)=0xc) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'bridge0\x00'}}, 0x1e) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000180)) 02:16:09 executing program 2: unshare(0x28020400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7ff, 0x400300) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x8, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200000, 0x0) recvmmsg(r1, &(0x7f0000001440), 0x0, 0x0, &(0x7f0000001540)) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x20080, 0x0) 02:16:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x890e, &(0x7f0000000000)="00000000ea860000000000e83b576c1faed3788dae31ae998fc7f29aafcfddc004287c2f4a32eee2136354cde69d35dc8abb164f17e29c4cca844816da47") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x11c, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='\x00'}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x400, 0x70bd2b, 0x800, {0x8}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x4c000) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) 02:16:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r1, &(0x7f0000317000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') tee(r1, r0, 0x5, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)) [ 176.763461] alg: No test for cbcmac(cipher_null) (cbcmac(cipher_null-generic)) 02:16:09 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0xfffffffffffffff7, 0x6b, 0xd38d, 0xffffffffffff4024, 0x2}, 0x14) write$binfmt_elf32(r0, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x203}, [{}]}, 0x58) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x2000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@fscache='fscache', 0x2c}, {@fscache='fscache', 0x2c}, {@dfltgid={'dfltgid', 0x3d, r1}, 0x2c}, {@fscache='fscache', 0x2c}, {@cache_mmap='cache=mmap', 0x2c}, {@cache_none='cache=none', 0x2c}, {@version_u='version=9p2000.u', 0x2c}, {@access_client='access=client', 0x2c}]}}) 02:16:09 executing program 2: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) fcntl$getown(0xffffffffffffffff, 0x9) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000280)="6e65742f69665f696e657436002795af9e0e067491ae726a3ac3ce7306cf11ea1f34d0eb46ca2978f19298497287d8e91139364f71a4d18e39f9f991e008de5929c5e28e12841bab72e796ecf4ba25807a6513b5b642360fa7f237817ab347f6c7cac190798c462048c1a8e84b916282c898071a84f35c6738abc31205dcfda77f42f22a0e36c701ceebc07c79ab2d23d97b337b5214c33d797cb8ef98bea0f1ff64e4d74c16b2197b785730ed9b8d031cd50393016a4a53cd3d40e36eaa720648c5cf6ea46dbf2be3ae7d26bbcd070166c59e8016a8cfad239cdeccc0c25c9a61dc4bfbed7fba089a681b35d183d0334a92639c823268599f92697afaa3b8c0247b0333f2901289cbc973d4e5edcdb2670dfeed0666c743800bdca709bfcef20b21fa63e2dc0cc01e091cbd8f38144e4b6d44d488652f0a59c4112da377709da0830000000000000000000000000000000000000000000000c28894a0945d1c9dedb6bc79b7bd9ab9fdec5fd48d5679a2f89e2594e56edd3c5355d1eb711945de75d8c9fc928c80a2d4f04a4b32a0a0c7e7daa1210300") r2 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') sendfile(r2, r1, &(0x7f0000000080)=0x2, 0x40020) finit_module(r2, &(0x7f0000000100)='(\x00', 0x1) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 02:16:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000200)="025dc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)="2e2f6367726f75702e63707500eac5bea7af575a45fddd5af3a7709295a69ee900000000000000c8ace908bec842141ca2a714ed0163d4e05556a93347d6a7430e03a5f2beb186f16bacf2e4dcdcf3b9ff1dd9dcfbb3321aa0de98fe471d9a0d81aca9791b345c49af36da8498423ad08788fcc9892a2487efcde7a649614b14ba1c184784ca814db32bca5202a39635cae614676e0595b94e5b227273696812352f96703ad505e45ec29a524ad4fd017715f8dabca3758427726eeff00ca50d6ba964df3e513869880d9c38e14782155561de1ff27d7a8f780a2f03cd1c70c9d09598e297b85d6dc53b4ec3d2cd43a26d916363e76f56b6e192131f925bd3579d1e7084b22488937b8c2ab8806060dd181a8d2182300ad427bdbe185f4129c7719bb715d52acc2acac74fce3073a1b0204d612de49df63883aed28c904cea1a2c0774f83b9e4bdce6c81865877f8576df24dd4c3e5061751036f98600000000000000005cc076eaaf831d3ffa9be6", 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r3 = fcntl$getown(r2, 0x9) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r3) write$cgroup_int(r2, &(0x7f0000000040), 0xffffffffffffffc3) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r5, 0x10d, 0x400000009e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 02:16:10 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "6f87a9", 0x18, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x83, 0x0, 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}}}}, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0xa8800, 0x0) finit_module(r1, &(0x7f00000000c0)='*+\x00', 0x2) ptrace$setopts(0x4200, r0, 0x4, 0x28) 02:16:10 executing program 4: r0 = socket(0x2, 0x6, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009ff4)) r2 = gettid() r3 = gettid() syz_extract_tcp_res(&(0x7f0000000040), 0x5, 0x80) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000000)={r1, r0, 0x1ff}) 02:16:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000001900010000f7ff0000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000400000000000000000000000000000000000000000000000000000000000000000000000000000638feabaa6f575b4620000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x60000, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x39) 02:16:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x9, 0x0, 0xfffffffffffffffe, 0x2}, 0x10}, 0x1}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x40, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 02:16:10 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x440000) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000000c0)=""/125) r1 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffa) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") dup(r1) r2 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000040)={0x1, 0x89f4, 0x9, 0x2, 0x1, 0xfffffffffffffffa, 0x1}) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000140)=""/72) 02:16:10 executing program 7: mkdir(&(0x7f0000a7aff6)='./control\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = inotify_init() inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x81000100) read(r0, &(0x7f0000000180)=""/229, 0xfffffffffffffe65) creat(&(0x7f0000000040)='./control/file0\x00', 0x0) 02:16:10 executing program 0: 02:16:10 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f000074fffc)=0x1, 0xffffffffffffff45) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x60000008000006, &(0x7f00007b1000)=0x81, 0x4) sendto$inet6(r0, &(0x7f0000000240)="8e0bff2d860dcc93b2641c5013897ab174d9dffc06caa520f3", 0x19, 0x400c001, &(0x7f0000000280)={0xa, 0x4e21, 0x4d9f, @dev={0xfe, 0x80, [], 0x12}, 0x9}, 0x1c) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000400)={0x7, {0x2, 0x4e22, @multicast1=0xe0000001}, {0x2, 0x4e23, @rand_addr=0x9}, {0x2, 0x4e20, @rand_addr=0x2}, 0x80, 0x8, 0x100000000, 0x5289, 0x7fffffff, &(0x7f00000003c0)='veth0_to_team\x00', 0x5, 0xfff0, 0x8000}) rt_sigtimedwait(&(0x7f0000000140)={0x9}, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) open(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000040)) socket$key(0xf, 0x3, 0x2) socketpair(0x11, 0x801, 0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) rmdir(&(0x7f0000000480)='./bus\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000580)=ANY=[@ANYBLOB="025bbb4969111779c99be4e7cd65acbedd7316323d21986239048d66ca4263edc2679d4c3504f27396bea4fb02d560e652e9617a9eb69949"], 0x38}, 0x1}, 0xfffffffffffffffd) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000540)={0x33, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e23, 0x2, 'wlc\x00', 0x0, 0xffff, 0x4d}, 0x2c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000004c0), &(0x7f0000000500)=0x4) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 02:16:10 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/ipc\x00') 02:16:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r3, &(0x7f0000000040)=@abs={0x1}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r1, r4, &(0x7f0000000340)=0x102, 0x800009) 02:16:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x4001) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) [ 177.840560] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 02:16:11 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x4001) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) 02:16:11 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000007ffff"], 0x7) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:11 executing program 6: r0 = socket$inet6(0xa, 0x803, 0x8010000000000086) sendto$inet6(r0, &(0x7f0000000000), 0x1de, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) 02:16:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') preadv(r0, &(0x7f000055ff80)=[{&(0x7f00002f0f89)=""/204, 0xcc}], 0x1, 0x0) 02:16:11 executing program 0: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:16:11 executing program 1: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) msgsnd(r0, &(0x7f0000000040)={0x3}, 0x8, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") msgctl$IPC_RMID(r0, 0x0) 02:16:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r3, &(0x7f0000000040)=@abs={0x1}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r1, r4, &(0x7f0000000340)=0x102, 0x800009) 02:16:11 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='wchan\x00') lseek(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080), 0x4) 02:16:11 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0x100, 0x225) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000059000)=0x89a, 0x1c3) sendto$inet(r2, &(0x7f0000c14000), 0x0, 0x0, &(0x7f0000ef0000)={0x2, 0x4e20}, 0x10) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00006c0000)}, 0x42020) 02:16:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xffffffffffff1e0c, 0x7, 0x0, 0xa, 0x19, 0x0, "5784783783ce818fffec41342fec7259846d4d1bf3a02386ec8646d47921415ea0ddaceca66472e0f9416a3e78ef239b25c62ca88ee20ee6d47e1e595216565c", "cab5811da4c8654f52b1ae78250fa1986302e2a49bd0e692b7bb69ba16c26032836a9633dc08425b9dd30959c48c203c3b8c342bf5afbe5c6d4a04904b483f15", "a2ede72fa410e6e8dab254c3915f730821bc251f1f26867845a58064e1016025", [0x7fffffff, 0x101]}) 02:16:11 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000007ffff"], 0x7) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, &(0x7f00000002c0), 0x0, 0x200007fb, &(0x7f0000e68000)={0x2}, 0x10) r2 = dup2(r1, r1) sendmsg$nl_netfilter(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[]}, 0x1}, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000000c0), 0x4) 02:16:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r3, &(0x7f0000000040)=@abs={0x1}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r1, r4, &(0x7f0000000340)=0x102, 0x800009) [ 179.125655] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 02:16:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x4001) r1 = memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007) 02:16:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x2000000011, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) sendto$inet6(r1, &(0x7f0000000000)="957a88ca", 0x4, 0x0, &(0x7f0000000580)={0xa, 0x20008100, 0x5, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) 02:16:12 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000007ffff"], 0x7) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:12 executing program 5: 02:16:12 executing program 6: 02:16:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r3, &(0x7f0000000040)=@abs={0x1}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r1, r4, &(0x7f0000000340)=0x102, 0x800009) 02:16:12 executing program 3: 02:16:12 executing program 0: 02:16:12 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000007ffff"], 0x7) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:12 executing program 5: 02:16:12 executing program 6: 02:16:12 executing program 1: 02:16:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r3, &(0x7f0000000040)=@abs={0x1}, 0x6e) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000340)=0x102, 0x800009) 02:16:12 executing program 3: 02:16:12 executing program 2: 02:16:13 executing program 5: 02:16:13 executing program 1: 02:16:13 executing program 6: 02:16:13 executing program 2: 02:16:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r1, r3, &(0x7f0000000340)=0x102, 0x800009) 02:16:13 executing program 3: 02:16:13 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000007ffff"], 0x7) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:13 executing program 0: 02:16:13 executing program 6: 02:16:13 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file1\x00') syz_fuse_mount(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:16:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000040)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000180)='l', 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x4}, 0x0) 02:16:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1=0xe0000001}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}]}, 0x80}, 0x1}, 0x0) 02:16:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x2000000011, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) sendto$inet6(r1, &(0x7f0000000000)="957a88ca", 0x4, 0x0, &(0x7f0000000580)={0xa, 0x20008100, 0x5, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) 02:16:13 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000007ffff"], 0x7) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r1, r3, &(0x7f0000000340)=0x102, 0x800009) 02:16:13 executing program 0: 02:16:13 executing program 6: 02:16:13 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file1\x00') syz_fuse_mount(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:16:13 executing program 5: 02:16:13 executing program 2: 02:16:13 executing program 3: 02:16:13 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000007ffff"], 0x7) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:13 executing program 0: 02:16:14 executing program 6: 02:16:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r1, r3, &(0x7f0000000340)=0x102, 0x800009) 02:16:14 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000003061f001cfffd946fa2", 0xe}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 02:16:14 executing program 3: r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)="2812d42c", 0x4}], 0x1, &(0x7f0000000bc0)=ANY=[]}, 0x0) 02:16:14 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file1\x00') syz_fuse_mount(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:16:14 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:14 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') ftruncate(r0, 0x8) ftruncate(r0, 0x5ecd) 02:16:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000700000000000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) close(r3) close(r2) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) close(r4) 02:16:14 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000201ffff000000a35323721900000207"], 0x14}, 0x1}, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 02:16:14 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) fstatfs(r0, &(0x7f0000000140)=""/86) 02:16:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@abs={0x1}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r1, r3, &(0x7f0000000340)=0x102, 0x800009) [ 181.453458] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 02:16:14 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:14 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file1\x00') syz_fuse_mount(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:16:14 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r0, &(0x7f00000000c0), 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:14 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000003061f001cfffd946fa2", 0xe}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 02:16:14 executing program 3: 02:16:14 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@abs={0x1}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r1, r3, &(0x7f0000000340)=0x102, 0x800009) 02:16:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000700000000000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) close(r3) close(r2) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) close(r4) 02:16:14 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') syz_fuse_mount(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:16:15 executing program 3: 02:16:15 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r0, &(0x7f00000000c0), 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:15 executing program 5: 02:16:15 executing program 7: write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000007ffff"], 0x7) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) [ 182.361956] 9pnet: Insufficient options for proto=fd 02:16:15 executing program 6: 02:16:15 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') syz_fuse_mount(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:16:15 executing program 3: 02:16:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@abs={0x1}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r1, r3, &(0x7f0000000340)=0x102, 0x800009) 02:16:15 executing program 5: 02:16:15 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r0, &(0x7f00000000c0), 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000700000000000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) close(r3) close(r2) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) close(r4) 02:16:15 executing program 7: write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000007ffff"], 0x7) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) [ 182.689333] 9pnet: Insufficient options for proto=fd 02:16:15 executing program 3: 02:16:15 executing program 5: 02:16:15 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r0, &(0x7f00000000c0), 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:15 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') syz_fuse_mount(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:16:15 executing program 6: 02:16:15 executing program 7: write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000007ffff"], 0x7) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000700000000000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) close(r3) close(r2) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) close(r4) 02:16:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r1, r3, &(0x7f0000000340)=0x102, 0x800009) 02:16:16 executing program 3: r0 = add_key(&(0x7f0000000840)='logon\x00', &(0x7f0000000880)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000008c0)="8f", 0x1, 0xfffffffffffffffb) keyctl$read(0xb, r0, &(0x7f00000009c0)=""/26, 0x1a) [ 183.005464] 9pnet: Insufficient options for proto=fd 02:16:16 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r0, &(0x7f00000000c0), 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:16 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') preadv(r0, &(0x7f00000014c0)=[{&(0x7f00000026c0)=""/202, 0xca}], 0x1, 0x0) 02:16:16 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) ftruncate(0xffffffffffffffff, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) fadvise64(r1, 0x0, 0x3, 0x4) 02:16:16 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000007ffff"], 0x7) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:16 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file1\x00') syz_fuse_mount(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:16:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r1, r3, &(0x7f0000000340)=0x102, 0x800009) 02:16:16 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="170000000010"]}) close(0xffffffffffffffff) close(r1) 02:16:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000700000000000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) close(r3) close(r2) close(r4) 02:16:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f000000e000/0x3000)=nil, 0x3000, 0x66) munmap(&(0x7f000000d000/0x2000)=nil, 0x2000) madvise(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x7f) syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x800) openat$ptmx(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ptmx\x00', 0x80000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) futex(&(0x7f0000000400), 0xb, 0x2, &(0x7f0000000440)={0x77359400}, &(0x7f00000005c0), 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000880)='/dev/full\x00', 0x208400, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000003c0)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socket(0x2, 0x0, 0x0) ioctl(r0, 0xfffffffffffffffe, &(0x7f00000007c0)="224117766e080000007e36aa0ae2ad810dd808417eb7ae31fde0193bd332ecdd6c088880281570582e42140b18016ad468afb5803c97988b1d2d782c4f56b0a30465c470") prctl$seccomp(0x16, 0x0, &(0x7f0000000140)={0x0, &(0x7f0000000240)}) r2 = syz_open_procfs(0x0, &(0x7f0000000980)="2f657865090000000004090043ddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d0da75af1f02a4c7ed71720000fb35331ce39c9bf27c14c4908e69eeae12203975eec59b29cb622b79dbc41f4e0101f971c25f29e528a8cc6fb950a83319ede2fd4211e3ab7888d8c4dd4470eb72ea2897f9faa1551282c38dd887d0a59c573f92cb9d095eda4577ae5301131ed60a5b43e56429dc3bdec423e694") fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a", 0x3c, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) recvmsg(r1, &(0x7f0000000600)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000480)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @rand_addr}}}, 0x88) socket(0x0, 0x0, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000180)={0x1}, 0xc) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000780)) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[], 0xa37cf698) 02:16:16 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r0, &(0x7f00000000c0), 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:16 executing program 6: 02:16:16 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000007ffff"], 0x7) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:16 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file1\x00') syz_fuse_mount(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:16:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r1, r3, &(0x7f0000000340)=0x102, 0x800009) 02:16:16 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r0, &(0x7f00000000c0), 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:16 executing program 6: 02:16:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000700000000000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) close(r3) close(r2) close(r4) 02:16:16 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file1\x00') syz_fuse_mount(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:16:16 executing program 6: 02:16:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r1, &(0x7f0000000040)=@abs={0x1}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(0xffffffffffffffff, r2, &(0x7f0000000340)=0x102, 0x800009) 02:16:16 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r0, &(0x7f00000000c0), 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:17 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000007ffff"], 0x7) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:17 executing program 3: 02:16:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000700000000000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) close(r3) close(r2) close(r4) 02:16:17 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[], 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:17 executing program 6: 02:16:17 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file1\x00') syz_fuse_mount(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:16:17 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r2, &(0x7f0000000040)=@abs={0x1}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r0, r3, &(0x7f0000000340)=0x102, 0x800009) 02:16:17 executing program 5: 02:16:17 executing program 3: 02:16:17 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r0, &(0x7f00000000c0), 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000700000000000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) close(r3) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) close(r4) 02:16:17 executing program 3: 02:16:17 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r0, &(0x7f00000000c0), 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:17 executing program 6: 02:16:17 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r2, &(0x7f0000000040)=@abs={0x1}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r0, r3, &(0x7f0000000340)=0x102, 0x800009) 02:16:17 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file1\x00') syz_fuse_mount(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:16:17 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[], 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:17 executing program 5: 02:16:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000700000000000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) close(r3) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) close(r4) 02:16:18 executing program 3: 02:16:18 executing program 6: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:18 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:18 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r2, &(0x7f0000000040)=@abs={0x1}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r0, r3, &(0x7f0000000340)=0x102, 0x800009) 02:16:18 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file1\x00') syz_fuse_mount(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:16:18 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[], 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = epoll_create1(0x0) flock(r2, 0x1) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000000)) flock(r1, 0x5) 02:16:18 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) setsockopt(r0, 0x38, 0x0, &(0x7f0000000000)="7e1e2fb0ee3ed70ed478f856afa01e", 0xf) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="240000000c0607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e", 0x24}], 0x1, 0x0, 0xffffff6a}, 0x0) 02:16:18 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:18 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000000c0)={0x66e, {0x2, 0x4e20, @rand_addr=0x8}, {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e20, @rand_addr=0x4}, 0x123, 0x401, 0x401, 0x3f, 0x100000000, &(0x7f0000000080)='veth1_to_bond\x00', 0x8, 0x100000000, 0x2}) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x877b, 0x92, 0x0, 0x80, 0x1, 0x2, 0x9, {0x0, @in6={{0xa, 0x4e24, 0x3, @empty, 0x1}}, 0xff, 0xff, 0x8, 0x80000001, 0x9312}}, &(0x7f0000000200)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0x8, 0x100000000, 0x200, 0x0, 0xfff, 0x10000, 0x6, 0xffffffff00000000, r2}, &(0x7f0000000280)=0x20) process_vm_writev(r0, &(0x7f0000004ec0)=[{&(0x7f0000000000)=""/38, 0x26}, {&(0x7f0000003ec0)=""/4096, 0x1000}], 0x2, &(0x7f00000051c0)=[{&(0x7f0000005100)=""/191, 0xbf}], 0x1, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r3 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) process_vm_writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000300)=""/105, 0x69}, {&(0x7f0000000380)=""/14, 0xe}, {&(0x7f00000003c0)=""/7, 0x7}], 0x4, &(0x7f00000019c0)=[{&(0x7f0000000440)=""/101, 0x65}, {&(0x7f00000004c0)=""/161, 0xa1}, {&(0x7f0000000580)=""/94, 0x5e}, {&(0x7f0000000600)=""/163, 0xa3}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/136, 0x88}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/90, 0x5a}, {&(0x7f00000018c0)=""/79, 0x4f}, {&(0x7f0000001940)=""/72, 0x48}], 0xa, 0x0) getresgid(&(0x7f0000001a80), &(0x7f0000001ac0)=0x0, &(0x7f0000001b00)) setgid(r4) ioctl$RTC_PIE_ON(r3, 0x7005) 02:16:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000700000000000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) close(r3) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) close(r4) 02:16:18 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:18 executing program 1: mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file1\x00') syz_fuse_mount(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:16:18 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r2, &(0x7f0000000040)=@abs={0x1}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r0, r3, &(0x7f0000000340)=0x102, 0x800009) 02:16:18 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:18 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[], 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:18 executing program 6: unshare(0x24020400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x400000002, 0x0) poll(&(0x7f0000000080)=[{r2}, {r2}], 0x2, 0xfffffffffffffe01) mkdirat(r2, &(0x7f0000000140)='./file0\x00', 0x20) write$sndseq(r2, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {0x5, 0xf6}, {}, @quote={{}, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @addr}}}], 0x30) dup3(r1, r0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 02:16:18 executing program 1: mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file1\x00') syz_fuse_mount(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:16:18 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:18 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0), 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(0xffffffffffffffff, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:18 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r2, &(0x7f0000000040)=@abs={0x1}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r0, r3, &(0x7f0000000340)=0x102, 0x800009) 02:16:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000700000000000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) close(r2) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) close(r4) 02:16:19 executing program 5: unshare(0x28020400) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f00000000c0)="beaecf9cfc2b15f1f3927e14ab07f4124d18c3118d11950bc69c757877a09d131faaf303804c609add03") ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000100)=""/4096) socket$rds(0x15, 0x5, 0x0) 02:16:19 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0x200000) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000080)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f00000001c0)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000ee1000)=ANY=[@ANYBLOB="0000ff0f00000000"]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, 0xffffffffffffff9c}) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) 02:16:19 executing program 2: r0 = dup(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r0, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:19 executing program 1: mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file1\x00') syz_fuse_mount(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:16:19 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:19 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r2, &(0x7f0000000040)=@abs={0x1}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r0, r3, &(0x7f0000000340)=0x102, 0x800009) 02:16:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000700000000000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) close(r2) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) close(r4) 02:16:19 executing program 2: r0 = socket(0x0, 0x3, 0x0) r1 = dup(r0) write(r0, &(0x7f00000000c0), 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:19 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\b\x00\x00\x00'], 0x4) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:19 executing program 1 (fault-call:4 fault-nth:0): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file1\x00') syz_fuse_mount(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 186.659683] FAULT_INJECTION: forcing a failure. [ 186.659683] name failslab, interval 1, probability 0, space 0, times 1 [ 186.671130] CPU: 0 PID: 7712 Comm: syz-executor1 Not tainted 4.18.0-rc4+ #24 [ 186.678345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.687721] Call Trace: [ 186.690372] dump_stack+0x185/0x1e0 [ 186.694070] ? __should_failslab+0x278/0x2a0 [ 186.698551] should_fail+0x8a7/0xae0 [ 186.702402] __should_failslab+0x278/0x2a0 [ 186.706688] should_failslab+0x29/0x70 [ 186.710629] kmem_cache_alloc+0x13c/0xbb0 [ 186.714887] ? getname_flags+0x12a/0xaa0 [ 186.719026] ? fsnotify+0x490/0x1b30 [ 186.722796] getname_flags+0x12a/0xaa0 [ 186.726737] getname+0x55/0x60 [ 186.729971] do_sys_open+0x546/0x990 [ 186.733717] ? syscall_return_slowpath+0x108/0x800 [ 186.738725] __x64_sys_open+0xf2/0x130 [ 186.742674] ? do_sys_open+0x990/0x990 [ 186.746613] do_syscall_64+0x15b/0x230 [ 186.750540] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 186.755751] RIP: 0033:0x410081 [ 186.758950] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 186.778581] RSP: 002b:00007fcc2f2e0800 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 186.786336] RAX: ffffffffffffffda RBX: 00007fcc2f2e16d4 RCX: 0000000000410081 [ 186.793638] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000004ba79a [ 186.800939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 02:16:19 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x8e, 0xfffffffffffffffb) dup3(r2, r0, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) 02:16:19 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r3, &(0x7f0000000040)=@abs={0x1}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r1, r4, &(0x7f0000000340)=0x102, 0x800009) 02:16:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000080)={0x6, 0x1c, [0x101, 0x100000000, 0x2, 0x8, 0xe993, 0x0, 0x81]}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x801, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000400)="2f657865000000000004090030ddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") sendfile(r2, r3, &(0x7f0000000140), 0x8402) 02:16:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000700000000000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) close(r2) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) close(r4) 02:16:19 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) getsockname$packet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000500)=0x14) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000040)=""/127}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)=ANY=[]) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000140)=""/46, &(0x7f00000008c0)=0x2e) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000380)=""/115, &(0x7f0000000580)=""/156, &(0x7f0000000400)=""/185}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000540)={0x0, 0x3}, &(0x7f0000000640)=0x8) rt_sigreturn() ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xffffffff) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000780)={r2, 0xc9, "d5238cb29e6b74af249e7463e368746f8684bd32fa26d7f404e386d85b1d7201ab599e603df3838dd2c290342bb92a1c976cbd853997870b4813a27116516060564f24c29a92b646e5d8d3a86fee739e2a0b34b1f99058f54d1a1a2aff264f0ed7ec1c32aa884ae144b6ca47d350fe08393b6f9327a2a88b8e99d6fdebab1ba9ff1274256a2a5478f809a586f7d02e2bd34f348455372a558d98c95e9e08f9fe800b031aec92b71638fe6e2c95ded5d94e18658ad2efc16f623bbcd9e59837cc33c6390cd72fb47ac8"}, &(0x7f0000000680)=0xd1) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000900)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000740)=0x8800001) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000880)={0x1, 0x0, [{0xd000, 0x66, &(0x7f00000006c0)=""/102}]}) 02:16:19 executing program 2: r0 = socket(0x10, 0x0, 0x0) r1 = dup(r0) write(r0, &(0x7f00000000c0), 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:19 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\b\x00\x00\x00'], 0x4) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) [ 186.808234] R10: 00000000200000c0 R11: 0000000000000293 R12: 0000000000000000 [ 186.815525] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000000000000 02:16:19 executing program 1 (fault-call:4 fault-nth:1): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file1\x00') syz_fuse_mount(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 187.034874] FAULT_INJECTION: forcing a failure. [ 187.034874] name failslab, interval 1, probability 0, space 0, times 0 [ 187.046369] CPU: 0 PID: 7741 Comm: syz-executor1 Not tainted 4.18.0-rc4+ #24 [ 187.053585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.062959] Call Trace: [ 187.065603] dump_stack+0x185/0x1e0 [ 187.069272] ? __should_failslab+0x278/0x2a0 [ 187.073750] should_fail+0x8a7/0xae0 [ 187.077523] __should_failslab+0x278/0x2a0 [ 187.081801] should_failslab+0x29/0x70 [ 187.085758] kmem_cache_alloc+0x13c/0xbb0 [ 187.089959] ? get_empty_filp+0x1f1/0x870 [ 187.094178] get_empty_filp+0x1f1/0x870 [ 187.098191] ? do_filp_open+0x2c1/0x740 [ 187.102223] path_openat+0x15b/0x69c0 [ 187.106080] ? kmsan_set_origin_inline+0x6b/0x120 [ 187.110980] ? __msan_poison_alloca+0x183/0x220 [ 187.115689] ? kmsan_set_origin_inline+0x6b/0x120 [ 187.120565] ? __msan_poison_alloca+0x183/0x220 [ 187.125292] ? __alloc_fd+0x473/0xba0 [ 187.129138] ? expand_files+0x65/0xec0 [ 187.133079] ? __alloc_fd+0x473/0xba0 [ 187.136949] ? kmsan_set_origin_inline+0x6b/0x120 [ 187.141854] ? __msan_poison_alloca+0x183/0x220 [ 187.146583] ? do_sys_open+0x643/0x990 [ 187.150527] ? do_filp_open+0x88/0x740 [ 187.154472] ? do_sys_open+0x643/0x990 [ 187.158421] do_filp_open+0x2c1/0x740 [ 187.162293] do_sys_open+0x643/0x990 [ 187.166046] ? syscall_return_slowpath+0x108/0x800 [ 187.171050] __x64_sys_open+0xf2/0x130 [ 187.175005] ? do_sys_open+0x990/0x990 [ 187.178944] do_syscall_64+0x15b/0x230 [ 187.182880] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 187.188089] RIP: 0033:0x410081 [ 187.191286] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 187.210897] RSP: 002b:00007fcc2f2e0800 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 187.218653] RAX: ffffffffffffffda RBX: 00007fcc2f2e16d4 RCX: 0000000000410081 [ 187.225948] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000004ba79a 02:16:20 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\b\x00\x00\x00'], 0x4) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:20 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(0xffffffffffffffff) write(r0, &(0x7f00000000c0), 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:20 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0x200000000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x7530}, 0x10) 02:16:20 executing program 3: r0 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r0, &(0x7f0000000080)="a85883156f794c05e0b02a03983b5addde9e46e1145c5c3fcb185a36d20d52d097399fd15648c664", 0x28) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4, 0x813, r0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000317000), 0x1) syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 187.233253] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.240554] R10: 00000000200000c0 R11: 0000000000000293 R12: 0000000000000000 [ 187.247850] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000000000000 02:16:20 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r3, &(0x7f0000000040)=@abs={0x1}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r1, r4, &(0x7f0000000340)=0x102, 0x800009) 02:16:20 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:20 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000007ff"], 0x6) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000700000000000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) close(r3) close(r2) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) close(0xffffffffffffffff) 02:16:20 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x8e, 0xfffffffffffffffb) dup3(r2, r0, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) 02:16:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0x301, 0x0, 0x0, {{@in=@broadcast=0xffffffff, @in6=@ipv4={[], [0xff, 0xff]}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bbd}}, 0x80}, 0x1}, 0x100000) r1 = socket(0x2, 0x80000, 0x1) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x400, 0x4, 0x80000000, 0xfffffffffffffff8, 0x0, 0xc35c, 0x40000000000}, 0x1c) 02:16:20 executing program 1 (fault-call:4 fault-nth:2): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file1\x00') syz_fuse_mount(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:16:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x20000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x20010100, &(0x7f0000000280), &(0x7f0000000000), &(0x7f00000000c0), &(0x7f00000002c0)="ab89ad51860546379d2be71853eb78968b923a7dc29fcb94296628bdd7eb152a94ed8b18072d6590f94caf56e5bbcfc826218d1c2a7c3b8c8b080edb447aa7a7aab65fad9712311a82381b42a554100c42a48d35857a6c26c454fb98b16423196e9ec92007f043d19dd7ad2521c66fde937889cc5c31d9422802b232369bdd3fd0d8") mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540), &(0x7f00000006c0)) lgetxattr(&(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)=@known='security.capability\x00', &(0x7f0000001dc0)=""/38, 0x26) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380), &(0x7f0000000400)) tkill(r3, 0x1000000000016) open$dir(&(0x7f00000001c0)='./file0\x00', 0x27e, 0x0) sendmsg$kcm(r1, &(0x7f0000001d00)={&(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x2, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x10}, 'gretap0\x00'}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000440)="7dca831c3408624f14d5c103605d196f461b3b3da45077863dfb3714b8ac685d4cba2e217ee1085e1b700b1679b929aee0c8fcaffde0a4a67491af74eb157badc245bd56152e5c51cdc1ee3305ea8d8741e64eeb6fda14e885c6f7d76abe8f773715942c4735b1ed861c6003295f95d2a7d0066e85832f64c40a83fc875b1f57df92a3956ec0ea004d67fc87264a3b210419ba721f1a65693cc82b261d2a6cf5d663a6b49f", 0xa5}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="4c2b260869d3c5ed183cc6bf22acf89b56b5e7fa1f2ce4f6f4441f7235855a66c016e368e2de53ff2e91b72bd964423d4f1e8360b23e1a5bffcdccf4690593e404eeacf1bc25bbb0a02fa831ec375c469d339a3969027883aa402db4705b0cbdaa2f093d6d6892e64e63f44a82c2da020f50523dc8b1fa01d7a7f6b731e80bd0443805883feb705932e88778ab4831fde4287d148615faef4c73bb903e3628f0c9c61b547e9e6cd93a02e08f32e8124a3d3dedfffd298a4504bcac6bdbffe9f1504d56904aad4a35acb97b3a99cdededc7a5e5bafc7367cb4eb80474cfd5f40bd112a567d50d9955230fe5e730e65f4c1e02900bab0d4ee2", 0xf8}, {&(0x7f0000001600)="d95446307e2aa4bfaa716c9d07077b67276f41975034d96855cc51c172ef960db721928598f72e22bdc9a78f7a130e5abfb417c55d69f51d04694c3949880685901db4b792b526b9357917526b0a3a", 0x4f}, {&(0x7f0000001680)="6c6ac1cb4a6b20eceb6cb8bd751a2336b52824b758065a53d9de40dc4f66da8d286f07e624acaf96454c29acd945c83a973af4c950dea3547b83f3c10ea3c2eae3c5fd3ff4b0afec628464", 0x4b}, {&(0x7f0000001700)="76f3163990b814977533cbc1e4290f57196643249ff4022f508d2834ac6dc7fd778df5ebb0774fa193440ddc71b059db1a9b703581f9b4a8729b7019675e01364a9fe98c554eb389828a158c2e2e5d5a820e850c8adcc2df8d4e2b765120cbd3e83ef271d96cae25ba0bae522d7430d75378ae99f2f4271534ff51ec41835c09e9937c0fab5e0d8c4a28eb5d8be656b3bb05180926d76d3896d6e5fa7fcca82105b31dac8f22f3133d0e20a2671b", 0xae}, {&(0x7f00000017c0)="6920ab8ac80ea2c367a5c63686a7958a5f0034090338b91775912856bf32a5d5b1e1e3586121bf0e0eed557205c337d093854dc2adca6ea73b8f187824a028da6afdf313fc7d32186e610407b99e4fc1dc6fb653e858e143e35da1a988401461dd1f240371edfeb1cb0f6c35c45cacba98461ab37fabb1ad5f59cb969c3f5316616bd878ad8a7a5ef1e582d58e6bb131831152", 0x93}, {&(0x7f0000001880)="8dc9f8e17724af04d8b8331fd21795d5874b98b2009f9ba1281daace3d", 0x1d}, {&(0x7f00000018c0)="43b2cc8ba5a8a2aa14befa05d6c8ce2559ecb6eb62a70aac7cb8ba359400e38a98dce577628a909c998bb809c264ce16dd984bd43130e2e8d0f3b1a46cc079e8de1ae33f4b3c3dbb071921cb31eb9b4d92ef6e1115cd19ccb0b6fd1ae34375f1ba46384783111732d48eae10f1876f76a1546c9280cb5e7a1731223be3680276def918ee30cbb7fd027fd6452b523965870b3364c53ff964b16e292e60fb1aa7ca8f3259d2a4da1b5a25a8893027dc2015b3a24c64d0480d6145b52f8513d44d27284505", 0xc4}], 0x9, &(0x7f0000001a80)=[{0x70, 0x117, 0x8, "f59f18bf491899de9b03126c77da5802466006c84f7a55f36df4189f5d817aa8cddaa914c5862f27360ca84ee91ec0cb7dc183c4b17f361011613db846e21c19cedd4f17dcbb7193cbb37e9ca98d4a3070847c5dd593d5d0053664834c"}, {0x38, 0x114, 0x16a4, "ce5e47bc11172e4e33b2f2cd03c4a1f9708d77b28fdcd3ed0a0a245c75ba4114291c"}, {0xa8, 0x110, 0x3, "dd67e5e25c6c47d5fe58b5309798a46e961bd4aee0b7ba6c28ea606de5dd41fb71284d4c32afc415c637c9aaa1dbf948ffc9877a1e7072e6e2617fb101924f0b85e3b56d5299fe98db61c3efaf088a6531e058cecb17de8d260840071a6611696c356ee73653f26291ed0ead703e98e2e81c542a0d0bee756ec3b8e8248396d1ae008f9f8f48ba064d1aa5181156c5a9c1"}, {0x40, 0x29, 0xff, "27634e4c397d954d9bead038b285e0716b187d2bc5e1e96af34276e464798e6bf21ddc6b4461081608"}, {0x28, 0x102, 0x5, "e623a853f24d4566cf3783a8d0b3cee1d6c041c6abaf"}, {0xc8, 0x0, 0x7b35, "10b6902c9f193022c74dd6d8c3d3d849b661712c76d027719cfefb162251761c7544ca59bff7d77198e46e3a59fc728473b4208212e79d54f8dd1212529ebae35043308c7eeb02d1cd50eb76d2c6949692b8f68c343e8bb292177dcce5d6c4fc4029eeb5d6ab15caafef7100a18ffadbd234c5604be33d073e3a6243fecf13df4b2e87d6661fa95f946de5f29c91d2487028888ed34ae8da1f32e116847eb079798fc2f862ec9522a73f4da2417ea1cad69012cd0535"}], 0x280, 0x10}, 0x4000) 02:16:20 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r3, &(0x7f0000000040)=@abs={0x1}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r1, r4, &(0x7f0000000340)=0x102, 0x800009) 02:16:20 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000007ff"], 0x6) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:20 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000700000000000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) close(r3) close(r2) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) close(0xffffffffffffffff) [ 187.953763] FAULT_INJECTION: forcing a failure. [ 187.953763] name failslab, interval 1, probability 0, space 0, times 0 [ 187.965258] CPU: 0 PID: 7792 Comm: syz-executor1 Not tainted 4.18.0-rc4+ #24 [ 187.972477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.981859] Call Trace: [ 187.984505] dump_stack+0x185/0x1e0 [ 187.988179] ? __should_failslab+0x278/0x2a0 [ 187.992634] should_fail+0x8a7/0xae0 [ 187.996411] __should_failslab+0x278/0x2a0 02:16:21 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000007ff"], 0x6) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) [ 188.000744] should_failslab+0x29/0x70 [ 188.004679] __kmalloc_track_caller+0x212/0xce0 [ 188.009425] ? strndup_user+0x134/0x1f0 [ 188.013458] memdup_user+0x7c/0x200 [ 188.017161] strndup_user+0x134/0x1f0 [ 188.021014] ksys_mount+0xc4/0x3d0 [ 188.024666] __x64_sys_mount+0x157/0x1c0 [ 188.028798] ? ksys_mount+0x3d0/0x3d0 [ 188.032655] do_syscall_64+0x15b/0x230 [ 188.036593] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 188.041807] RIP: 0033:0x455e29 [ 188.045003] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 188.064618] RSP: 002b:00007fcc2f2e0808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 188.072371] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000000455e29 [ 188.079673] RDX: 00000000004c2ee0 RSI: 00000000200000c0 RDI: 00000000004ebc65 [ 188.086973] RBP: 0000000000000000 R08: 00007fcc2f2e0820 R09: 0000000000000000 [ 188.094274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.101584] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000000000000 02:16:21 executing program 5: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="7f0ab351045c75a1c5", 0x9, r2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfa}, &(0x7f0000000680)=0xa) r4 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0), 0xd0, r2) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r3, r4, r3}, &(0x7f00000004c0)=""/132, 0x15, 0x0) r5 = semget$private(0x0, 0x0, 0x60d) semctl$IPC_INFO(r5, 0x7, 0x3, &(0x7f00000002c0)=""/122) chdir(&(0x7f0000000180)='./file0\x00') syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x8000) 02:16:21 executing program 1 (fault-call:4 fault-nth:3): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file1\x00') syz_fuse_mount(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:16:21 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000007ffff"], 0x7) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:21 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r3, &(0x7f0000000040)=@abs={0x1}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r1, r4, &(0x7f0000000340)=0x102, 0x800009) 02:16:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000700000000000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) close(r3) close(r2) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) close(0xffffffffffffffff) [ 188.369898] 9pnet: Insufficient options for proto=fd [ 188.389856] FAULT_INJECTION: forcing a failure. [ 188.389856] name failslab, interval 1, probability 0, space 0, times 0 [ 188.401285] CPU: 1 PID: 7814 Comm: syz-executor1 Not tainted 4.18.0-rc4+ #24 [ 188.408519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.417899] Call Trace: [ 188.420538] dump_stack+0x185/0x1e0 [ 188.424232] ? __should_failslab+0x278/0x2a0 [ 188.428686] should_fail+0x8a7/0xae0 [ 188.432456] __should_failslab+0x278/0x2a0 [ 188.436771] should_failslab+0x29/0x70 [ 188.440733] __kmalloc_track_caller+0x212/0xce0 [ 188.445479] ? strndup_user+0x134/0x1f0 [ 188.449507] ? kmsan_set_origin+0x9e/0x160 [ 188.453796] memdup_user+0x7c/0x200 [ 188.457535] strndup_user+0x134/0x1f0 [ 188.461391] ksys_mount+0x193/0x3d0 [ 188.465092] __x64_sys_mount+0x157/0x1c0 [ 188.469224] ? ksys_mount+0x3d0/0x3d0 [ 188.473078] do_syscall_64+0x15b/0x230 [ 188.477010] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 188.482225] RIP: 0033:0x455e29 [ 188.485421] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 188.505066] RSP: 002b:00007fcc2f2e0808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 188.512813] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000000455e29 02:16:21 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) [ 188.520116] RDX: 00000000004c2ee0 RSI: 00000000200000c0 RDI: 00000000004ebc65 [ 188.527409] RBP: 0000000000000000 R08: 00007fcc2f2e0820 R09: 0000000000000000 [ 188.534705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.541997] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000000000000 02:16:21 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)={0x2663, 0x6, 0x1f}) 02:16:21 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000007ffff"], 0x7) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:21 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1}, 0x0) pipe2(&(0x7f0000000040), 0x4000) 02:16:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r3, &(0x7f0000000040)=@abs={0x1}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r1, r4, &(0x7f0000000340)=0x102, 0x800009) 02:16:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000700000000000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) close(r3) close(r2) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) close(r4) 02:16:21 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:21 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xfffffffffffffffd}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={r1, 0xffffffff}, 0x8) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [{[], {0x8100, 0x7fff, 0xfffffffffffff82b}}], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 02:16:21 executing program 1 (fault-call:4 fault-nth:4): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file1\x00') syz_fuse_mount(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 188.854725] 9pnet: Insufficient options for proto=fd [ 188.972591] FAULT_INJECTION: forcing a failure. [ 188.972591] name failslab, interval 1, probability 0, space 0, times 0 [ 188.983953] CPU: 1 PID: 7857 Comm: syz-executor1 Not tainted 4.18.0-rc4+ #24 [ 188.991160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.000531] Call Trace: [ 189.003163] dump_stack+0x185/0x1e0 [ 189.006856] ? __should_failslab+0x278/0x2a0 [ 189.011332] should_fail+0x8a7/0xae0 [ 189.015109] __should_failslab+0x278/0x2a0 [ 189.019404] should_failslab+0x29/0x70 [ 189.023345] __kmalloc+0xcb/0x370 [ 189.026833] ? copy_mount_options+0x9e/0x570 [ 189.031271] ? ksys_mount+0x251/0x3d0 [ 189.035134] copy_mount_options+0x9e/0x570 [ 189.039443] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 189.044954] ? strndup_user+0x1a3/0x1f0 [ 189.048970] ksys_mount+0x251/0x3d0 [ 189.052661] __x64_sys_mount+0x157/0x1c0 [ 189.056781] ? ksys_mount+0x3d0/0x3d0 [ 189.060647] do_syscall_64+0x15b/0x230 [ 189.064576] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 189.069785] RIP: 0033:0x455e29 [ 189.072986] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 189.092564] RSP: 002b:00007fcc2f2e0808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 189.100307] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000000455e29 [ 189.107604] RDX: 00000000004c2ee0 RSI: 00000000200000c0 RDI: 00000000004ebc65 [ 189.114892] RBP: 0000000000000000 R08: 00007fcc2f2e0820 R09: 0000000000000000 02:16:22 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[]}, 0x1}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@random={'user.', '+()\x00'}, &(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x12, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x7, 0x21}, &(0x7f00000001c0)=0x10) ioctl(r1, 0xc2604110, &(0x7f0000000040)="c758a632b836780046eb601a42b04e404ac481b35cadefb03d08b66f69a649121807d030f9beeb") 02:16:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r3, &(0x7f0000000040)=@abs={0x1}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r1, r4, &(0x7f0000000340)=0x102, 0x800009) 02:16:22 executing program 5: unshare(0x64000400) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)=0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2000, 0x0) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/132, 0x84}, {&(0x7f00000001c0)=""/219, 0xdb}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000080)=""/23, 0x17}, {&(0x7f00000002c0)=""/196, 0xc4}], 0x5, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000500)={@can={0x1d, r2}, {&(0x7f0000000480)=""/2, 0x2}, &(0x7f00000004c0)}, 0xa0) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) utimes(&(0x7f0000000600)='./file0\x00', &(0x7f00000006c0)={{r3, r4/1000+30000}, {r5, r6/1000+30000}}) ptrace$getregs(0xc, r0, 0x4, &(0x7f0000000040)) init_module(&(0x7f0000000700)='vcan0\x00', 0x6, &(0x7f0000000740)='vcan0\x00') mq_getsetattr(0xffffffffffffffff, &(0x7f0000005340), &(0x7f0000006500)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000005c0)={0x4, 0x7, 0x1000}, 0x4) 02:16:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0xb0, r2, 0x0, 0x70bd25, 0x25dfdbff, {0x10}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x70}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x13cf}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x8}}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xd}}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0xfdea}, 0x1}, 0x0) [ 189.122179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.129473] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000000000000 02:16:22 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000007ffff"], 0x7) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) [ 189.252371] IPVS: ftp: loaded support on port[0] = 21 [ 189.269322] bridge: RTM_NEWNEIGH with invalid state 0x0 02:16:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000700000000000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) close(r3) close(r2) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) close(r4) [ 189.303900] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 189.345893] 9pnet: Insufficient options for proto=fd 02:16:22 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x10180, 0x12) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x100000000, 0x4, 0x9, 0x9, 0x100000000}) msgsnd(0x0, &(0x7f0000000140), 0x8, 0x0) msgrcv(0x0, &(0x7f0000745000)=ANY=[], 0x0, 0xfffffffffffffffe, 0x0) 02:16:22 executing program 6: r0 = inotify_init() ioctl$int_in(r0, 0x8000000000541b, &(0x7f0000000000)=0xffffffffffffffff) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x321, 0x20100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000080)="1755ae56c61a768b6ad4bfa9309536c84d8656891e65c46d9e62b62a9cd61e1ca40ca6b6c2bce72ef73d96a6ec42b524732949e89d1d7ed4b3612c0813174fc1c0da99e8e92ca28acf6bbfc36fe5d016185db564c1590d34c32af096baa01fb6a86d7aaacea011a56f54d05989ca9e671336bb5e", 0x74) 02:16:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r3, &(0x7f0000000040)=@abs={0x1}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r1, r4, &(0x7f0000000340)=0x102, 0x800009) 02:16:22 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:22 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000007ffff"], 0x7) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) [ 189.610760] 9pnet: Insufficient options for proto=fd 02:16:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0xe7) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x8, 0x80000) ioctl$KDENABIO(r1, 0x4b36) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x9, 0x200) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="ed") ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000001000)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40047451, &(0x7f0000000240)=""/174) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000000)=""/171, &(0x7f0000000100)=0x19d) 02:16:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000700000000000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) close(r3) close(r2) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) close(r4) 02:16:22 executing program 1 (fault-call:4 fault-nth:5): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file1\x00') syz_fuse_mount(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:16:22 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:22 executing program 5: mmap(&(0x7f0000000000/0xfea000)=nil, 0xfea000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x2000408) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$sock_ifreq(r0, 0x8b0d, &(0x7f0000000000)={"69705f7774693000000200", @ifru_addrs=@l2={0x1f}}) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x104008, &(0x7f0000000180)={'trans=unix,', {[{@access_user='access=user', 0x2c}, {@cachetag={'cachetag', 0x3d, "69705f7774693000000200"}, 0x2c}, {@version_u='version=9p2000.u', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x5}, 0x2c}, {@mmap='mmap', 0x2c}, {@access_client='access=client', 0x2c}]}}) 02:16:22 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000007ffff"], 0x7) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r3, &(0x7f0000000040)=@abs={0x1}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r1, r4, &(0x7f0000000340)=0x102, 0x800009) 02:16:23 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f, 0x3}}, 0x20) write$binfmt_misc(r0, &(0x7f0000000040)={'syz1', "3aff71c72edc30963fb3be56f3bf81afe69fac6774b51727d65245ec08c624af83a517272429c5d6d25d64c1dfd5cd8944903f750f7ef484"}, 0x3c) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x200000002}}, 0x1f7) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0), r2, 0x0, 0x0, 0x1}}, 0x20) [ 190.065592] 9pnet: Insufficient options for proto=fd [ 190.104814] FAULT_INJECTION: forcing a failure. [ 190.104814] name failslab, interval 1, probability 0, space 0, times 0 [ 190.116326] CPU: 0 PID: 7919 Comm: syz-executor1 Not tainted 4.18.0-rc4+ #24 [ 190.123530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.132920] Call Trace: [ 190.135570] dump_stack+0x185/0x1e0 [ 190.139251] should_fail+0x8a7/0xae0 [ 190.143036] __should_failslab+0x278/0x2a0 [ 190.147339] should_failslab+0x29/0x70 02:16:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000f12000)={0x400000010, 0x0, 0x0, 0x70a1}, 0xc) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000240)={0x47, ""/71}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) unlinkat(r1, &(0x7f00000002c0)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x7, 0x2, {"c577e5579791e5278282b6e805a70de9"}, 0xa7, 0xbb, 0x101}, @in6={0xa, 0x4e22, 0xbf, @mcast2={0xff, 0x2, [], 0x1}, 0x5}}}, 0x118) [ 190.151262] kmem_cache_alloc+0x13c/0xbb0 [ 190.155442] ? getname_flags+0x12a/0xaa0 [ 190.159542] ? kmsan_set_origin_inline+0x6b/0x120 [ 190.164458] getname_flags+0x12a/0xaa0 [ 190.168402] user_path_at_empty+0xbb/0x140 [ 190.172679] do_mount+0x2c1/0x5310 [ 190.176277] ksys_mount+0x32e/0x3d0 [ 190.179972] __x64_sys_mount+0x157/0x1c0 [ 190.184121] ? ksys_mount+0x3d0/0x3d0 [ 190.187974] do_syscall_64+0x15b/0x230 [ 190.191922] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 190.197133] RIP: 0033:0x455e29 [ 190.200338] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 190.219920] RSP: 002b:00007fcc2f2e0808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 190.229400] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000000455e29 [ 190.236692] RDX: 00000000004c2ee0 RSI: 00000000200000c0 RDI: 00000000004ebc65 [ 190.243980] RBP: 0000000000000000 R08: 00007fcc2f2e0820 R09: 0000000000000000 02:16:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000700000000000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f000031aff8)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) close(0xffffffffffffffff) close(r2) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) close(r3) 02:16:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r3, &(0x7f0000000040)=@abs={0x1}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r1, r4, &(0x7f0000000340)=0x102, 0x800009) 02:16:23 executing program 5: r0 = socket$inet6(0xa, 0x4, 0x8010000000000082) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101000, 0x80) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8040002}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x78, r3, 0x800, 0x70bd26, 0x25dfdbfb, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback={0x0, 0x1}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x40000) clock_gettime(0x0, &(0x7f0000000140)={0x0}) sendmsg$can_bcm(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x1d}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="070000000002000082560000000000", @ANYRES64=0x2710, @ANYRES64=r4], 0x3}, 0x1}, 0x0) mkdirat$cgroup(r2, &(0x7f0000000380)='syz1\x00', 0x1ff) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000000)={0x1ff, 0x1, 0x0, 0x0, 0x40, 0xa5b, 0x101}) listen(r0, 0x7f) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x0) 02:16:23 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) [ 190.251291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.258604] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000000000000 02:16:23 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000007ffff"], 0x7) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) 02:16:23 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) 02:16:23 executing program 3: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b7070000010009fc48700000f7ffff7fbf700000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) prctl$seccomp(0x16, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x8000, 0x0, 0x7fffffff, 0x7}, {0x3, 0x8, 0x100, 0x20}]}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, @loopback}, &(0x7f0000000340)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000580)={0x0, 0x10, &(0x7f0000000540)=[@in={0x2, 0x4e23, @multicast1=0xe0000001}]}, &(0x7f00000005c0)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000600)=@sack_info={r3, 0x81, 0xe48}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @loopback=0x7f000001}}}, &(0x7f00000004c0)=0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, [0x1, 0x3, 0xffffffffffffffe0, 0x100000000, 0x7, 0x7f, 0x26e8f253, 0xac, 0x6, 0x9, 0x5, 0x0, 0x7, 0x7, 0x20]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r4, 0x5, 0x1, 0x2}, 0x10) sendmsg$kcm(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001600)="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", 0xcfa}], 0x1, &(0x7f0000000000)}, 0x0) [ 190.498219] 9pnet: Insufficient options for proto=fd 02:16:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000700000000000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f000031aff8)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) close(0xffffffffffffffff) close(r2) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) close(r3) 02:16:23 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137e637, 0x10800a}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000029ff6)='./control\x00', 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00007a7000)='./control\x00', 0xa4000960) mkdir(&(0x7f00000000c0)='./control/file0\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x41ff, 0x0) read(r0, &(0x7f0000000100)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0xc3, @time}) 02:16:23 executing program 1 (fault-call:4 fault-nth:6): mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file1\x00') syz_fuse_mount(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:16:23 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000007ffff"], 0x7) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 02:16:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r3, &(0x7f0000000040)=@abs={0x1}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r1, r4, &(0x7f0000000340)=0x102, 0x800009) 02:16:23 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f00000003c0)="1b0000004a001fb0ff07fcf9002304000a04f51108000100020100", 0x1b) [ 190.846139] ================================================================== [ 190.853579] BUG: KMSAN: uninit-value in p9_client_rpc+0x194c/0x1dc0 [ 190.859996] CPU: 0 PID: 7982 Comm: syz-executor7 Not tainted 4.18.0-rc4+ #24 [ 190.867186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.876550] Call Trace: [ 190.879150] dump_stack+0x185/0x1e0 [ 190.882791] kmsan_report+0x195/0x2c0 [ 190.886610] __msan_warning_32+0x7d/0xe0 [ 190.890690] p9_client_rpc+0x194c/0x1dc0 [ 190.894783] ? p9_fd_create+0x5a5/0x670 [ 190.898779] p9_client_create+0x15a8/0x2110 [ 190.903188] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 190.908671] v9fs_session_init+0x329/0x2970 [ 190.913019] ? __kmalloc+0x147/0x370 [ 190.916744] ? v9fs_mount+0x96/0x11b0 [ 190.920563] v9fs_mount+0x107/0x11b0 [ 190.923849] FAULT_INJECTION: forcing a failure. [ 190.923849] name failslab, interval 1, probability 0, space 0, times 0 [ 190.924288] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 190.924316] ? xfs_fs_commit_blocks+0xd80/0xd80 [ 190.924343] mount_fs+0x29b/0x780 [ 190.924372] vfs_kern_mount+0x222/0x990 [ 190.924412] do_mount+0xd30/0x5310 [ 190.956508] ? copy_mount_options+0x9e/0x570 [ 190.960925] ksys_mount+0x32e/0x3d0 [ 190.964551] __x64_sys_mount+0x157/0x1c0 [ 190.968610] ? ksys_mount+0x3d0/0x3d0 [ 190.972403] do_syscall_64+0x15b/0x230 [ 190.976291] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 190.981475] RIP: 0033:0x455e29 [ 190.984651] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 191.003910] RSP: 002b:00007feed0004c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 191.011621] RAX: ffffffffffffffda RBX: 00007feed00056d4 RCX: 0000000000455e29 [ 191.018880] RDX: 0000000020000600 RSI: 00000000200005c0 RDI: 0000000000000000 [ 191.026138] RBP: 000000000072bea0 R08: 0000000020000240 R09: 0000000000000000 [ 191.033395] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 191.040653] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000000 [ 191.047919] [ 191.047950] CPU: 1 PID: 7985 Comm: syz-executor1 Not tainted 4.18.0-rc4+ #24 [ 191.049549] Local variable description: ----ecode.i@p9_client_rpc [ 191.056736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.062940] Variable was created at: [ 191.062956] Disabling lock debugging due to kernel taint [ 191.072299] Call Trace: [ 191.076000] Kernel panic - not syncing: panic_on_warn set ... [ 191.076000] [ 191.081469] dump_stack+0x185/0x1e0 [ 191.094978] ? __should_failslab+0x278/0x2a0 [ 191.099429] should_fail+0x8a7/0xae0 [ 191.103178] __should_failslab+0x278/0x2a0 [ 191.107447] should_failslab+0x29/0x70 [ 191.111346] kmem_cache_alloc+0x13c/0xbb0 [ 191.115521] ? alloc_vfsmnt+0x7b/0xcf0 [ 191.119437] ? get_fs_type+0x348/0x9c0 [ 191.123340] alloc_vfsmnt+0x7b/0xcf0 [ 191.127076] ? try_module_get+0x6e/0x3f0 [ 191.131139] ? get_fs_type+0x348/0x9c0 [ 191.135059] vfs_kern_mount+0xaf/0x990 [ 191.138968] do_mount+0xd30/0x5310 [ 191.142515] ? copy_mount_options+0x9e/0x570 [ 191.146952] ksys_mount+0x32e/0x3d0 [ 191.150617] __x64_sys_mount+0x157/0x1c0 [ 191.154714] ? ksys_mount+0x3d0/0x3d0 [ 191.158540] do_syscall_64+0x15b/0x230 [ 191.162446] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 191.167649] RIP: 0033:0x455e29 [ 191.170846] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 191.190341] RSP: 002b:00007fcc2f2e0808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 191.198060] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000000455e29 [ 191.205332] RDX: 00000000004c2ee0 RSI: 00000000200000c0 RDI: 00000000004ebc65 [ 191.212604] RBP: 0000000000000000 R08: 00007fcc2f2e0820 R09: 0000000000000000 [ 191.219875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.227147] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000000000000 [ 191.234433] CPU: 0 PID: 7982 Comm: syz-executor7 Tainted: G B 4.18.0-rc4+ #24 [ 191.243010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.252388] Call Trace: [ 191.254980] dump_stack+0x185/0x1e0 [ 191.258613] panic+0x3d0/0x9b0 [ 191.261831] kmsan_report+0x2bf/0x2c0 [ 191.265648] __msan_warning_32+0x7d/0xe0 [ 191.269720] p9_client_rpc+0x194c/0x1dc0 [ 191.273804] ? p9_fd_create+0x5a5/0x670 [ 191.277795] p9_client_create+0x15a8/0x2110 [ 191.282141] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 191.287601] v9fs_session_init+0x329/0x2970 [ 191.291947] ? __kmalloc+0x147/0x370 [ 191.295700] ? v9fs_mount+0x96/0x11b0 [ 191.299514] v9fs_mount+0x107/0x11b0 [ 191.303247] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 191.308625] ? xfs_fs_commit_blocks+0xd80/0xd80 [ 191.313324] mount_fs+0x29b/0x780 [ 191.316816] vfs_kern_mount+0x222/0x990 [ 191.320806] do_mount+0xd30/0x5310 [ 191.324352] ? copy_mount_options+0x9e/0x570 [ 191.328780] ksys_mount+0x32e/0x3d0 [ 191.332422] __x64_sys_mount+0x157/0x1c0 [ 191.336492] ? ksys_mount+0x3d0/0x3d0 [ 191.340295] do_syscall_64+0x15b/0x230 [ 191.344198] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 191.349391] RIP: 0033:0x455e29 [ 191.352572] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 191.372428] RSP: 002b:00007feed0004c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 191.380229] RAX: ffffffffffffffda RBX: 00007feed00056d4 RCX: 0000000000455e29 [ 191.387499] RDX: 0000000020000600 RSI: 00000000200005c0 RDI: 0000000000000000 [ 191.394799] RBP: 000000000072bea0 R08: 0000000020000240 R09: 0000000000000000 [ 191.402068] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 191.409342] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000000 [ 191.417097] Dumping ftrace buffer: [ 191.420630] (ftrace buffer empty) [ 191.424325] Kernel Offset: disabled [ 191.427941] Rebooting in 86400 seconds..