[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 55.619915][ T26] audit: type=1800 audit(1574050599.280:25): pid=8714 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 55.648368][ T26] audit: type=1800 audit(1574050599.280:26): pid=8714 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 55.701946][ T26] audit: type=1800 audit(1574050599.290:27): pid=8714 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.12' (ECDSA) to the list of known hosts. 2019/11/18 04:16:47 fuzzer started 2019/11/18 04:16:48 dialing manager at 10.128.0.26:44591 2019/11/18 04:16:49 syscalls: 2566 2019/11/18 04:16:49 code coverage: enabled 2019/11/18 04:16:49 comparison tracing: enabled 2019/11/18 04:16:49 extra coverage: enabled 2019/11/18 04:16:49 setuid sandbox: enabled 2019/11/18 04:16:49 namespace sandbox: enabled 2019/11/18 04:16:49 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/18 04:16:49 fault injection: enabled 2019/11/18 04:16:49 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/18 04:16:49 net packet injection: enabled 2019/11/18 04:16:49 net device setup: enabled 2019/11/18 04:16:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/18 04:16:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 04:19:27 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) 04:19:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) syzkaller login: [ 224.102973][ T8886] IPVS: ftp: loaded support on port[0] = 21 04:19:27 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000000c0)) [ 224.303828][ T8889] IPVS: ftp: loaded support on port[0] = 21 [ 224.314308][ T8886] chnl_net:caif_netlink_parms(): no params data found [ 224.470338][ T8886] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.477455][ T8886] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.490188][ T8886] device bridge_slave_0 entered promiscuous mode [ 224.509667][ T8886] bridge0: port 2(bridge_slave_1) entered blocking state 04:19:28 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0x8008550e, 0x0) [ 224.517038][ T8886] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.526858][ T8886] device bridge_slave_1 entered promiscuous mode [ 224.630691][ T8886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.655161][ T8889] chnl_net:caif_netlink_parms(): no params data found [ 224.674712][ T8892] IPVS: ftp: loaded support on port[0] = 21 [ 224.683735][ T8886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.794006][ T8889] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.801426][ T8889] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.809817][ T8889] device bridge_slave_0 entered promiscuous mode [ 224.820273][ T8886] team0: Port device team_slave_0 added 04:19:28 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x33, 0x6, 0x0, {0x0, 0x0, 0xa, 0x0, '/dev/cuse\x00'}}, 0x33) [ 224.843591][ T8895] IPVS: ftp: loaded support on port[0] = 21 [ 224.852012][ T8889] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.866071][ T8889] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.874607][ T8889] device bridge_slave_1 entered promiscuous mode [ 224.883649][ T8886] team0: Port device team_slave_1 added [ 224.969167][ T8889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.031778][ T8886] device hsr_slave_0 entered promiscuous mode [ 225.068744][ T8886] device hsr_slave_1 entered promiscuous mode [ 225.117929][ T8889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 04:19:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @random="029cc898945b", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3580], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x4100}, @mcast2}}}}}}}, 0x0) [ 225.161410][ T8897] IPVS: ftp: loaded support on port[0] = 21 [ 225.290544][ T8889] team0: Port device team_slave_0 added [ 225.317395][ T8886] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 225.373873][ T8889] team0: Port device team_slave_1 added [ 225.380150][ T8892] chnl_net:caif_netlink_parms(): no params data found [ 225.400312][ T8886] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 225.452332][ T8886] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 225.513396][ T8886] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 225.586550][ T8900] IPVS: ftp: loaded support on port[0] = 21 [ 225.662416][ T8889] device hsr_slave_0 entered promiscuous mode [ 225.708850][ T8889] device hsr_slave_1 entered promiscuous mode [ 225.738495][ T8889] debugfs: Directory 'hsr0' with parent '/' already present! [ 225.797074][ T8892] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.805721][ T8892] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.813957][ T8892] device bridge_slave_0 entered promiscuous mode [ 225.826644][ T8892] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.834375][ T8892] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.842220][ T8892] device bridge_slave_1 entered promiscuous mode [ 225.862139][ T8892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.896881][ T8892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.994386][ T8895] chnl_net:caif_netlink_parms(): no params data found [ 226.018639][ T8892] team0: Port device team_slave_0 added [ 226.046796][ T8892] team0: Port device team_slave_1 added [ 226.061333][ T8889] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 226.121945][ T8895] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.130127][ T8895] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.137809][ T8895] device bridge_slave_0 entered promiscuous mode [ 226.147123][ T8895] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.154999][ T8895] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.162976][ T8895] device bridge_slave_1 entered promiscuous mode [ 226.181790][ T8889] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 226.253036][ T8889] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 226.301728][ T8889] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 226.379609][ T8895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.391189][ T8895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.402614][ T8897] chnl_net:caif_netlink_parms(): no params data found [ 226.511417][ T8892] device hsr_slave_0 entered promiscuous mode [ 226.559018][ T8892] device hsr_slave_1 entered promiscuous mode [ 226.608526][ T8892] debugfs: Directory 'hsr0' with parent '/' already present! [ 226.673138][ T8895] team0: Port device team_slave_0 added [ 226.688139][ T8895] team0: Port device team_slave_1 added [ 226.732246][ T8897] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.739526][ T8897] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.747358][ T8897] device bridge_slave_0 entered promiscuous mode [ 226.757651][ T8897] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.764812][ T8897] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.772793][ T8897] device bridge_slave_1 entered promiscuous mode [ 226.806154][ T8886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.826873][ T8900] chnl_net:caif_netlink_parms(): no params data found [ 226.836696][ T8892] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 226.891002][ T8892] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 226.961401][ T8892] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 227.015114][ T8892] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 227.079221][ T8897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.144086][ T8895] device hsr_slave_0 entered promiscuous mode [ 227.201079][ T8895] device hsr_slave_1 entered promiscuous mode [ 227.268450][ T8895] debugfs: Directory 'hsr0' with parent '/' already present! [ 227.291907][ T8897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.313396][ T100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.322657][ T100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.332656][ T8886] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.384640][ T8889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.393260][ T100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.403433][ T100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.412256][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.419519][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.428710][ T100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.438642][ T8897] team0: Port device team_slave_0 added [ 227.456014][ T8900] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.464332][ T8900] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.472358][ T8900] device bridge_slave_0 entered promiscuous mode [ 227.493220][ T8897] team0: Port device team_slave_1 added [ 227.506559][ T8900] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.520618][ T8900] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.530290][ T8900] device bridge_slave_1 entered promiscuous mode [ 227.547552][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.558769][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.567095][ T8891] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.574207][ T8891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.582530][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.591671][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.599609][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.607227][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.618255][ T8889] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.628398][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.637372][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.645936][ T8901] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.653021][ T8901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.669446][ T8895] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 227.724951][ T8900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.737066][ T8900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.750381][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.758345][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.766928][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.775557][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.784470][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.793404][ T8901] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.800486][ T8901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.808568][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.816758][ T8895] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 227.865722][ T8895] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 227.936362][ T8895] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 228.001308][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.010393][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.020892][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.090602][ T8897] device hsr_slave_0 entered promiscuous mode [ 228.149685][ T8897] device hsr_slave_1 entered promiscuous mode [ 228.188614][ T8897] debugfs: Directory 'hsr0' with parent '/' already present! [ 228.199006][ T8900] team0: Port device team_slave_0 added [ 228.206849][ T8900] team0: Port device team_slave_1 added [ 228.220444][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.230401][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.239303][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.248139][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.285105][ T8886] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.296116][ T8886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.320640][ T100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 228.329733][ T100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.338646][ T100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.347112][ T100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.355610][ T100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 228.363950][ T100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.374278][ T100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.420116][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 228.432887][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.446823][ T8892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.522652][ T8900] device hsr_slave_0 entered promiscuous mode [ 228.569644][ T8900] device hsr_slave_1 entered promiscuous mode [ 228.618401][ T8900] debugfs: Directory 'hsr0' with parent '/' already present! [ 228.640683][ T8895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.647584][ T8897] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 228.701272][ T8897] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 228.752185][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.760049][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.772615][ T8892] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.785268][ T8886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.796530][ T8889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.811052][ T8889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.822059][ T8897] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.870599][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.881981][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.889932][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 228.898321][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.935878][ T8895] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.957188][ T8897] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 229.020758][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.029515][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.037819][ T8901] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.044944][ T8901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.052906][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.061974][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.070520][ T8901] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.077639][ T8901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.085304][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.093047][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.130101][ T8889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.137596][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.153290][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 04:19:32 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) [ 229.177171][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.193204][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.204202][ T8901] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.211334][ T8901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.226932][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.236103][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.258215][ T8901] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.265396][ T8901] bridge0: port 2(bridge_slave_1) entered forwarding state 04:19:32 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) [ 229.282363][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.296188][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.307241][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.320644][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 04:19:33 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) [ 229.368586][ T8900] netdevsim netdevsim5 netdevsim0: renamed from eth0 04:19:33 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r0, 0x0, 0x7fffffff) [ 229.411346][ T8900] netdevsim netdevsim5 netdevsim1: renamed from eth1 04:19:33 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r0, 0x0, 0x7fffffff) [ 229.477363][ T8900] netdevsim netdevsim5 netdevsim2: renamed from eth2 04:19:33 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r0, 0x0, 0x7fffffff) [ 229.525302][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.536976][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.561321][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 04:19:33 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6c2b) sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff) [ 229.570329][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.578977][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.587744][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.620180][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.641666][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.654903][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.663745][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.672420][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.680773][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.697624][ T8892] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.715574][ T8892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.738780][ T8900] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 229.772801][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.782816][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.796034][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.804721][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.813218][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 229.821929][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.831095][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 229.842633][ T8895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.854766][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 229.876791][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 229.885309][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.893838][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.901368][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 04:19:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) [ 229.931839][ T8892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.966324][ T8895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.983439][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.994179][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 04:19:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}]}) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x5c94, 0x200040) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x8, 0x0, 0x5, 0x1, 0x0, 0x1, 0x820, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, @perf_config_ext={0x2, 0x7fffffff}, 0x8, 0x800, 0x1, 0x5, 0x400, 0x20, 0x3}, r1, 0x1, r2, 0x1) [ 230.262424][ T8900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.292726][ T8897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.304807][ T8944] FAT-fs (loop2): bogus number of reserved sectors 04:19:34 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6c2b) sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff) [ 230.312024][ T8944] FAT-fs (loop2): Can't find a valid FAT filesystem [ 230.344446][ T100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.365297][ T100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.374885][ T100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.389450][ T100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.401673][ T8900] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.456322][ T8897] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.490932][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.506865][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.544555][ T8891] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.551729][ T8891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.569894][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.578886][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.587316][ T8891] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.594445][ T8891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.623474][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.632440][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.641322][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.650549][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.657588][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.665840][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.674470][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.683163][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.691490][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.698567][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.706219][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.715156][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.723901][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.732685][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.741172][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.749675][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.761050][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.768948][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.776647][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.794405][ T8957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.803833][ T8957] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.812451][ T8957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.822056][ T8957] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.834277][ T8897] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.845885][ T8897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.861933][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.870043][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.881652][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.891313][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.900680][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.919577][ T8900] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.930127][ T8900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.944478][ T100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.954364][ T100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.964060][ T100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.972617][ T100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.992810][ T100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.016727][ T8957] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 231.024943][ T8957] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 231.035485][ T8957] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 231.043003][ T8957] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 231.054701][ T8897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.067542][ T8900] 8021q: adding VLAN 0 to HW filter on device batadv0 04:19:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x0, 0x0) write$vnet(r1, &(0x7f0000000380)={0x1, {&(0x7f0000000280)=""/174, 0xae, &(0x7f0000000340)=""/43, 0x0, 0x1}}, 0x68) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000040)={@loopback, @local, 0x0}, &(0x7f0000000080)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x50, 0x1a, 0x400, 0x70bd26, 0x25dfdbfd, {0x1c, 0x80, 0x30, 0x3, 0xfd, 0x0, 0x101, 0x6059c9ad79b5468c, 0x1000}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x6, 0x5, r4}}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x40}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x20, 0x81, r7}}, @RTA_VIA={0x14, 0x12, {0x5, "9ca104dd5be6f9b8b3b3f05c6d43"}}]}, 0x50}}, 0x0) 04:19:35 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6c2b) sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff) 04:19:35 executing program 3: 04:19:35 executing program 2: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000000201010000409fbc22051e48ac6f26533bacf9d9ee3c6099d5d7991543481007d01318bd86b749abe586605c31ad30263f2a43b7241f434be773f31f395fc116fa8779ee15c485591260819317a37bf763cbc7475a0e89a2cc1234ff91bc905059cd0976fcd58561e520a9cd824226a4fe34b9a19f24f70dd8f4c1cc742138d0cec58ef6449bf1e7c7174a918dc13c62958ea88c4a68e0d22b2f4dda9d8154b331f729e6a4a3395b6ebfc94cf4d08876543cde0c0a1146f43d93528e58055ee0dfd5b1e4a5e91140a28183412e5808a34c397e049d5dc4d75fc14b2fc039d081b9a594f541fb004201e83fca"], 0x24}}, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x10941, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000180)=0x3) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x3, 0x100) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x4, {0x7fffffff, 0x1, 0xffffffff}}) r4 = socket(0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000001b40)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x2, 0x80, 0x8, r5}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e20, 0xd5, @loopback, 0x3}}}, 0x84) r6 = socket$inet(0x10, 0x4, 0x81) getsockopt$sock_timeval(r6, 0x1, 0x92, &(0x7f0000000000), &(0x7f0000000080)=0x10) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000020a07031dfffd946ff20c0020200a0009000200021d8568031baba20400ff7e", 0x24}], 0x14}, 0x0) 04:19:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000240)={0x49e}, 0x10) write(r1, &(0x7f0000000000)="1c0000001e009b8a14e5f407000904000a0000000000000001000000", 0x1c) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) getsockopt(r2, 0x7b, 0x200, &(0x7f0000000600)=""/108, &(0x7f0000000680)=0x6c) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000580)) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000700)={0x980000, 0x5, 0x283b, [], &(0x7f00000006c0)={0xba0bae, 0x6c9, [], @value64=0x100}}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='\xff\x00', 0xfffffffffffffe9c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) msgsnd(0x0, &(0x7f00000000c0)={0x2, "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"}, 0x401, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x4, @local, 0x6}, 0x1c) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000500)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}) msgsnd(0x0, &(0x7f0000000040)={0x1, "ad48b7b14f4d7e9754ff996c31a503f523d06efc21f53b09279e543f58651db67ca253170d931bc1774a38940c15f5e5fd52e95c28dd"}, 0x3e, 0x1000) getrlimit(0x8, &(0x7f00000005c0)) 04:19:35 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x3ad) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x14, &(0x7f0000000200)={r1, @in6={{0xa, 0x0, 0x0, @rand_addr="b702d2cefb400dffeb6bc2b0d0c9324a"}}}, &(0x7f0000000300)=0x100) 04:19:35 executing program 5: r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x2000000000000000, 0x1) bind$alg(r1, 0x0, 0x40bc85aa4183bf84) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) socket$alg(0x26, 0x5, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x5) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x50084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x8689a091295604ee, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = creat(0x0, 0x0) uselib(&(0x7f0000000080)='./bus\x00') io_setup(0x1ff, &(0x7f00000004c0)=0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$usbmon(&(0x7f0000000580)='/dev/usbmon#\x00', 0x2, 0xc00) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_SELECTION(r7, 0xc040563e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x4, {0x7fffffff, 0x1, 0xffffffff}}) r8 = socket(0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000001b40)={r9}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x2, 0x80, 0x8, r9}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r9, 0xfffc, 0x0, 0x200, 0x2}, &(0x7f0000000240)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={r10, 0xe803}, 0x8) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000003c0)="2c872e005e1c3e84b16b21a1aa2103a819c5863dc78798ca41ef2f7f1ad3e752ba20de2bce2a2e0707e7a65364bc6c57f0e5773588d745ee9cec1f12e413eb8d7cadbfa7927050780d8287d2345c5d711479b39908c21fe7595e307ca4a0a4ee136655d96574e57fa36a0db17ce4d93691aafcf5ef22822d551053b480ebd1c854d8cd188b8014e629a3044c56d76adb65b3ab7d77f1b8f5b89f6625a3d85a3c037af6c9ce316f96addefb2e96dfe06cac783b17ced655524b1637fe1c0dd99941", 0x10386}]) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x1, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) r11 = creat(0x0, 0x0) fallocate(r11, 0x4000000000000010, 0x2, 0x0) r12 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) dup3(r12, r3, 0xc0000) 04:19:35 executing program 3: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nfc={0x3b, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)="c109000400000000012f001aac141412e0", 0x11}], 0x1}, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r2, 0x0, 0x35, 0x61862f0c, 0xd3f}) 04:19:35 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000400)={0x3ff, 0x4, 0x4, 0x40000, {r1, r2/1000+30000}, {0x5, 0x8, 0x4, 0x5a, 0x4, 0x3f, "55794512"}, 0x6, 0x4, @offset=0x8, 0x4}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r3, r4) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xc40, 0x0) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4') ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r6 = msgget$private(0x0, 0x10) msgctl$IPC_RMID(r6, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) 04:19:35 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r0, r0, 0x0, 0x6c2b) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffff) 04:19:35 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x400, 0x1401, 0x4000000000401}, {0x60}, {0x6}]}, 0x10) 04:19:35 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r0, r0, 0x0, 0x6c2b) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffff) [ 231.688302][ C1] hrtimer: interrupt took 46841 ns 04:19:35 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r0, r0, 0x0, 0x6c2b) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffff) 04:19:35 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESOCT], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000100)={'nat\x00', 0x0, 0x3, 0x5, [], 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f00000000c0)=""/5}, &(0x7f0000000180)=0x78) 04:19:35 executing program 3: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="696e746567726974792c6eef696e746567726974792c00"]) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) r1 = dup(0xffffffffffffffff) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x8) ioctl$KVM_SMI(r0, 0xaeb7) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000080)=0x1f, 0x4) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='u:object_r:app_data_file:s0:c512,c768\x00', 0x26, 0x4) prctl$PR_MCE_KILL(0x21, 0x2, 0x7) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000180)=0x4) 04:19:35 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x3c0a, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000)={r0, 0x2d, 0x34}, &(0x7f0000000040)=ANY=[@ANYBLOB='enc=raw hash=_ha3-256-ce\x00'/77], &(0x7f0000000100)="0ae1395e6a7e669d1eaf4a3cd48a538c46e4311b78960bc772af0079b38cf81528f9a82d530cdc0baba73d0d31", &(0x7f0000000140)=""/52) r1 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000240)=0x9) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0xfd63, 0x359180) openat$cgroup_procs(r4, &(0x7f0000000300)='cgroup.procs\x00', 0x48, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000002c0)={0x8, &(0x7f0000000280)=[{0x3, 0x1}, {0x4, 0x82}, {0x7f, 0x8001}, {0x8f89, 0x6}, {0x7ff, 0x80}, {0x0, 0x7}, {0x0, 0x1f}, {0x5f6, 0x6}]}) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="0200eeffffff0100c1eeff07ee0040000000000000000000000000000000000000004200010000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) [ 232.091469][ T9025] encrypted_key: insufficient parameters specified 04:19:35 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x5, 0x81) r1 = getpgrp(0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x34000, 0x0) r3 = socket(0xa, 0x3, 0x8) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000380)=@v2={0x2, @aes256, 0xfe3131fd9787595b, [], "3d82c4edfda59b7fb562df781371c193"}) r4 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) r5 = add_key$user(&(0x7f00000002c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=0x0) keyctl$chown(0x4, r5, 0x0, r6) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r6, r7) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) r9 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x3c0a, r9) r10 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r9, &(0x7f0000000440)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'bridge0\x00\x00\x01\x00', 0x20, 0x2}, 0x36, r10) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r11 = gettid() waitid(0x83b895581628fca4, r11, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r8, @ANYRESDEC=r11]], 0xfffffffffffffe56}}, 0x20004850) recvfrom$x25(r0, &(0x7f0000000100)=""/105, 0x69, 0x2000, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x0, {0xa, 0x4e23, 0xba, @empty, 0xeb}, r8}}, 0x38) waitid(0x1, r1, 0x0, 0x8, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0) 04:19:35 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) 04:19:35 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000400)={0x3ff, 0x4, 0x4, 0x40000, {r1, r2/1000+30000}, {0x5, 0x8, 0x4, 0x5a, 0x4, 0x3f, "55794512"}, 0x6, 0x4, @offset=0x8, 0x4}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r3, r4) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xc40, 0x0) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4') ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r6 = msgget$private(0x0, 0x10) msgctl$IPC_RMID(r6, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) 04:19:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x0, 0x61c201) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffff}, {0xa, 0x4e24, 0xe0c00000, @loopback, 0x100}, 0xf0cb, [0xfffffb29, 0x1, 0x7a73, 0x10000, 0x1, 0x80000001, 0x3ff, 0x5]}, 0x5c) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="50d6f80010ff000600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000800200002000000280012000c0001007665746800000000180002000b02010003000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) 04:19:36 executing program 4: mkdir(0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000140)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xfffffffffffffc57, 0x0, 0x0, 0x0, 0x274}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x100, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x18a, 0x0, 0x0, 0x2f95a3c3cb55ab4b) acct(&(0x7f0000000080)='\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0) getpid() perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) [ 232.324731][ T9032] jfs: Unrecognized mount option "nïintegrity" or missing value [ 232.354240][ T9029] ldm_validate_privheads(): Disk read failed. 04:19:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000560007031dfffd946f610500400000006700000077000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0xe2}, 0x0) accept4$tipc(r2, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x80000) [ 232.488504][ T9029] Dev loop1: unable to read RDB block 1 [ 232.494872][ T9029] loop1: unable to read partition table [ 232.502453][ T9029] loop1: partition table beyond EOD, truncated [ 232.509297][ T9029] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 232.583193][ T9058] bridge0: port 3(gretap0) entered blocking state 04:19:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0808000000000000001071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000000000000"], 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="23213f2c2ae6696c65300e"], 0x10094) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0), 0xc) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="798e938ccff53dd335aedc392e3c88052e4c67d93d641c750b1591c8e9b4a315732930925a709fccc42d2d948a6eb90164a5c5b0a6b90ed04e2a8944724fa26ebdab5a8e641b8fbd7e74748a9744c40a72c191fd1ed76df6192bc77448c94c3d785b42388adcd7dc6027ce70e1635d7928c6195edc0bdc987506c60ed96d4c47c0d8a218dd66cb46a4bbd4bc10626d06a845f019b1f60b88d2914f0c718cce2e7a65c0301e42b2f7ec2303d99705ec5630c6"], 0x1a000) close(r1) [ 232.633774][ T9058] bridge0: port 3(gretap0) entered disabled state [ 232.663285][ T9025] encrypted_key: insufficient parameters specified 04:19:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-monitor\x00', 0x420002, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000006c0)={0x8, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}]}) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x87b8e000) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)={0x68, 0x0, 0x5, 0x0, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xf00, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r3 = dup2(r1, r2) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000180)="8907040400", 0x5) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0xfea3) recvmmsg(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f0000000300)=@x25={0x9, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000400)=""/97, 0x61}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f0000000500)=""/110, 0x6e}], 0x3, &(0x7f0000000580)=""/77, 0x4d}, 0x4}, {{&(0x7f00000009c0)=@rc, 0x80, 0x0}, 0x6}, {{&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000c00)=""/71, 0x47}], 0x1, &(0x7f0000000cc0)=""/220, 0xdc}}], 0x3, 0x100, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000940)={&(0x7f0000000700)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/221, 0xdd}, {&(0x7f00000008c0)=""/20, 0x14}], 0x2, &(0x7f0000000a40)=""/168, 0xa8}, 0x100) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000ec0)={'security\x00', 0x86, "b4bd6318603506368d0c5a57909eb2778a803c80bad7d52c28e26dd2053dba5241104ae3ec68867f6d14f468a56bdd918bc07910526c1cfbc929272931b7436f3521e2763eb28c9e91aac58a2e0795163b5330f7cb7eea2dd1fcfe71ef3d6a7ec525675da8294b92a1eb8cdd7ff4abcfe64d7de774d15f89edcb1109661949e383a763b08a85"}, &(0x7f0000000f80)=0xaa) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xc40, 0x0) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) msgget$private(0x0, 0x10) 04:19:36 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) [ 232.764710][ T9058] device gretap0 entered promiscuous mode [ 232.789215][ T9058] bridge0: port 3(gretap0) entered blocking state [ 232.796011][ T9058] bridge0: port 3(gretap0) entered forwarding state 04:19:36 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) 04:19:36 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6c6f77a88875bb723d2e3a66696c6530"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x7) setreuid(0x0, r3) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) 04:19:36 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) [ 233.027106][ T9083] overlayfs: unrecognized mount option "low¨ˆu»r=.:file0" or missing value 04:19:36 executing program 5: syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000007c0)={0x298, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) fcntl$setpipe(r4, 0x407, 0x100000000000000d) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$inet_dccp(0x2, 0x6, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:19:36 executing program 1: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f00000005c0)=""/223, 0xfc61) 04:19:36 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x800000000000a) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x1, 0x198, [0x20000580, 0x0, 0x0, 0x200005b0, 0x200005e0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x210) 04:19:36 executing program 2: syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x3008400, 0x0) 04:19:37 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x5, 0x10000) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f00000001c0)={0x2, 0x1, 0x800, 0x73, 0x4, 0xb}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) recvfrom$llc(r1, &(0x7f0000000280)=""/62, 0x3e, 0x40000140, &(0x7f00000002c0)={0x1a, 0x100, 0x1, 0x0, 0x0, 0x8, @local}, 0x10) symlinkat(&(0x7f0000000000)='./file1\x00', r4, &(0x7f0000000200)='./file0\x00') ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x102}) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9e34, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000300)=""/182, 0xb6) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000000c0)={'eql\x00\x00\a\xa9[\x00', @ifru_mtu=0x1}) restart_syscall() [ 233.293894][ T9097] x_tables: eb_tables: redirect.0 target: invalid size 8 (kernel) != (user) 0 04:19:37 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) 04:19:37 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = geteuid() mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='overlay\x00', 0x84000, &(0x7f0000000380)={[{@nfs_export_on='nfs_export=on'}, {@index_on='index=on'}], [{@subj_role={'subj_role', 0x3d, 'vboxnet0'}}, {@uid_eq={'uid', 0x3d, r0}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x31, 0x37, 0x37, 0x65, 0x64, 0x63, 0x66], 0x2d, [0x63, 0x30, 0x34, 0x63], 0x2d, [0x8, 0x39, 0x853d014f3ffc0d4d, 0x66], 0x2d, [0x32, 0x7f, 0x66, 0x65], 0x2d, [0x62, 0x36, 0x64, 0x54, 0x38, 0x8b, 0x38, 0x62]}}}]}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42a044, 0x98) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0, 0x7}, &(0x7f00000000c0)=0x8) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2000, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000280)={r6, @in6={{0xa, 0x4e21, 0x2, @mcast2, 0x8000}}, 0x3, 0xc88d, 0x8, 0x2, 0x20}, &(0x7f0000000100)=0x98) sendmmsg(r3, &(0x7f0000005c00), 0x40000000000037b, 0x0) 04:19:37 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="73d5abe237eb0f64be744b701190c9c7a59d30eb26", 0x15}], 0x1}}], 0x1, 0x8050) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f00000001c0)={{0x60, 0x5, 0x9, 0x1, 0x7, 0xfc}, 0x0, 0x3, 0x6}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) fchdir(r2) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_SELECTION(r7, 0xc040563e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x4, {0x7fffffff, 0x1, 0xffffffff}}) r8 = socket(0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000001b40)={r9}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x2, 0x80, 0x8, r9}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)=ANY=[@ANYRES32=r9, @ANYBLOB="e1000000547e81c1af32adf86d116c6669bfc25a28312355890860200f9a6e2fb773b78c3ce8130ee8dbb7c1d304a5a4fbe6ff9ec8d3a3f0dff224e69ed9000bf2b98c6ba98c84168cbe887f7694a9992f9e3700df09f83ea4ed4cac98237ebff3e993bfaed4763a36b0a6024efeeca529c1db20688b706ba612eeac6d65f59f1e118213db5efef1707fad44faaadd17744aefdaa6656f66372d546e59145778191a4530b0c55aa7c69c27dfa302d6eb2b379306210c1905a894fbf047458fe9191fdc0d247de3d94a4e9bb77880915fcc8001d0dc012fd2dee02facbbd98aa8d04224fe"], &(0x7f0000000040)=0xe9) openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r10, 0x84, 0x20, &(0x7f0000000080)=0xfffff8e7, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e24, @local}, 0xffffffffffffffa5) sendto$inet(r4, 0x0, 0x282, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 04:19:37 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400302, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'\x00', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@default_permissions='default_permissions'}]}) 04:19:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @dev={0xac, 0x14, 0x14, 0x19}}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e22, 0x0, @loopback}], 0x2c) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) [ 234.327400][ T9152] overlayfs: missing 'lowerdir' 04:19:38 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x5, 0x10000) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f00000001c0)={0x2, 0x1, 0x800, 0x73, 0x4, 0xb}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) recvfrom$llc(r1, &(0x7f0000000280)=""/62, 0x3e, 0x40000140, &(0x7f00000002c0)={0x1a, 0x100, 0x1, 0x0, 0x0, 0x8, @local}, 0x10) symlinkat(&(0x7f0000000000)='./file1\x00', r4, &(0x7f0000000200)='./file0\x00') ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x102}) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9e34, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000300)=""/182, 0xb6) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000000c0)={'eql\x00\x00\a\xa9[\x00', @ifru_mtu=0x1}) restart_syscall() 04:19:38 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x6, 0x5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x4, 0x4, 0x7fffffff, 0x4000, r2}) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) fchdir(r6) syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x4410, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 04:19:38 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10, r0, 0xb) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0xafd6264b389dc6d1, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48084}, 0x2204c080) r2 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x1, 0x2000) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000200)) 04:19:38 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) 04:19:38 executing program 2: r0 = socket$packet(0x11, 0x6, 0x300) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r4, 0xc0045520, &(0x7f0000000380)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0xe8, 0x26, &(0x7f00000000c0)="7199f9bd77c238ebc2c86a042461735d4d378ced57d67cd22eda9641daef141788508d28f6a2f99447ad04a517e06e240e949ae64ff9dc76a080f30be056e17ce4b565c503c4988bce95c79465df7bb6d08b92ab9c35e5e621d9c1907f283f04c2551e69e1d767299355dc57a8d8b1e11e54d45a028210a3909422a256d873b0adb5d6e380679d9cd1e3d8ee9527cd6b8b253da497fdeb2bc746db8fa580a4023df446c64721b60332e0e6b4e47701f92703b0b42382c5779a3a239904d8501483c237a136a6d3c0321301dcdc0c1abbbb85bbc7fd8bb7bb945b805d7c9255aa128142e19de6ce8a", &(0x7f00000001c0)=""/38, 0x78e, 0x0, 0x4b, 0xb9, &(0x7f0000000200)="cf1b7bf426367dfc90305eb016dc9bb6e5bc65db45b7ea01b05ee43d8c11357a102b7d87a68fe17ca1c28e9a31cc838bee2364d90f64e28854890c9b8c21b7aba93c138bfcbd333679185f", &(0x7f0000000280)="d4a307efc400123425a56c85986b5600aa10bb4d7e31eae089f7e05b71a2bd0a0704dea245a3ca668b26d97027aedf807ab677a944e9f2771fada5ef59c0272e67b6fd49bedd930fe9eb35e64aac3e5f1586a2ba72846a2535b694883b1357c139afd842272b76eeee6bfe5287157f1e85a636264d346823972c03be150dc5aac8041a5a2b4f248987db3734404d0e24a4a7d70866b8c5f20d19c23b38bed4b8f6119f9560b4877d6fb1914c3fa9ca905d9d12f0e0a0c988f4"}, 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000040)={0x10001, 0x1, {0x2, 0x1, 0x6, 0x2}}) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) 04:19:38 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x3, 0xfffffffffffffff7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000400)=0x2) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r0) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f0000000740)='\x00\x00\x00\x00\x9a\xff\x7f\x00\x00\x00\x00\x00\x00B<\xfe\xf8\xbd\x84u\xc1\xef\x8d.\xd8\f\xe9]\xbcDy\xd3?\xd0\x9c\x10\x98Q4\x04\xb7\x9e\xf3\xd4\xb5.B\xef\x9e\xa9\xf8o\xf9\x10[tv\xc4\xc4\xe4\xc1\xddW\xec\tyG\xbe\xc3\xa9V\xd8\x1c\xa4\xe1%\xf5\x06O\xc3\xe7\xeb\x14_\xac\x038\xfd\xa7\x00\xb8\xd2\xc09\x82\x8c;\x1d\xfeq\xc9\xc2KOM\xea\x1e\xbc-\xca[\xd7+[\x88\xc7$}\x03\n\xea\xb7\xcf5\xebZ\xef\xa2\xf6\xbe+r9\x8a\x0f=\xfc\xc7\xc8j\x0e\xd0\xf5r\x02\xa3\xf14qD/\xf7{H\x89N\x14\xa8#\xd9#Dn\x82\x83\xf3\xaf\xf2\xe2\xd5\x94\x10,~\xa3\x0f\xf5\xd9\xd5\x80E\x8a\x8c\xea\x81\xd5o\xc4\xaf\xae\xee6\x95}d\xd5P\xec \xd1\xc7\x85\'P2C\x90\x04g\xe7\x04\x0e\xb0\x84\x96:V\x9bbW\xc9\xc4~\xbe\xf3\v\xf9\xe8\x11\xf9\x10\x91\n\xef', 0x48, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r7 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) openat$cgroup_procs(r7, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_SELECTION(r9, 0xc040563e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x4, {0x7fffffff, 0x1, 0xffffffff}}) r10 = socket(0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r12 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r12, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000380)={0x7, 0x0, 0x1, 0xbdf}) ioctl$DRM_IOCTL_SG_ALLOC(r12, 0xc0106438, &(0x7f00000003c0)={0xffffffffffffffff, r13}) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000001b40)={r11}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x2, 0x80, 0x8, r11}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000080)={r11, 0x4fe, 0x0, 0x9fa7, 0x8}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={r14, 0x4c, &(0x7f0000000180)=[@in={0x2, 0x4e20, @rand_addr=0x200}, @in6={0xa, 0x4e22, 0x9, @mcast1}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000240)=0x10) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000000)) 04:19:38 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) [ 234.760639][ T9178] FAT-fs (loop5): bogus number of reserved sectors [ 234.798844][ T9179] : renamed from eql [ 234.803230][ T9178] FAT-fs (loop5): Can't find a valid FAT filesystem 04:19:38 executing program 1: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0xcbc48344982d0d04) getpid() sched_setscheduler(0x0, 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x6, 0x4, 0x202, 0x70bd25, 0x25dfdbfe, {0xe, 0x0, 0x8}, [@generic="12630f873113b4f38db2f2bfb0ab463b50fde0f6c9b2", @generic="18d59d0fe9eb15848508f5a34fcd66dd6bb2982e4f2c607e2899a8bafcae5bfb7d63520006014fadf8fd6fa7eb950eca22b09d6fdcbe7315361187ac53482663f9", @generic="536d7af0296b81e81bc3ae72f4"]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x80c2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={@rand_addr="dcd802aab2b2de2cce8821045fda9ee3", 0x34, r3}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x40000000) 04:19:38 executing program 4: r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000080)=0x3b9) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='hfsplus\x00=\x94\xfa\xe2\xf2\x95i*\xf2k\x8bk\xf0#\xd7\xc0\xab@\xf6\xf2\x8f\nf0xffffffffffffffff}, 0x800) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x1}}, 0x15) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) syz_open_dev$vcsn(0x0, 0x8, 0x10000) ioctl$CAPI_CLR_FLAGS(0xffffffffffffffff, 0x80044325, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x8, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@empty, @multicast2, 0x0}, &(0x7f0000000280)=0xc) connect$packet(r4, &(0x7f00000002c0)={0x11, 0x10, r5}, 0x14) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 04:19:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$sock_proto_private(r4, 0x89e6, &(0x7f0000000200)="60a668ed7d97e3ff6d1b14b97488d8f53736494512a15916298a38cb6cbf43a049afe15a0840d90a0da448a7718b1dff9e57bf6b1bb44689a9227b00302a073b403c20de11888a60e69ddc802d78a538ef9319e22b14459efa75cb6b7ad1525e0b3de34cc2044160b2d800c26d57318b1fca4a8f97f825ada5d3e7a9be66e203f90f1033ecaab730") r5 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) recvmmsg(r6, &(0x7f0000007e00), 0x3e67b46bfa03a7, 0x800021c1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', {0x2, 0x4e23, @multicast1}}) [ 235.272010][ T9220] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 04:19:39 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000003000/0xc000)=nil, 0xc000, 0xc) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)=0x0) rt_sigqueueinfo(r4, 0x21, &(0x7f00000001c0)={0x41}) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x3c0a, r3) r5 = add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="2aabab16d740ba3d7da39c72db4b30107f69d7f8133e96090ced0488ed0ce6462d8b9d7041f6cf3fc009dd5b7c3b455f06006b90802383374d840c874889f7cb64fb0444a4566d58126e812945ae02ae13567dd336361bcb70dad432dce25e55", 0x60, r3) r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x3c0a, r6) keyctl$negate(0xd, r5, 0x3, r6) 04:19:39 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) 04:19:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgrp(0x0) ptrace$getregset(0x4204, r2, 0x200, &(0x7f0000000000)={&(0x7f0000000180)=""/90, 0x5a}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x1, 0xf8) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000180007841dfffd946f610500020081001f13ff0604000800080016000400ff7e280000001100ffffba16a0aa1c090000000000001200000000001dfd2cf2df1df2d9015d00eff24d", 0x4c}], 0x1}, 0x0) 04:19:39 executing program 1: ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) pipe(0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x101, 0x101000) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syncfs(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400220003010000000000000000000000000000c41148d78e6877441beaf842ff4829e354afd5dc424ae3fbcfbe00b7664be01b3aba2340c1e4b8edafb34a85de826297b7111a7b0137d8136c0ef9cc061e0890fef861d550dfded24e17bec75e19369c50be244463e345b3b3e16e048bdc40c51ba5d1b35b5620c4"], 0x14}}, 0x0) 04:19:39 executing program 4: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0xfffffffffffffffe, 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x30005, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f00000000c0)={{0x0, 0x0, @reserved="77a2b16e9f7db8ebabd3421837fded3bd8049a0ab20c93ef152507fde82fd578"}}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, 0x0, 0x0) 04:19:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f0000000040)=0x1000) 04:19:39 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) 04:19:39 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ff47496516824690f0eb6fdf"], 0x1) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) getpeername$ax25(r4, &(0x7f0000000100)={{0x3, @netrom}, [@netrom, @bcast, @netrom, @rose, @remote, @bcast, @bcast, @rose]}, &(0x7f0000000040)=0x48) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x600, 0x4004400}) 04:19:39 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7fffffff) [ 235.968500][ T7] TX() has been purged, node left! 04:19:40 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0, r0}, 0x2ce) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0) 04:19:40 executing program 3: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0xbd, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x660c, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x40, 0x0, 0x6, 0xfd, 0x0, 0x0, 0x0, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x62f}, 0x40, 0x8000, 0x2, 0x2, 0x6, 0x9, 0x3}, r0, 0x10, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000}, 0x2c, 0x0}, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0xa, 0x8000000001, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000680)='&@[\x00') prctl$PR_SET_PTRACER(0x59616d61, r0) 04:19:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010003be0b6a8740e0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000c00010062726964676500001400020008000100000000000800030000000000"], 0x44}}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10000, 0x0) 04:19:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(0xffffffffffffffff) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x10000) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x1, 0x9, 0x3f, 0xffff, 0x6, 0xffffffffffffffff}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b0f, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x2e}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x399, 0x0, 0x0, 0xfffffffffffffd22) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:19:40 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7fffffff) 04:19:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x51, 0x5, 0x8, {0x8, 0x6}, {0x39e, 0x1}, @const={0x0, {0x36d4, 0x6, 0x7, 0x1ff}}}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000016c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000002c0)={0x2c, r2, 0x28d, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 04:19:40 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7fffffff) 04:19:40 executing program 5: ioprio_set$pid(0x2, 0x0, 0x7fff) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) utime(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000040)={0x80000001, 0x4e000000000}) sendfile(r0, r1, 0x0, 0x8001) 04:19:41 executing program 2: sysfs$2(0x2, 0x200, &(0x7f0000000140)=""/147) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0xca) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="e3", 0xfffffffffffffc35, 0x4044050, 0x0, 0x105) 04:19:41 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff) [ 237.418874][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 237.418891][ T26] audit: type=1804 audit(1574050781.070:31): pid=9305 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir662613867/syzkaller.5tHjkq/10/bus" dev="sda1" ino=16591 res=1 04:19:41 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f00000003c0)) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) unlinkat(r3, &(0x7f0000000200)='./file0\x00', 0x400) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f00000002c0)=0x87f) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x6c, r5, 0xd0f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x8]}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x60, 0x0, 0x55a7d9ef7b4128b1, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x84}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x78}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x60}, 0x1, 0x0, 0x0, 0x8002}, 0x2020) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400c006}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d634ebe17f4db16087", @ANYRES16=r5, @ANYBLOB="000428bd7000fcdbdf25130000003800060008000100010000000400020008000100e90d00000400020004000200080001002ca0000004000200040002000800010001000000680005000c0002000800010007000000340002000800040009000000080001000f000000080001000c000000080002000200000008000300f606000008000200ffffffff1c0002000800030008000000080001000000000008000300020000000800010065746800100004000c00010073797a31000000001c00090008000100040000000800010000800000080001000000000010000200080002000500000004000400"], 0xf0}, 0x1, 0x0, 0x0, 0x8001}, 0x240444d0) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) r6 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x3}, &(0x7f0000000280)=0x8) 04:19:41 executing program 5: ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0) readahead(0xffffffffffffffff, 0x7, 0x7) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x503200) socket$can_bcm(0x1d, 0x2, 0x2) fcntl$setlease(r2, 0x400, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) write$P9_RWSTAT(r0, 0x0, 0x0) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x100000000014b03e, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r4 = openat$capi20(0xffffffffffffff9c, 0x0, 0x100000000014b03e, 0x0) ioctl$CAPI_REGISTER(r4, 0x400c4301, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$binfmt_misc(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="730400313623ff26835c73b2d40f090dfc83586f753de71e648ee717e739a7758e496e968c61dff1a9dc55bacffc802398508266d0892ffd0e5264f8afd699a4998e52c67c2a4c10113941a7e038b39a57a24f0bd2a141e5de32f64abbff389ea40d25d7fa6e71a7fe33"], 0x8) r6 = fcntl$dupfd(r3, 0x0, r3) write$binfmt_misc(r6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000140)=0xf48, 0x4) [ 237.540512][ T9310] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:19:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)="98630ff233ee9453a1b353d9a19ece4926420afbd0d7b0271ce25358dc850e095644b802b5e40b861de7a5fb67bc4cdd2680c9dc663aca6de0b7be3288d21cb7a7ff5053ffabbdabfa9d0778a28a2a41ddffa4abe6c172ba767367837a8f993ede967af0734880a9b4a84b32bbbc7fadfc5cf72b593e96e39e4b06672f", 0x7d, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x3c0a, r4) keyctl$search(0xa, r3, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x1}, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) dup3(r5, r2, 0x0) [ 237.637260][ T26] audit: type=1804 audit(1574050781.150:32): pid=9306 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir662613867/syzkaller.5tHjkq/10/bus" dev="sda1" ino=16591 res=1 [ 237.679772][ T9321] Started in network mode [ 237.695611][ T9321] Own node identity fe8000000008000000000000000000aa, cluster identity 4711 [ 237.753327][ T9321] Enabling of bearer rejected, failed to enable media [ 237.796294][ T9328] encrypted_key: insufficient parameters specified [ 237.927423][ T9318] Enabling of bearer rejected, failed to enable media 04:19:41 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff) 04:19:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000000)) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8242d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) 04:19:41 executing program 3: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, 0x0) stat(&(0x7f0000000980)='./file0/file0\x00', &(0x7f0000000900)) getegid() socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x4000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8242, 0x80000002, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x60020000) 04:19:41 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @rand_addr=0xe3c}}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) recvfrom(r2, 0x0, 0x3b3, 0x100, 0x0, 0xfffffffffffffccd) socket(0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) socket$inet6(0xa, 0x2, 0xb0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000003b80), 0x0, &(0x7f0000003bc0)}}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000400)='erspan0\x00', 0x700e) sendmmsg(r1, &(0x7f000000a080)=[{{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0) 04:19:41 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff) 04:19:41 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0xffffff01) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x80640, 0x0) socket(0x10, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001b40), 0x8) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000280)='./file0/file0\x00') ioctl$TCXONC(r4, 0x540a, 0x800) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000480)={0x0, 0x5}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0xd4665d96b668a9a3, 0x4}}, 0x20) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f00000000c0)=0x4000007, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TUNGETFILTER(r8, 0x801054db, &(0x7f00000004c0)=""/77) [ 238.130934][ T9328] encrypted_key: insufficient parameters specified 04:19:41 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r0, r0, 0x0, 0x6c2b) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffff) 04:19:42 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r0, r0, 0x0, 0x6c2b) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffff) 04:19:42 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r0, r0, 0x0, 0x6c2b) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffff) 04:19:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0xa, 0x4}, 0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000200)="e86b481e1e", 0x5, 0x3, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3703, 0x400) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000240)={0xa, @output={0x0, 0x2, {0x4f, 0x4}, 0x10001, 0x80000001}}) 04:19:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0x6d, &(0x7f0000000100), 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x5990, 0x4) write(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x10000) ppoll(&(0x7f00000002c0)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 04:19:43 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x0) 04:19:43 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = dup(r0) dup(r0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x0, 0x0) sendto$inet(r3, &(0x7f00000001c0)="ba5caad100910e54b2f5ab1dec86e64d300f658fa448c46db1c61e8e04dd6085768fa3a097e5e2b68ac4fcab7b3f8a8a046b3811be51f8ad332c470de38d835d710dbbc29cedd328b34c502bda21340ccb8ec727883d8b45db736386adfebc4c2efe77ecde2f975e0c9c67e5d78276a5ffab1187ccd3319ca08ba09c46e8a14266a138bca22448e9d82c608c258049ac3c", 0x91, 0x4000010, 0x0, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) write$P9_RAUTH(r1, &(0x7f0000000140)={0x14}, 0x14) 04:19:43 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="634f34b91cf3160100b83b007db513002cf083f6b05fae94", 0x18}, {&(0x7f0000000200)="6ee9770682b2b7c4efae3d474c7d9de32c095159e39c41ab1ad61fc39054a414c2fae4ba9518e990e0d033c45abed0077ca8ee", 0x33}, {&(0x7f0000000340)="7c2de1efef27449981e456ae7ee5a52991bef435c8174caf60a49acda04015d15b1473fea37e6adfc9bb1993b6e0a768cad6eb1e7dcb257845b9cc3946a8c0634c2de5db1857fe961f64bae62e83b5946e", 0x51}], 0x3}, 0x81) r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0x43) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 04:19:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000000c0)) recvmmsg(r0, &(0x7f0000000540), 0x346, 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000026, &(0x7f00000005c0)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @remote}}, 0x0, 0x9, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000000}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1}, 0x100) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x70, 0x6, 0x40, 0x4, 0x0, 0x0, 0x4, 0x908, 0xa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp, 0x0, 0x400, 0x5, 0x6, 0x6, 0x2, 0x200}, r4, 0xe, 0xffffffffffffffff, 0x8) syz_open_dev$media(0x0, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) r7 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r7, &(0x7f00000004c0)='tasks\x00', 0x48, 0x0) r8 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r8, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r9 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) r11 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r12, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) r13 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r14 = openat$cgroup_procs(r13, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r14, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESHEX=r6, @ANYRESOCT=0x0, @ANYPTR=&(0x7f00000001c0)=ANY=[], @ANYRESDEC, @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES32=r14, @ANYRES16=0x0, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT=r9]], @ANYRESHEX, @ANYRES16=r10, @ANYRESOCT=0x0]], 0x55) 04:19:43 executing program 5: r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002a80)=""/4088, 0x8c5) getdents(0xffffffffffffffff, 0x0, 0x200) r1 = request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='cgroup.procs\x00', 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x3c0a, r2) r3 = request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100)='cgroup.procs\x00', r2) keyctl$negate(0xd, r1, 0x71c, r3) 04:19:43 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x10000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000280)={'nat\x00', 0x0, 0x3, 0xd1, [], 0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/209}, &(0x7f0000000100)=0x78) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900050001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 04:19:43 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x0) 04:19:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440000000000e630c400000000000000000000000000f630c40"], 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f00000000c0)="d2"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x282000, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x7, {0x7, 0x1f, 0x80, 0x2, 0x0, 0x51e, 0x1, 0x7}}, 0x50) [ 240.083900][ T9417] encrypted_key: insufficient parameters specified 04:19:43 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0xd, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x1c1}, 0x20) 04:19:44 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x0) 04:19:44 executing program 4: creat(&(0x7f0000000000)='./bus\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='./bus\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000640)={'trans=unix,', {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}) dup(0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x200002c0, 0x200004d0, 0x20000610], 0x0, 0x0, &(0x7f0000000680)=ANY=[]}, 0x78) [ 240.421883][ T9433] binder: BINDER_SET_CONTEXT_MGR already set [ 240.422604][ T9444] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 240.445109][ T9433] binder: 9429:9433 ioctl 40046207 0 returned -16 04:19:44 executing program 5: prctl$PR_SET_ENDIAN(0x14, 0x7) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r2}}, 0xc) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') r6 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f0000000540)={0x0, 0x0, [], @bt={0x6, 0x3bb, 0x8001, 0x3, 0x80000000, 0xff, 0x5}}) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="7ddf000000000000000005000000"], 0x14}}, 0x0) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x5) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x2000, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f00000002c0), 0x4) r9 = getpgrp(0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0xfc, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x89, r0}}, {@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x89, r0}}, {@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8a, r7}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8b, 0x4}}, {@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8a, r9}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x578ec456501da261}, 0x80000) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000000)=""/210) write(0xffffffffffffffff, &(0x7f0000000100)="1b0000001e00070777d00000090007010200000900000000002000", 0x1b) 04:19:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) [ 240.495643][ T9450] 9pnet: p9_fd_create_unix (9450): problem connecting socket: ./file0: -2 [ 240.515792][ T9454] 9pnet: p9_fd_create_unix (9454): problem connecting socket: ./file0: -2 04:19:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0x2aa}], 0x1, 0x0) 04:19:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xcd, &(0x7f0000000000), 0x3c) [ 240.542274][ T9444] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 240.632312][ T9463] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 04:19:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 04:19:44 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)={0x2a, 0x3, 0x0, {0x0, 0x9, 0x0, '/dev/kvm\x00'}}, 0x2a) 04:19:44 executing program 5: mlockall(0x2) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r0, &(0x7f0000005000/0x3000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) 04:19:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455cc, 0x0) 04:19:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$dmmidi(0x0, 0x1f, 0x400200) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000480)={0x3, &(0x7f0000000340)=[{0x0, 0x0, 0x2d}, {0x1ff, 0x2, 0x0, 0xfb8}, {0x0, 0x80, 0x0, 0x2}]}, 0x10) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='comm\x00(\xb6u\x86S\xca\xe6\x12n\xa1\x80u\xba|\xb8\xeaI\xcd\x88,\xaa\tE\x10x\xfc\xf6\xbc\x93\x8a\x05\x00\x00\x00\x02rI\xe2\xd5\xc7\xdbl+\x8d\x9da\xd8\x87') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) dup3(r3, r2, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) r4 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x50009404, &(0x7f0000000100)) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000300)={0x0, @local}, &(0x7f0000000380)=0xc) sendmsg$can_raw(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x1d, r5}, 0x10, &(0x7f00000004c0)={&(0x7f0000000400)=@canfd={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "9c7428c11d4a6985768e2d160f82cd8e8ddf09cb9fb68d72445bf8d496e923f7c32980b8c8e27cac58c19732d1ba962f23103f83ca27be784bc5041a4447a15d"}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40842) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0xc8, &(0x7f00000007c0), 0xff5d) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, r7) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x58, &(0x7f00000006c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, @in6={0xa, 0x0, 0xff, @loopback, 0x3}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x3f}]}, &(0x7f0000000780)=0x10) ioctl$UI_SET_SNDBIT(r8, 0x4004556a, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0xb) 04:19:44 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='mem\x00\x00\x00\x00\xa9\xc8\a\x13', 0x275a, 0x0) mmap(&(0x7f0000fea000/0x3000)=nil, 0x3000, 0x8c2961b939ecc678, 0x40010, r0, 0x4000000000000000) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x207) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) sendmmsg$alg(r1, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020003) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x800) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000080)={0x0, @adiantum}) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x472) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x208200) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000440)={'nat\x00', 0x0, 0x0, 0x0, [], 0x6, &(0x7f0000000280)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:19:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455cc, 0x0) [ 241.036199][ T9492] BPF:hdr_len not found 04:19:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00\xedEl\xd0\xd2L\xf177\xdb\x02np\x18\"\xc0ma\x00\x80\xab\x9d\xd5\x8a\x9a\x14\xe4P\xf1\xc9\x18\b\xf5\a\xf9O\xfe\xdb\xa3\x030xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000007060501ff0000fffdffff2ef6ff04610c00010006"], 0x19}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 04:19:47 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r0) close(r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffd}, 0x0, 0x8) close(r2) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61) 04:19:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$dmmidi(0x0, 0x1f, 0x400200) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000480)={0x4, &(0x7f0000000340)=[{0x0, 0x0, 0x2d}, {0x1ff, 0x2, 0x0, 0xfb8}, {0x0, 0x80, 0x0, 0x2}, {0x0, 0xff, 0x80, 0x3a400}]}, 0x10) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x63713bbb0b02c4a0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='comm\x00(\xb6u\x86S\xca\xe6\x12n\xa1\x80u\xba|\xb8\xeaI\xcd\x88,\xaa\tE\x10x\xfc\xf6\xbc\x93\x8a\x05\x00\x00\x00\x02rI\xe2\xd5\xc7\xdbl+\x8d\x9da\xd8\x87') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) dup3(r3, r2, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) r4 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x50009404, &(0x7f0000000100)) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000300)={0x0, @local}, &(0x7f0000000380)=0xc) sendmsg$can_raw(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x1d, r5}, 0x10, &(0x7f00000004c0)={&(0x7f0000000400)=@canfd={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "9c7428c11d4a6985768e2d160f82cd8e8ddf09cb9fb68d72445bf8d496e923f7c32980b8c8e27cac58c19732d1ba962f23103f83ca27be784bc5041a4447a15d"}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40842) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0xc8, &(0x7f00000007c0), 0xff5d) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x8001]}, 0x5c) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, r7) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x68, &(0x7f00000006c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, @in6={0xa, 0x4e22, 0xff, @loopback, 0x3}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x6, @loopback, 0x3f}]}, &(0x7f0000000780)=0x10) ioctl$UI_SET_SNDBIT(r8, 0x4004556a, 0x3) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0xb) 04:19:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455cc, 0x0) 04:19:48 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) io_setup(0x8, &(0x7f0000000200)=0x0) io_getevents(r0, 0x200000000005ed7, 0x80000000000006f, &(0x7f0000000240), 0x0) io_destroy(r0) 04:19:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0300a1695e1dcfe87b1071") unshare(0x40000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240), 0x12) r1 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000200)=ANY=[]}) 04:19:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455cc, 0x0) 04:19:48 executing program 4 (fault-call:3 fault-nth:0): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) [ 244.506009][ T9683] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 04:19:48 executing program 3: r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) syz_mount_image$exfat(&(0x7f0000000040)='exfat\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x295, 0x0, 0xf294159cc56673bb, &(0x7f0000000180)=ANY=[]) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000000)=0x1, 0x4) [ 244.584841][ T9683] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.602780][ T9694] IPVS: ftp: loaded support on port[0] = 21 [ 244.653176][ T9683] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 244.722291][ T9704] FAULT_INJECTION: forcing a failure. [ 244.722291][ T9704] name failslab, interval 1, probability 0, space 0, times 1 [ 244.766036][ T9704] CPU: 0 PID: 9704 Comm: syz-executor.4 Not tainted 5.4.0-rc7-next-20191115 #0 [ 244.775462][ T9704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.775489][ T9704] Call Trace: [ 244.775603][ T9704] dump_stack+0x197/0x210 [ 244.793550][ T9704] should_fail.cold+0xa/0x15 [ 244.798164][ T9704] ? fault_create_debugfs_attr+0x180/0x180 [ 244.803987][ T9704] ? ___might_sleep+0x163/0x2c0 [ 244.808850][ T9704] __should_failslab+0x121/0x190 [ 244.813801][ T9704] should_failslab+0x9/0x14 [ 244.818923][ T9704] kmem_cache_alloc_node_trace+0x274/0x750 [ 244.824736][ T9704] __kmalloc_node+0x3d/0x70 [ 244.829224][ T9704] kvmalloc_node+0x68/0x100 [ 244.833816][ T9704] iov_iter_get_pages_alloc+0x862/0x12f0 [ 244.839440][ T9704] ? memcpy_mcsafe_to_page+0x150/0x150 [ 244.844947][ T9704] ? aa_file_perm+0x40b/0xdd0 [ 244.849613][ T9704] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 244.855335][ T9704] ? iov_iter_pipe+0xba/0x2f0 [ 244.860003][ T9704] default_file_splice_read+0x199/0x8a0 [ 244.865564][ T9704] ? rcu_read_lock_held+0x9c/0xb0 [ 244.870589][ T9704] ? iter_file_splice_write+0xbe0/0xbe0 [ 244.876142][ T9704] ? find_held_lock+0x35/0x130 [ 244.880890][ T9704] ? aa_path_link+0x340/0x340 [ 244.885556][ T9704] ? lock_downgrade+0x920/0x920 [ 244.890393][ T9704] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.896648][ T9704] ? fsnotify+0x7fd/0xbb0 [ 244.900965][ T9704] ? fsnotify+0xbb0/0xbb0 [ 244.905278][ T9704] ? fsnotify_first_mark+0x210/0x210 [ 244.910639][ T9704] ? security_file_permission+0x8f/0x380 [ 244.916289][ T9704] ? iter_file_splice_write+0xbe0/0xbe0 [ 244.921843][ T9704] do_splice_to+0x127/0x180 [ 244.926352][ T9704] splice_direct_to_actor+0x2d3/0x970 [ 244.931726][ T9704] ? generic_pipe_buf_nosteal+0x10/0x10 [ 244.937272][ T9704] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.943498][ T9704] ? do_splice_to+0x180/0x180 [ 244.948179][ T9704] ? rw_verify_area+0x126/0x360 [ 244.953031][ T9704] do_splice_direct+0x1da/0x2a0 [ 244.957956][ T9704] ? splice_direct_to_actor+0x970/0x970 [ 244.963486][ T9704] ? rcu_read_lock_any_held+0xcd/0xf0 [ 244.968862][ T9704] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.975141][ T9704] ? __this_cpu_preempt_check+0x35/0x190 [ 244.980768][ T9704] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.986999][ T9704] ? __sb_start_write+0x1e5/0x460 [ 244.992020][ T9704] do_sendfile+0x597/0xd00 [ 244.996452][ T9704] ? do_compat_pwritev64+0x1c0/0x1c0 [ 245.001747][ T9704] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 245.007714][ T9704] ? fput+0x1b/0x20 [ 245.011512][ T9704] __x64_sys_sendfile64+0x1dd/0x220 [ 245.016697][ T9704] ? __ia32_sys_sendfile+0x230/0x230 [ 245.021969][ T9704] ? do_syscall_64+0x26/0x790 [ 245.026631][ T9704] ? lockdep_hardirqs_on+0x421/0x5e0 [ 245.031900][ T9704] ? trace_hardirqs_on+0x67/0x240 [ 245.036912][ T9704] do_syscall_64+0xfa/0x790 [ 245.041491][ T9704] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 245.047371][ T9704] RIP: 0033:0x45a639 [ 245.051254][ T9704] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 245.070857][ T9704] RSP: 002b:00007fdfe5cabc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 245.079256][ T9704] RAX: ffffffffffffffda RBX: 00007fdfe5cabc90 RCX: 000000000045a639 [ 245.087208][ T9704] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 245.095163][ T9704] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 245.103117][ T9704] R10: 000000007fffffff R11: 0000000000000246 R12: 00007fdfe5cac6d4 [ 245.111071][ T9704] R13: 00000000004c83bf R14: 00000000004de7f0 R15: 0000000000000005 04:19:48 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000480), &(0x7f0000000540)=0x4) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r3 = dup3(r1, r0, 0x80000) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=@getstats={0x1c, 0x5e, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x3}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x64002810) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x822400a}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x9c, r8, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x88, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9370}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) write$input_event(r4, &(0x7f0000000440)={{r10, r11/1000+10000}, 0x11, 0x200, 0xffffff01}, 0x18) connect$rxrpc(r9, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) sendmmsg(r9, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d491232b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc088) 04:19:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455cc, 0x0) 04:19:48 executing program 4 (fault-call:3 fault-nth:1): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) 04:19:48 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000007060501ff0000fffdffff2ef6ff04610c00010006"], 0x19}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 245.390161][ T9718] IPVS: ftp: loaded support on port[0] = 21 04:19:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455cc, 0x0) [ 245.471214][ T9729] FAULT_INJECTION: forcing a failure. [ 245.471214][ T9729] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 245.540502][ T9729] CPU: 1 PID: 9729 Comm: syz-executor.4 Not tainted 5.4.0-rc7-next-20191115 #0 [ 245.549525][ T9729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.559595][ T9729] Call Trace: [ 245.562906][ T9729] dump_stack+0x197/0x210 [ 245.567263][ T9729] should_fail.cold+0xa/0x15 [ 245.571876][ T9729] ? fault_create_debugfs_attr+0x180/0x180 [ 245.577731][ T9729] ? ___might_sleep+0x163/0x2c0 [ 245.582610][ T9729] should_fail_alloc_page+0x50/0x60 [ 245.587829][ T9729] __alloc_pages_nodemask+0x1a1/0x910 [ 245.593217][ T9729] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 245.599389][ T9729] ? __alloc_pages_slowpath+0x2900/0x2900 [ 245.605124][ T9729] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 245.610698][ T9729] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 245.616953][ T9729] alloc_pages_current+0x107/0x210 [ 245.622080][ T9729] push_pipe+0x3fc/0x7a0 [ 245.626345][ T9729] iov_iter_get_pages_alloc+0x8c2/0x12f0 [ 245.631997][ T9729] ? memcpy_mcsafe_to_page+0x150/0x150 [ 245.637947][ T9729] ? aa_file_perm+0x40b/0xdd0 [ 245.642630][ T9729] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 245.642655][ T9729] ? iov_iter_pipe+0xba/0x2f0 [ 245.642674][ T9729] default_file_splice_read+0x199/0x8a0 [ 245.642690][ T9729] ? rcu_read_lock_held+0x9c/0xb0 [ 245.642712][ T9729] ? iter_file_splice_write+0xbe0/0xbe0 [ 245.642727][ T9729] ? find_held_lock+0x35/0x130 [ 245.642737][ T9729] ? aa_path_link+0x340/0x340 [ 245.642751][ T9729] ? lock_downgrade+0x920/0x920 [ 245.642762][ T9729] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.694337][ T9729] ? fsnotify+0x7fd/0xbb0 [ 245.698682][ T9729] ? fsnotify+0xbb0/0xbb0 [ 245.703020][ T9729] ? fsnotify_first_mark+0x210/0x210 [ 245.708327][ T9729] ? security_file_permission+0x8f/0x380 [ 245.713977][ T9729] ? iter_file_splice_write+0xbe0/0xbe0 [ 245.719531][ T9729] do_splice_to+0x127/0x180 [ 245.724046][ T9729] splice_direct_to_actor+0x2d3/0x970 [ 245.729423][ T9729] ? generic_pipe_buf_nosteal+0x10/0x10 [ 245.735004][ T9729] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.741247][ T9729] ? do_splice_to+0x180/0x180 [ 245.745934][ T9729] ? rw_verify_area+0x126/0x360 [ 245.750793][ T9729] do_splice_direct+0x1da/0x2a0 [ 245.755657][ T9729] ? splice_direct_to_actor+0x970/0x970 [ 245.761210][ T9729] ? rcu_read_lock_any_held+0xcd/0xf0 [ 245.766595][ T9729] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.772842][ T9729] ? __this_cpu_preempt_check+0x35/0x190 [ 245.778483][ T9729] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.784731][ T9729] ? __sb_start_write+0x1e5/0x460 [ 245.789767][ T9729] do_sendfile+0x597/0xd00 [ 245.794200][ T9729] ? do_compat_pwritev64+0x1c0/0x1c0 [ 245.799492][ T9729] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 245.805738][ T9729] ? fput+0x1b/0x20 [ 245.809558][ T9729] __x64_sys_sendfile64+0x1dd/0x220 [ 245.814761][ T9729] ? __ia32_sys_sendfile+0x230/0x230 [ 245.820054][ T9729] ? do_syscall_64+0x26/0x790 [ 245.824740][ T9729] ? lockdep_hardirqs_on+0x421/0x5e0 [ 245.830028][ T9729] ? trace_hardirqs_on+0x67/0x240 [ 245.835065][ T9729] do_syscall_64+0xfa/0x790 [ 245.839583][ T9729] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 245.845476][ T9729] RIP: 0033:0x45a639 [ 245.849379][ T9729] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 245.868995][ T9729] RSP: 002b:00007fdfe5cabc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 245.877435][ T9729] RAX: ffffffffffffffda RBX: 00007fdfe5cabc90 RCX: 000000000045a639 [ 245.885413][ T9729] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 245.893400][ T9729] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 245.901384][ T9729] R10: 000000007fffffff R11: 0000000000000246 R12: 00007fdfe5cac6d4 [ 245.909366][ T9729] R13: 00000000004c83bf R14: 00000000004de7f0 R15: 0000000000000005 [ 246.002755][ T9741] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 246.042312][ T9741] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 246.063708][ T9741] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 04:19:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x800455cc, 0x0) 04:19:49 executing program 4 (fault-call:3 fault-nth:2): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) 04:19:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455cc, 0x0) [ 246.337286][ T9750] FAULT_INJECTION: forcing a failure. [ 246.337286][ T9750] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 246.398850][ T9750] CPU: 1 PID: 9750 Comm: syz-executor.4 Not tainted 5.4.0-rc7-next-20191115 #0 [ 246.407842][ T9750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.417910][ T9750] Call Trace: [ 246.421228][ T9750] dump_stack+0x197/0x210 [ 246.425593][ T9750] should_fail.cold+0xa/0x15 [ 246.430215][ T9750] ? fault_create_debugfs_attr+0x180/0x180 [ 246.436046][ T9750] ? ___might_sleep+0x163/0x2c0 [ 246.440900][ T9750] should_fail_alloc_page+0x50/0x60 [ 246.440918][ T9750] __alloc_pages_nodemask+0x1a1/0x910 [ 246.440938][ T9750] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 246.440960][ T9750] ? __alloc_pages_slowpath+0x2900/0x2900 [ 246.463487][ T9750] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 246.469118][ T9750] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 246.475382][ T9750] alloc_pages_current+0x107/0x210 [ 246.480504][ T9750] push_pipe+0x3fc/0x7a0 [ 246.484766][ T9750] iov_iter_get_pages_alloc+0x8c2/0x12f0 [ 246.490423][ T9750] ? memcpy_mcsafe_to_page+0x150/0x150 [ 246.495886][ T9750] ? aa_file_perm+0x40b/0xdd0 [ 246.500575][ T9750] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 246.506300][ T9750] ? iov_iter_pipe+0xba/0x2f0 [ 246.510997][ T9750] default_file_splice_read+0x199/0x8a0 [ 246.516553][ T9750] ? rcu_read_lock_held+0x9c/0xb0 [ 246.521599][ T9750] ? iter_file_splice_write+0xbe0/0xbe0 [ 246.527165][ T9750] ? find_held_lock+0x35/0x130 [ 246.531942][ T9750] ? aa_path_link+0x340/0x340 [ 246.536643][ T9750] ? lock_downgrade+0x920/0x920 [ 246.541499][ T9750] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 246.547749][ T9750] ? fsnotify+0x7fd/0xbb0 [ 246.552091][ T9750] ? fsnotify+0xbb0/0xbb0 [ 246.556431][ T9750] ? fsnotify_first_mark+0x210/0x210 [ 246.561737][ T9750] ? security_file_permission+0x8f/0x380 [ 246.567382][ T9750] ? iter_file_splice_write+0xbe0/0xbe0 [ 246.572937][ T9750] do_splice_to+0x127/0x180 [ 246.577451][ T9750] splice_direct_to_actor+0x2d3/0x970 [ 246.582839][ T9750] ? generic_pipe_buf_nosteal+0x10/0x10 [ 246.588405][ T9750] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 246.594663][ T9750] ? do_splice_to+0x180/0x180 [ 246.599360][ T9750] ? rw_verify_area+0x126/0x360 [ 246.604228][ T9750] do_splice_direct+0x1da/0x2a0 [ 246.609094][ T9750] ? splice_direct_to_actor+0x970/0x970 [ 246.614651][ T9750] ? rcu_read_lock_any_held+0xcd/0xf0 [ 246.620043][ T9750] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 246.626293][ T9750] ? __this_cpu_preempt_check+0x35/0x190 [ 246.631938][ T9750] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 246.638185][ T9750] ? __sb_start_write+0x1e5/0x460 [ 246.643222][ T9750] do_sendfile+0x597/0xd00 [ 246.647659][ T9750] ? do_compat_pwritev64+0x1c0/0x1c0 [ 246.652955][ T9750] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 246.659328][ T9750] ? fput+0x1b/0x20 [ 246.663150][ T9750] __x64_sys_sendfile64+0x1dd/0x220 [ 246.668360][ T9750] ? __ia32_sys_sendfile+0x230/0x230 [ 246.673650][ T9750] ? do_syscall_64+0x26/0x790 [ 246.678335][ T9750] ? lockdep_hardirqs_on+0x421/0x5e0 [ 246.683632][ T9750] ? trace_hardirqs_on+0x67/0x240 [ 246.688673][ T9750] do_syscall_64+0xfa/0x790 [ 246.693186][ T9750] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 246.699092][ T9750] RIP: 0033:0x45a639 [ 246.702988][ T9750] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 246.722592][ T9750] RSP: 002b:00007fdfe5cabc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 246.731007][ T9750] RAX: ffffffffffffffda RBX: 00007fdfe5cabc90 RCX: 000000000045a639 [ 246.738976][ T9750] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 246.746945][ T9750] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 246.754913][ T9750] R10: 000000007fffffff R11: 0000000000000246 R12: 00007fdfe5cac6d4 [ 246.762880][ T9750] R13: 00000000004c83bf R14: 00000000004de7f0 R15: 0000000000000005 04:19:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x800) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) r6 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r6, &(0x7f0000000240)="173c662f9df9c7453b12f9ec0461d3ed8fb3957fc4a8a157bada329f69107782a869a85917338bb3de6d5df93c7a219672dcdc15aef869491050a3c93da98f0a1f10972e967af5468f91241145f9d83f15ec70048c28a61f9a3a58107165e03b97c0ca89515d1df9d9c78ff378a19d52e55ed2e944c04f866bc4d880e5c4e450c50661481fd29fd15095d00fcdf7da34dd060e0b822e8148e7295426d464bb1b7346577aed730786e6e3edfcdd", &(0x7f0000000300)=""/136}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x13, 0x80) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r8, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x10) 04:19:53 executing program 5: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="1020f5f20100070009000000000000000c00000009", 0x15, 0x1400}], 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2000, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x5) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x1a12, 0x1ff, 0x8001, 0x2, 0x5, r1}) 04:19:53 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000007060501ff0000fffdffff2ef6ff04610c00010006"], 0x19}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 04:19:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x800455cc, 0x0) 04:19:53 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) mq_timedreceive(r0, &(0x7f0000000380)=""/25, 0x19, 0x6, &(0x7f0000000400)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) dup2(r1, r2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x80c40, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4') ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r4 = msgget$private(0x0, 0x10) msgctl$IPC_RMID(r4, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) 04:19:53 executing program 4 (fault-call:3 fault-nth:3): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) 04:19:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x800455cc, 0x0) [ 249.612059][ T9766] FAULT_INJECTION: forcing a failure. [ 249.612059][ T9766] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 249.626341][ T9773] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 249.658640][ T9773] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 249.695694][ T9773] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 249.716694][ T9766] CPU: 1 PID: 9766 Comm: syz-executor.4 Not tainted 5.4.0-rc7-next-20191115 #0 [ 249.725696][ T9766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.735761][ T9766] Call Trace: [ 249.739079][ T9766] dump_stack+0x197/0x210 [ 249.743437][ T9766] should_fail.cold+0xa/0x15 [ 249.748050][ T9766] ? fault_create_debugfs_attr+0x180/0x180 [ 249.753876][ T9766] ? ___might_sleep+0x163/0x2c0 [ 249.758758][ T9766] should_fail_alloc_page+0x50/0x60 04:19:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x800455cc, 0x0) 04:19:53 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) fcntl$setstatus(r0, 0x4, 0x40000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r0, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'veth1\x00', 0x8000}) [ 249.763967][ T9766] __alloc_pages_nodemask+0x1a1/0x910 [ 249.769346][ T9766] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 249.775516][ T9766] ? __alloc_pages_slowpath+0x2900/0x2900 [ 249.781239][ T9766] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 249.786801][ T9766] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 249.793048][ T9766] alloc_pages_current+0x107/0x210 [ 249.798166][ T9766] push_pipe+0x3fc/0x7a0 [ 249.802551][ T9766] iov_iter_get_pages_alloc+0x8c2/0x12f0 [ 249.808202][ T9766] ? memcpy_mcsafe_to_page+0x150/0x150 [ 249.813687][ T9766] ? aa_file_perm+0x40b/0xdd0 [ 249.813708][ T9766] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 249.824077][ T9766] ? iov_iter_pipe+0xba/0x2f0 [ 249.824102][ T9766] default_file_splice_read+0x199/0x8a0 [ 249.824120][ T9766] ? rcu_read_lock_held+0x9c/0xb0 [ 249.824141][ T9766] ? iter_file_splice_write+0xbe0/0xbe0 [ 249.834337][ T9766] ? find_held_lock+0x35/0x130 [ 249.834360][ T9766] ? aa_path_link+0x340/0x340 [ 249.834383][ T9766] ? lock_downgrade+0x920/0x920 [ 249.844931][ T9766] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 249.844950][ T9766] ? fsnotify+0x7fd/0xbb0 [ 249.844971][ T9766] ? fsnotify+0xbb0/0xbb0 [ 249.844986][ T9766] ? fsnotify_first_mark+0x210/0x210 [ 249.845015][ T9766] ? security_file_permission+0x8f/0x380 [ 249.885089][ T9766] ? iter_file_splice_write+0xbe0/0xbe0 [ 249.890654][ T9766] do_splice_to+0x127/0x180 [ 249.895199][ T9766] splice_direct_to_actor+0x2d3/0x970 [ 249.900593][ T9766] ? generic_pipe_buf_nosteal+0x10/0x10 [ 249.906173][ T9766] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 249.912401][ T9766] ? do_splice_to+0x180/0x180 [ 249.917067][ T9766] ? rw_verify_area+0x126/0x360 [ 249.921905][ T9766] do_splice_direct+0x1da/0x2a0 [ 249.926784][ T9766] ? splice_direct_to_actor+0x970/0x970 [ 249.932389][ T9766] ? rcu_read_lock_any_held+0xcd/0xf0 [ 249.937748][ T9766] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 249.943973][ T9766] ? __this_cpu_preempt_check+0x35/0x190 [ 249.949591][ T9766] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 249.955811][ T9766] ? __sb_start_write+0x1e5/0x460 [ 249.960875][ T9766] do_sendfile+0x597/0xd00 [ 249.965286][ T9766] ? do_compat_pwritev64+0x1c0/0x1c0 [ 249.970555][ T9766] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 249.976808][ T9766] ? fput+0x1b/0x20 [ 249.980621][ T9766] __x64_sys_sendfile64+0x1dd/0x220 [ 249.985887][ T9766] ? __ia32_sys_sendfile+0x230/0x230 [ 249.991173][ T9766] ? do_syscall_64+0x26/0x790 [ 249.995851][ T9766] ? lockdep_hardirqs_on+0x421/0x5e0 [ 250.001136][ T9766] ? trace_hardirqs_on+0x67/0x240 [ 250.006261][ T9766] do_syscall_64+0xfa/0x790 [ 250.010755][ T9766] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.016627][ T9766] RIP: 0033:0x45a639 [ 250.020507][ T9766] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 250.040096][ T9766] RSP: 002b:00007fdfe5cabc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 250.048499][ T9766] RAX: ffffffffffffffda RBX: 00007fdfe5cabc90 RCX: 000000000045a639 [ 250.056554][ T9766] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 250.064517][ T9766] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 250.072483][ T9766] R10: 000000007fffffff R11: 0000000000000246 R12: 00007fdfe5cac6d4 [ 250.080434][ T9766] R13: 00000000004c83bf R14: 00000000004de7f0 R15: 0000000000000005 04:19:53 executing program 4 (fault-call:3 fault-nth:4): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) 04:19:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x800455cc, 0x0) 04:19:53 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000340)) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x10000, 0x80001) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x5) 04:19:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x12082, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000200)=0x8, 0x4) shutdown(r2, 0x0) setrlimit(0x7, &(0x7f0000becff0)) mq_open(&(0x7f00000000c0)='\x00', 0x0, 0x8, &(0x7f0000000140)={0x0, 0x1, 0x7, 0x9, 0x9c, 0x7, 0xfffffffffffffff7}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0xfffffffffffffe76, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f00000001c0)=0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x4, {0x7fffffff, 0x1, 0xffffffff}}) r6 = socket(0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000001b40)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x2, 0x80, 0x8, r7}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000080)=0x8) r8 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r8, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000000340)=""/216) [ 250.323390][ T9792] FAULT_INJECTION: forcing a failure. [ 250.323390][ T9792] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 250.344069][ T9792] CPU: 1 PID: 9792 Comm: syz-executor.4 Not tainted 5.4.0-rc7-next-20191115 #0 [ 250.353058][ T9792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.363127][ T9792] Call Trace: [ 250.366448][ T9792] dump_stack+0x197/0x210 [ 250.370801][ T9792] should_fail.cold+0xa/0x15 [ 250.375408][ T9792] ? fault_create_debugfs_attr+0x180/0x180 [ 250.381228][ T9792] ? ___might_sleep+0x163/0x2c0 [ 250.386096][ T9792] should_fail_alloc_page+0x50/0x60 [ 250.391306][ T9792] __alloc_pages_nodemask+0x1a1/0x910 [ 250.396689][ T9792] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 250.402877][ T9792] ? __alloc_pages_slowpath+0x2900/0x2900 [ 250.408611][ T9792] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 250.414164][ T9792] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 04:19:54 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000007060501ff0000fffdffff2ef6ff04610c00010006"], 0x19}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 250.414189][ T9792] alloc_pages_current+0x107/0x210 [ 250.425517][ T9792] push_pipe+0x3fc/0x7a0 [ 250.429778][ T9792] iov_iter_get_pages_alloc+0x8c2/0x12f0 [ 250.435435][ T9792] ? memcpy_mcsafe_to_page+0x150/0x150 [ 250.440903][ T9792] ? aa_file_perm+0x40b/0xdd0 [ 250.445654][ T9792] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 250.451394][ T9792] ? iov_iter_pipe+0xba/0x2f0 [ 250.456091][ T9792] default_file_splice_read+0x199/0x8a0 [ 250.461650][ T9792] ? rcu_read_lock_held+0x9c/0xb0 [ 250.466704][ T9792] ? iter_file_splice_write+0xbe0/0xbe0 [ 250.472271][ T9792] ? find_held_lock+0x35/0x130 [ 250.477049][ T9792] ? aa_path_link+0x340/0x340 [ 250.481733][ T9792] ? lock_downgrade+0x920/0x920 [ 250.481749][ T9792] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.481767][ T9792] ? fsnotify+0x7fd/0xbb0 [ 250.481791][ T9792] ? fsnotify+0xbb0/0xbb0 [ 250.501531][ T9792] ? fsnotify_first_mark+0x210/0x210 [ 250.506847][ T9792] ? security_file_permission+0x8f/0x380 [ 250.512507][ T9792] ? iter_file_splice_write+0xbe0/0xbe0 [ 250.518067][ T9792] do_splice_to+0x127/0x180 04:19:54 executing program 1: setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000000), 0x4) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x2) socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket$kcm(0x10, 0x803, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)}, 0x0) recvmsg$kcm(r0, &(0x7f00000050c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000017c0)="23000000560081aee4f80b00000f00fe078b", 0x12}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000050c0)={0x0, 0x0, 0x0, 0xffffffffffffff28, 0x0, 0x53}, 0x20042) r1 = socket$kcm(0x10, 0x803, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000017c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000050c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x803, 0x0) sendmsg$kcm(r2, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f00000050c0)={0x0, 0x0, 0x0}, 0x0) r3 = eventfd(0x5) r4 = dup2(r2, r3) r5 = socket(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r5, r6, 0x0, 0x80000001) ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f0000000180)={0x8, 0x37, 0x7, 0x1b, 0x7, 0x800, 0x1, 0x13d}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r9, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7) syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x10101) write$vnet(0xffffffffffffffff, 0x0, 0x0) [ 250.522589][ T9792] splice_direct_to_actor+0x2d3/0x970 [ 250.527979][ T9792] ? generic_pipe_buf_nosteal+0x10/0x10 [ 250.533556][ T9792] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.539843][ T9792] ? do_splice_to+0x180/0x180 [ 250.544538][ T9792] ? rw_verify_area+0x126/0x360 [ 250.549391][ T9792] do_splice_direct+0x1da/0x2a0 [ 250.549408][ T9792] ? splice_direct_to_actor+0x970/0x970 [ 250.549425][ T9792] ? rcu_read_lock_any_held+0xcd/0xf0 [ 250.549444][ T9792] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.549465][ T9792] ? __this_cpu_preempt_check+0x35/0x190 [ 250.577090][ T9792] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.583350][ T9792] ? __sb_start_write+0x1e5/0x460 [ 250.588402][ T9792] do_sendfile+0x597/0xd00 [ 250.592851][ T9792] ? do_compat_pwritev64+0x1c0/0x1c0 [ 250.598156][ T9792] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 250.601190][ T9802] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 250.604411][ T9792] ? fput+0x1b/0x20 [ 250.604431][ T9792] __x64_sys_sendfile64+0x1dd/0x220 [ 250.604448][ T9792] ? __ia32_sys_sendfile+0x230/0x230 [ 250.604471][ T9792] ? do_syscall_64+0x26/0x790 [ 250.623732][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 250.626822][ T9792] ? lockdep_hardirqs_on+0x421/0x5e0 [ 250.626841][ T9792] ? trace_hardirqs_on+0x67/0x240 [ 250.626865][ T9792] do_syscall_64+0xfa/0x790 [ 250.655824][ T9792] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.661875][ T9792] RIP: 0033:0x45a639 [ 250.665780][ T9792] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 250.687035][ T9792] RSP: 002b:00007fdfe5cabc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 250.695450][ T9792] RAX: ffffffffffffffda RBX: 00007fdfe5cabc90 RCX: 000000000045a639 [ 250.703426][ T9792] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 250.711400][ T9792] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 250.719415][ T9792] R10: 000000007fffffff R11: 0000000000000246 R12: 00007fdfe5cac6d4 [ 250.727382][ T9792] R13: 00000000004c83bf R14: 00000000004de7f0 R15: 0000000000000005 [ 250.735738][ T9802] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 04:19:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x800455cc, 0x0) 04:19:54 executing program 4 (fault-call:3 fault-nth:5): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) 04:19:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) r1 = getpgrp(0x0) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000240)={{0x0, 0xe0}, 'port1\x00', 0x80, 0x100002, 0x1, 0x5, 0x3f, 0x7fff, 0xf99a, 0x0, 0x1, 0x1}) setpriority(0x0, r1, 0xffff) r3 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7fff, 0x70e65280cd90b42d) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) rt_sigqueueinfo(0x0, 0x2c, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0xfff, 0x400) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)) 04:19:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x800455cc, 0x0) [ 251.084958][ T9820] FAULT_INJECTION: forcing a failure. [ 251.084958][ T9820] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 251.123162][ T9820] CPU: 0 PID: 9820 Comm: syz-executor.4 Not tainted 5.4.0-rc7-next-20191115 #0 [ 251.132351][ T9820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.142434][ T9820] Call Trace: [ 251.146462][ T9820] dump_stack+0x197/0x210 [ 251.150852][ T9820] should_fail.cold+0xa/0x15 [ 251.155469][ T9820] ? fault_create_debugfs_attr+0x180/0x180 [ 251.161288][ T9820] ? ___might_sleep+0x163/0x2c0 [ 251.166144][ T9820] should_fail_alloc_page+0x50/0x60 [ 251.172206][ T9820] __alloc_pages_nodemask+0x1a1/0x910 [ 251.177745][ T9820] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 251.183903][ T9820] ? __alloc_pages_slowpath+0x2900/0x2900 [ 251.189625][ T9820] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 251.195172][ T9820] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 251.201432][ T9820] alloc_pages_current+0x107/0x210 [ 251.206544][ T9820] push_pipe+0x3fc/0x7a0 [ 251.210927][ T9820] iov_iter_get_pages_alloc+0x8c2/0x12f0 [ 251.216588][ T9820] ? memcpy_mcsafe_to_page+0x150/0x150 [ 251.222045][ T9820] ? aa_file_perm+0x40b/0xdd0 [ 251.226727][ T9820] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 251.232442][ T9820] ? iov_iter_pipe+0xba/0x2f0 [ 251.237126][ T9820] default_file_splice_read+0x199/0x8a0 [ 251.242669][ T9820] ? rcu_read_lock_held+0x9c/0xb0 [ 251.247695][ T9820] ? iter_file_splice_write+0xbe0/0xbe0 [ 251.253240][ T9820] ? find_held_lock+0x35/0x130 [ 251.258002][ T9820] ? aa_path_link+0x340/0x340 [ 251.262677][ T9820] ? lock_downgrade+0x920/0x920 [ 251.267524][ T9820] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.273759][ T9820] ? fsnotify+0x7fd/0xbb0 [ 251.278087][ T9820] ? fsnotify+0xbb0/0xbb0 [ 251.282420][ T9820] ? fsnotify_first_mark+0x210/0x210 [ 251.287717][ T9820] ? security_file_permission+0x8f/0x380 [ 251.293348][ T9820] ? iter_file_splice_write+0xbe0/0xbe0 [ 251.298890][ T9820] do_splice_to+0x127/0x180 [ 251.303394][ T9820] splice_direct_to_actor+0x2d3/0x970 [ 251.308764][ T9820] ? generic_pipe_buf_nosteal+0x10/0x10 [ 251.314313][ T9820] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.320607][ T9820] ? do_splice_to+0x180/0x180 [ 251.325284][ T9820] ? rw_verify_area+0x126/0x360 [ 251.330179][ T9820] do_splice_direct+0x1da/0x2a0 [ 251.335025][ T9820] ? splice_direct_to_actor+0x970/0x970 [ 251.340586][ T9820] ? rcu_read_lock_any_held+0xcd/0xf0 [ 251.346733][ T9820] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.353210][ T9820] ? __this_cpu_preempt_check+0x35/0x190 [ 251.358857][ T9820] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.365150][ T9820] ? __sb_start_write+0x1e5/0x460 [ 251.370180][ T9820] do_sendfile+0x597/0xd00 [ 251.374605][ T9820] ? do_compat_pwritev64+0x1c0/0x1c0 [ 251.379896][ T9820] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 251.386196][ T9820] ? fput+0x1b/0x20 [ 251.390008][ T9820] __x64_sys_sendfile64+0x1dd/0x220 [ 251.395262][ T9820] ? __ia32_sys_sendfile+0x230/0x230 [ 251.400546][ T9820] ? do_syscall_64+0x26/0x790 [ 251.405358][ T9820] ? lockdep_hardirqs_on+0x421/0x5e0 [ 251.410736][ T9820] ? trace_hardirqs_on+0x67/0x240 [ 251.415758][ T9820] do_syscall_64+0xfa/0x790 [ 251.420267][ T9820] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.426151][ T9820] RIP: 0033:0x45a639 [ 251.430045][ T9820] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 251.449646][ T9820] RSP: 002b:00007fdfe5cabc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 251.458056][ T9820] RAX: ffffffffffffffda RBX: 00007fdfe5cabc90 RCX: 000000000045a639 [ 251.466022][ T9820] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 251.474048][ T9820] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 04:19:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x800455cc, 0x0) 04:19:55 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000f90012000c000100627269646765000004000200"], 0x34}}, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r1, 0x2, {0x0, 0x1, 0x4}, 0xfd}, 0x18) r2 = msgget$private(0x0, 0x10) msgctl$IPC_RMID(r2, 0x0) msgctl$IPC_RMID(r2, 0x0) [ 251.482018][ T9820] R10: 000000007fffffff R11: 0000000000000246 R12: 00007fdfe5cac6d4 [ 251.490007][ T9820] R13: 00000000004c83bf R14: 00000000004de7f0 R15: 0000000000000005 04:19:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4) socketpair$tipc(0x1e, 0x801, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmmsg(r0, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001800)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002880)=""/200, 0xc8}], 0x1}}], 0x2, 0x2, 0x0) 04:19:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653f0d89abf4d209bc876003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc158bb2b03b5b2461179f5f90bba001b5080da6218a8106df2858ec973328e5a2c078a3fe3b52020203517e25ee74e82ba80a0fa881e689f7615baf78f08ea33bcb860d6a0b61193d4a1cb622431d42fee5e91531bfdfe5cb19ff15d6d891a92efa823a3c231ea82fd", 0xbb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40, 0x0) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000300)={0x8001, 0x2}, 0xc) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180)={0xffffffffffffffff}, 0x3, {0xa, 0x4e21, 0x80, @empty, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000040)={0x3, 0x0, "09e289b34c4dc6a8b4941bacc441d385fd99991cec002dbae764e499dac4c3cf", 0xb624, 0x401, 0x7, 0x3f, 0x3}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x6, 0x6, 0x400, 0x80000000, 0x2}, 0x14) ptrace$cont(0x20, r0, 0x0, 0x0) 04:19:55 executing program 4 (fault-call:3 fault-nth:6): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) [ 251.610327][ T9824] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 251.671716][ T9837] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:19:55 executing program 0: syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$llc(r0, 0x0, 0x0, 0x1, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) getcwd(&(0x7f0000000440)=""/82, 0x52) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x30420, 0x0) sendto$inet(r3, &(0x7f0000000180)="20048a087f1f6488b967481241ba7860f46ef65ac618deb6624236abeaf4b4834ff922b3f1e0b02bd67aa03059010000805c2573ab4ea6f7ae55d88fecf9221a750fbf746bec66ba0000000000", 0x101da, 0x800, 0x0, 0xfffffffffffffd1f) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fb, &(0x7f0000000640)="f35d4777ec0902dacd6a0537b24c57cf1fcfe2b5803274207fcfa91e266be992cdf81b6bbdc57e76a580b7c50936bbef1ccbf787637e8c6c3b45470133990854659ee0ca1ecc9060cbac87e6efc360fae18594850da20080ba14eec8e70db5a87ce3388df98ba383bb3df1a8ab5f60db44f46b2572ce5526759de3dc") socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket(0x10, 0x2, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000004c0)=""/255) syz_open_procfs(0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x5, 0x800) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1}}, [0x0, 0xa9, 0x100, 0x8, 0x7, 0x0, 0x5, 0x0, 0x0, 0x2, 0x1, 0x10]}, &(0x7f00000003c0)=0x100) 04:19:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x800455cc, 0x0) [ 251.724628][ T9843] FAULT_INJECTION: forcing a failure. [ 251.724628][ T9843] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 251.786414][ T9843] CPU: 1 PID: 9843 Comm: syz-executor.4 Not tainted 5.4.0-rc7-next-20191115 #0 [ 251.795426][ T9843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.805591][ T9843] Call Trace: [ 251.805624][ T9843] dump_stack+0x197/0x210 [ 251.805652][ T9843] should_fail.cold+0xa/0x15 [ 251.818003][ T9843] ? fault_create_debugfs_attr+0x180/0x180 [ 251.823851][ T9843] ? ___might_sleep+0x163/0x2c0 [ 251.828762][ T9843] should_fail_alloc_page+0x50/0x60 [ 251.828782][ T9843] __alloc_pages_nodemask+0x1a1/0x910 [ 251.828801][ T9843] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 251.828824][ T9843] ? __alloc_pages_slowpath+0x2900/0x2900 [ 251.851478][ T9843] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 251.851504][ T9843] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 251.851526][ T9843] alloc_pages_current+0x107/0x210 [ 251.851548][ T9843] push_pipe+0x3fc/0x7a0 [ 251.872725][ T9843] iov_iter_get_pages_alloc+0x8c2/0x12f0 [ 251.872748][ T9843] ? memcpy_mcsafe_to_page+0x150/0x150 [ 251.883995][ T9843] ? aa_file_perm+0x40b/0xdd0 [ 251.888857][ T9843] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 251.894605][ T9843] ? iov_iter_pipe+0xba/0x2f0 [ 251.899338][ T9843] default_file_splice_read+0x199/0x8a0 [ 251.904910][ T9843] ? rcu_read_lock_held+0x9c/0xb0 [ 251.909961][ T9843] ? iter_file_splice_write+0xbe0/0xbe0 [ 251.915528][ T9843] ? find_held_lock+0x35/0x130 [ 251.920328][ T9843] ? aa_path_link+0x340/0x340 [ 251.925026][ T9843] ? lock_downgrade+0x920/0x920 [ 251.929898][ T9843] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 04:19:55 executing program 2 (fault-call:2 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455cc, 0x0) [ 251.936167][ T9843] ? fsnotify+0x7fd/0xbb0 [ 251.940513][ T9843] ? fsnotify+0xbb0/0xbb0 [ 251.940529][ T9843] ? fsnotify_first_mark+0x210/0x210 [ 251.940559][ T9843] ? security_file_permission+0x8f/0x380 [ 251.940581][ T9843] ? iter_file_splice_write+0xbe0/0xbe0 [ 251.961376][ T9843] do_splice_to+0x127/0x180 [ 251.965908][ T9843] splice_direct_to_actor+0x2d3/0x970 [ 251.971306][ T9843] ? generic_pipe_buf_nosteal+0x10/0x10 [ 251.976882][ T9843] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.983145][ T9843] ? do_splice_to+0x180/0x180 [ 251.987932][ T9843] ? rw_verify_area+0x126/0x360 [ 251.992881][ T9843] do_splice_direct+0x1da/0x2a0 [ 251.997899][ T9843] ? splice_direct_to_actor+0x970/0x970 [ 252.003469][ T9843] ? rcu_read_lock_any_held+0xcd/0xf0 [ 252.009119][ T9843] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.015459][ T9843] ? __this_cpu_preempt_check+0x35/0x190 [ 252.021102][ T9843] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.027345][ T9843] ? __sb_start_write+0x1e5/0x460 [ 252.032371][ T9843] do_sendfile+0x597/0xd00 [ 252.036790][ T9843] ? do_compat_pwritev64+0x1c0/0x1c0 [ 252.042073][ T9843] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 252.048315][ T9843] ? fput+0x1b/0x20 [ 252.052123][ T9843] __x64_sys_sendfile64+0x1dd/0x220 [ 252.057324][ T9843] ? __ia32_sys_sendfile+0x230/0x230 [ 252.062607][ T9843] ? do_syscall_64+0x26/0x790 [ 252.067285][ T9843] ? lockdep_hardirqs_on+0x421/0x5e0 [ 252.072566][ T9843] ? trace_hardirqs_on+0x67/0x240 [ 252.077591][ T9843] do_syscall_64+0xfa/0x790 [ 252.082100][ T9843] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.088265][ T9843] RIP: 0033:0x45a639 [ 252.092230][ T9843] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 252.111945][ T9843] RSP: 002b:00007fdfe5cabc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 252.120418][ T9843] RAX: ffffffffffffffda RBX: 00007fdfe5cabc90 RCX: 000000000045a639 [ 252.128389][ T9843] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 04:19:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[]}, 0x1, 0xfdffffff00000000}, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x4, {0x7fffffff, 0x1, 0xffffffff}}) r6 = socket(0x10, 0x0, 0x0) r7 = syz_open_dev$radio(&(0x7f0000001600)='/dev/radio#\x00', 0x2, 0x2) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000001b80)=""/4096, &(0x7f0000001640)=0x1000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000001b40)={r8}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x2, 0x80, 0x8, r8}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000002c0)={r8, @in6={{0xa, 0x4e20, 0x0, @loopback, 0xef5}}, [0xe2c, 0xe57, 0x1, 0x95b4, 0x3ff, 0x7, 0x9, 0x7fffffff, 0xd264, 0xebb, 0xf5, 0x9, 0xffffffffffffff80, 0x1, 0x77bd]}, &(0x7f0000000200)=0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = gettid() r11 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x40a93e47529c9ac9, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r11, 0xc028564e, &(0x7f0000000240)={0x2, 0x1, [0x9, 0x80000000, 0x80000000, 0x0, 0x2, 0x80000000, 0x401, 0x401]}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r11, 0x4008ae73, &(0x7f0000000400)={0x6, 0x800}) r12 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x410000, 0x0) r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f00000001c0)={0x3000, &(0x7f00000000c0), 0x0, r13, 0x8}) ptrace$setopts(0x4206, r10, 0x0, 0x0) tkill(r10, 0x5) fcntl$setownex(r9, 0xf, &(0x7f0000000040)={0x0, r10}) [ 252.136352][ T9843] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 252.144320][ T9843] R10: 000000007fffffff R11: 0000000000000246 R12: 00007fdfe5cac6d4 [ 252.152288][ T9843] R13: 00000000004c83bf R14: 00000000004de7f0 R15: 0000000000000005 [ 252.164326][ T9854] FAULT_INJECTION: forcing a failure. [ 252.164326][ T9854] name failslab, interval 1, probability 0, space 0, times 0 04:19:55 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fbbccf810000000000000000fd85d16e79bad40ac3794899000000000000000000000000000000d94bfeadbfce0d4ed6f71b242b42000000ea0000000000000000000000000000000000000500000000000000000000000000000000000000e6010000000100000000002000"], 0xb8}}, 0x0) sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)={0x401, 0x2, 0x4, 0x70006, {r3, r4/1000+10000}, {0x4, 0x18, 0x1f, 0x80, 0x9, 0x4, "0720ab81"}, 0xfffffe00, 0x3, @offset=0x8, 0x4}) r5 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0xa808) sendto$rose(r5, &(0x7f00000004c0)="9edc4c01881be0eaa9243aea0df70a27ebf5670d18d44c8a87ff47fe9f8ea86032d72e6dd938826416f0bc225c86a507e5044f551c7d0834b5a98141003f05daf0d518f9a6aaa98a511a6fcad13fa85d4384c7ec569d518c125aea118a77420fb78dbf85892caaa562ccd90fb42649f9ca954798cf28dd1e636fe7b753fbe3e6177a8fa8bf679d5f816e7c81ed61a5d69f4a9feff52d422feb8c6a1658a51c8acf6051d25a23f51c67175e016a2a385a13a8e37ec8b811e4340f2db2abec362f64590acd238a702255de62e6af70d9b8a31ea2718883eed8907d0cf95ac527b22678a9463c7e0cd9c0407a4b014abdc3c8", 0xf1, 0x20000080, &(0x7f00000005c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x40) [ 252.213517][ T9854] CPU: 0 PID: 9854 Comm: syz-executor.2 Not tainted 5.4.0-rc7-next-20191115 #0 [ 252.222647][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.232881][ T9854] Call Trace: [ 252.236211][ T9854] dump_stack+0x197/0x210 [ 252.240581][ T9854] should_fail.cold+0xa/0x15 [ 252.245210][ T9854] ? fault_create_debugfs_attr+0x180/0x180 [ 252.251236][ T9854] ? ___might_sleep+0x163/0x2c0 [ 252.256133][ T9854] __should_failslab+0x121/0x190 [ 252.261111][ T9854] should_failslab+0x9/0x14 [ 252.265648][ T9854] __kmalloc+0x2e0/0x770 [ 252.269922][ T9854] ? mark_held_locks+0xf0/0xf0 [ 252.274715][ T9854] ? mark_lock+0xc2/0x1220 [ 252.279154][ T9854] ? _parse_integer+0x190/0x190 [ 252.284106][ T9854] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 252.289858][ T9854] tomoyo_realpath_from_path+0xcd/0x7b0 [ 252.295427][ T9854] ? tomoyo_path_number_perm+0x193/0x520 [ 252.301090][ T9854] tomoyo_path_number_perm+0x1dd/0x520 [ 252.306573][ T9854] ? tomoyo_path_number_perm+0x193/0x520 [ 252.312233][ T9854] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 252.318201][ T9854] ? __f_unlock_pos+0x19/0x20 [ 252.322923][ T9854] ? __fget+0x37f/0x550 [ 252.327095][ T9854] ? ksys_dup3+0x3e0/0x3e0 [ 252.331529][ T9854] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 252.337791][ T9854] ? fput_many+0x12c/0x1a0 [ 252.342233][ T9854] tomoyo_file_ioctl+0x23/0x30 [ 252.347014][ T9854] security_file_ioctl+0x77/0xc0 [ 252.352054][ T9854] ksys_ioctl+0x57/0xd0 [ 252.356226][ T9854] __x64_sys_ioctl+0x73/0xb0 [ 252.360837][ T9854] do_syscall_64+0xfa/0x790 [ 252.365365][ T9854] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.371267][ T9854] RIP: 0033:0x45a639 [ 252.375176][ T9854] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 252.394917][ T9854] RSP: 002b:00007f0c3fff4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.403462][ T9854] RAX: ffffffffffffffda RBX: 00007f0c3fff4c90 RCX: 000000000045a639 [ 252.411884][ T9854] RDX: 0000000000000000 RSI: 00000000800455cc RDI: 0000000000000003 [ 252.420024][ T9854] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 252.428157][ T9854] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0c3fff56d4 [ 252.436160][ T9854] R13: 00000000004c3634 R14: 00000000004d77e8 R15: 0000000000000004 04:19:56 executing program 5: socket(0x200000000010, 0x2, 0x0) mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3f}) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') r0 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x3, 0x1) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001600)=""/4096, 0x1c80}], 0x1, 0x0, 0x2d3}, 0x40012100) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) r2 = socket(0x1e, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg(r2, &(0x7f0000000000)={&(0x7f0000000080)=@can={0x1d, r5}, 0xffffff68, 0x0}, 0x23ccf5e94177420c) recvmsg$kcm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001600)=""/4096, 0x1c80}], 0x1, 0x0, 0x2d3}, 0x40012100) write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) getsockopt$inet_mreqn(r2, 0x0, 0x4, &(0x7f0000000340)={@loopback, @initdev}, &(0x7f00000001c0)=0x160) add_key(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) request_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000100)={0x3, [0x7, 0x0, 0x3]}) ppoll(0x0, 0x0, &(0x7f0000000080), &(0x7f0000000300), 0x8) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x700, &(0x7f0000000000)) r6 = socket(0x1, 0x5, 0x0) fsetxattr(r6, &(0x7f00000000c0)=@known='system.sockprotoname\x00', &(0x7f0000000600)='wlan1#wlan0!(nodevppp0vboxnet1wlan1[posix_acl_accessmd5sum\x00', 0x3b, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer2\x00', 0x160001, 0x0) r8 = socket(0x1e, 0x1, 0x0) sendmsg(r8, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001600)=""/4096, 0x1c80}], 0x1, 0x0, 0x2d3}, 0x40012100) write$binfmt_elf32(r8, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000002c80)={0x0, 0x76, "b4b1d885203b39ce6fb0e839f673e0ade1095105c98104b45201357e7bde3a7c33fe3a3b709cdf84233be1bbc39f2cc402558c9e11c1c92fdf588446e9320b5c17fc83e8e733eebe1bb1f022751eedcae7ee483036310f28a1c0e4c5c31173906daea7b034ace6b309fae00b227dcf8d869d5278a447"}, &(0x7f0000000ac0)=0x7e) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000002d00)={0x0, 0x56, 0x8000, 0x8, 0xa2000, 0x7ff, 0x1f, 0x8, r9}, 0x20) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000740)={0x6, 0x20, 0x380000000000000, 'queue1\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) [ 252.648849][ T9854] ERROR: Out of memory at tomoyo_realpath_from_path. [ 252.681091][ T9853] mmap: syz-executor.0 (9853) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 04:19:56 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) r1 = dup(r0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc040564a, &(0x7f0000000080)={0x1}) 04:19:56 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) 04:19:56 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000000)=@sha1={0x1, "b5c3de81151a751004d90000000001000200"}, 0x3, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) r3 = dup3(0xffffffffffffffff, r2, 0x80000) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@dev, @multicast1, 0x0}, &(0x7f0000000200)=0xc) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x3, r4, 0x13, r0}, 0x10) 04:19:56 executing program 2 (fault-call:2 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455cc, 0x0) [ 252.999215][ T9883] FAULT_INJECTION: forcing a failure. [ 252.999215][ T9883] name failslab, interval 1, probability 0, space 0, times 0 [ 253.042593][ T9883] CPU: 0 PID: 9883 Comm: syz-executor.2 Not tainted 5.4.0-rc7-next-20191115 #0 [ 253.051700][ T9883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.061936][ T9883] Call Trace: [ 253.065270][ T9883] dump_stack+0x197/0x210 [ 253.069639][ T9883] should_fail.cold+0xa/0x15 [ 253.074262][ T9883] ? fault_create_debugfs_attr+0x180/0x180 [ 253.080107][ T9883] ? ___might_sleep+0x163/0x2c0 [ 253.085000][ T9883] __should_failslab+0x121/0x190 [ 253.089971][ T9883] should_failslab+0x9/0x14 [ 253.094597][ T9883] __kmalloc+0x2e0/0x770 [ 253.098873][ T9883] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.105143][ T9883] ? d_absolute_path+0x11b/0x170 [ 253.110107][ T9883] ? __d_path+0x140/0x140 [ 253.114457][ T9883] ? tomoyo_encode2.part.0+0xf5/0x400 [ 253.119980][ T9883] tomoyo_encode2.part.0+0xf5/0x400 [ 253.125320][ T9883] tomoyo_encode+0x2b/0x50 [ 253.129769][ T9883] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 253.135446][ T9883] tomoyo_path_number_perm+0x1dd/0x520 [ 253.140946][ T9883] ? tomoyo_path_number_perm+0x193/0x520 [ 253.147125][ T9883] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 253.152959][ T9883] ? __f_unlock_pos+0x19/0x20 [ 253.157696][ T9883] ? __fget+0x37f/0x550 [ 253.161884][ T9883] ? ksys_dup3+0x3e0/0x3e0 [ 253.166326][ T9883] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 253.172593][ T9883] ? fput_many+0x12c/0x1a0 [ 253.177034][ T9883] tomoyo_file_ioctl+0x23/0x30 [ 253.182066][ T9883] security_file_ioctl+0x77/0xc0 [ 253.187028][ T9883] ksys_ioctl+0x57/0xd0 [ 253.191212][ T9883] __x64_sys_ioctl+0x73/0xb0 [ 253.195827][ T9883] do_syscall_64+0xfa/0x790 [ 253.200441][ T9883] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.206354][ T9883] RIP: 0033:0x45a639 [ 253.210268][ T9883] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 253.230242][ T9883] RSP: 002b:00007f0c40015c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.238690][ T9883] RAX: ffffffffffffffda RBX: 00007f0c40015c90 RCX: 000000000045a639 [ 253.246689][ T9883] RDX: 0000000000000000 RSI: 00000000800455cc RDI: 0000000000000003 [ 253.254680][ T9883] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 253.262678][ T9883] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0c400166d4 [ 253.270973][ T9883] R13: 00000000004c3634 R14: 00000000004d77e8 R15: 0000000000000004 [ 253.345943][ T9883] ERROR: Out of memory at tomoyo_realpath_from_path. 04:19:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @remote, 0xb58e}, 0x1c) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000900)="ba", 0x1, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000002480)=[{{&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000200)=""/225, 0xe1}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 04:19:58 executing program 0: r0 = socket$inet(0x2, 0x479901639a102243, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = add_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x3c0a, r3) r4 = request_key(&(0x7f0000000340)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='mime_typevmnet0ppp1-[]^keyring\x00', r3) keyctl$instantiate_iov(0x14, r2, &(0x7f0000000180)=[{&(0x7f0000000280)="4d294e5ade1fc4a9ffff213c25df3ff9a9d554f2d7db289e4ba07c886acb77a13f596d7b3c3bc6a59aae2005a60f9835add442d85c12ff6ff71ed0e6ff2fe94edc2b4dad2918c09b46fc8eff95500f3c6be747dcb12ce0b011be0a64a749415515962b0f9f8e6e3c37ffc684a57fdb4643488bfdba475c6f6ef27ba7e5a718cbb4af6a496621", 0x86}], 0x1, r4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev, 0x80}, r5}}, 0x48) r6 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x80000000, 0x200000) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000000c0)) dup3(r0, r1, 0x0) 04:19:58 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7ffff000) 04:19:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="4ea9b3847814033fede99923c63fcb257b34bef9ff74a807c2b885e14570f85e10d8403c63b4a7da049884ba4c3610d49e5e29b179d5592d8af3c039c9f7", 0x3e) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="2b9866309d0956aeadd17ff6f981115ba071bb8b", 0x14) fcntl$setstatus(r4, 0x4, 0xa1a3f945407a2941) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000140)=0x0) r6 = syz_open_procfs(r5, &(0x7f0000000100)='net/rt_acct\x00') sendfile(r4, r6, 0x0, 0x10000000000443) r7 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x1c000) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000180)={{{@in6, @in6=@empty}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) 04:19:58 executing program 2 (fault-call:2 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455cc, 0x0) 04:19:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0xa0) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x60000000, 0x80000) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000140)=0x2) [ 254.681774][ T9904] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 254.708792][ T9911] FAULT_INJECTION: forcing a failure. [ 254.708792][ T9911] name failslab, interval 1, probability 0, space 0, times 0 [ 254.723665][ T9905] encrypted_key: insufficient parameters specified [ 254.737405][ T9911] CPU: 0 PID: 9911 Comm: syz-executor.2 Not tainted 5.4.0-rc7-next-20191115 #0 [ 254.746783][ T9911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.756866][ T9911] Call Trace: [ 254.760227][ T9911] dump_stack+0x197/0x210 [ 254.764742][ T9911] should_fail.cold+0xa/0x15 [ 254.769489][ T9911] ? fault_create_debugfs_attr+0x180/0x180 04:19:58 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6c2b) sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff) [ 254.771074][ T9905] ucma_write: process 124 (syz-executor.0) changed security contexts after opening file descriptor, this is not allowed. [ 254.775461][ T9911] ? ___might_sleep+0x163/0x2c0 [ 254.792938][ T9911] __should_failslab+0x121/0x190 [ 254.797906][ T9911] should_failslab+0x9/0x14 [ 254.802425][ T9911] __kmalloc+0x2e0/0x770 [ 254.806680][ T9911] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.813028][ T9911] ? d_absolute_path+0x11b/0x170 [ 254.817981][ T9911] ? __d_path+0x140/0x140 [ 254.822488][ T9911] ? tomoyo_encode2.part.0+0xf5/0x400 [ 254.827866][ T9911] tomoyo_encode2.part.0+0xf5/0x400 [ 254.833069][ T9911] tomoyo_encode+0x2b/0x50 [ 254.837487][ T9911] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 254.843123][ T9911] tomoyo_path_number_perm+0x1dd/0x520 [ 254.848585][ T9911] ? tomoyo_path_number_perm+0x193/0x520 [ 254.854270][ T9911] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 254.860076][ T9911] ? perf_trace_lock_acquire+0xf5/0x530 [ 254.865729][ T9911] ? __fget+0x37f/0x550 [ 254.869889][ T9911] ? ksys_dup3+0x3e0/0x3e0 [ 254.874308][ T9911] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 254.880547][ T9911] ? fput_many+0x12c/0x1a0 [ 254.884966][ T9911] tomoyo_file_ioctl+0x23/0x30 [ 254.889730][ T9911] security_file_ioctl+0x77/0xc0 [ 254.894666][ T9911] ksys_ioctl+0x57/0xd0 [ 254.898823][ T9911] __x64_sys_ioctl+0x73/0xb0 [ 254.903410][ T9911] do_syscall_64+0xfa/0x790 [ 254.907915][ T9911] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 254.913890][ T9911] RIP: 0033:0x45a639 [ 254.917786][ T9911] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 254.937508][ T9911] RSP: 002b:00007f0c40015c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.945934][ T9911] RAX: ffffffffffffffda RBX: 00007f0c40015c90 RCX: 000000000045a639 [ 254.953903][ T9911] RDX: 0000000000000000 RSI: 00000000800455cc RDI: 0000000000000003 [ 254.961870][ T9911] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 254.969837][ T9911] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0c400166d4 [ 254.977859][ T9911] R13: 00000000004c3634 R14: 00000000004d77e8 R15: 0000000000000004 04:19:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @remote, 0xb58e}, 0x1c) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000900)="ba", 0x1, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000002480)=[{{&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000200)=""/225, 0xe1}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) [ 255.029615][ T9914] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 255.055983][ T9911] ERROR: Out of memory at tomoyo_realpath_from_path. 04:19:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0xfffffffffffffff9) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) pipe(&(0x7f0000000540)={0xffffffffffffffff}) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000480)={&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000003c0)=""/183, 0xb7}) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r5, 0x4, "a22941", "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"}}, 0x110) sendmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000003b0000000000000000000000000651fbad60a86cb2da586769175f4742297727f203f9cd6ff041375f9dc72dd71d129b8b8e2921df0a5140b844364b34b9f7965f33648b0242ce820316f77201c1129b8b63469345285caf213cd67ea28b81b8307b29154bad37847696959eb87f256febb599d526e91953153f56b62449fd35a18d03b74dc3e876dd59f7980352fffce59dcde12cd07e6a3b86d578b4459a019d12fcfe6ac1a287d7264c50547fe1dbf34515fff17de362fe14eea9bb414a49738e4e636265d0df914026d0b704b9dbe3374413dc0fc834b47576e09ddf26a73e9297a424ee9051463301bac5c0c39ab8b"], 0x10}}], 0x2, 0x0) 04:19:58 executing program 4: getpgid(0x0) r0 = gettid() r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7fff) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x5) r2 = syz_open_procfs(r0, &(0x7f0000000000)='loginuid\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r3, r3, 0x0, 0x6c2b) sendfile(r3, r2, 0x0, 0x7fffffff) 04:19:58 executing program 2 (fault-call:2 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455cc, 0x0) [ 255.258061][ T9936] Unknown ioctl 9216 04:19:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000340), 0x584, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) bind$vsock_dgram(r2, &(0x7f0000000100)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) 04:19:59 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000001c0)={{0x0, 0xff}}) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x8a000) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='tasks\x00', 0x48, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x4, {0x7fffffff, 0x1, 0xffffffff}}) r5 = socket(0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000001b40)={r6}, 0x8) r7 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r7, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r7, 0xc0c85666, &(0x7f0000000340)={{0x0, @name="7de55c8c200f2fa3bfa0f1451c05df459852e65f25bf3661a8e339b31d95c5e3"}, "20260e68526c9c2788462d7cdef93bb793e9bfbe060d03324ceb938e92f01ffe", 0x811e83463ad0fc34}) r8 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r8, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) getsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000600), &(0x7f0000000640)=0x8) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x410001, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x22000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r10, 0x414, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}]}, 0x24}}, 0x2005c04b) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x2, 0x80, 0x8, r6}, &(0x7f0000000300)=0x10) umount2(&(0x7f0000000680)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000100)={r6, 0xffffffff, 0x0, 0x8, 0x7ff, 0x1, 0x6ef8, 0x80, {0x0, @in6={{0xa, 0x4e23, 0x1000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}}, 0x3, 0x4, 0x200, 0x101, 0x1}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r11, 0x9}, 0x8) 04:19:59 executing program 0: syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) recvfrom$llc(r0, 0x0, 0x0, 0x1, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) getcwd(&(0x7f0000000440)=""/82, 0x52) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x8943, &(0x7f00000001c0)={'nlmon0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000240)={0x10000, 0x29, 0x89}) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket(0x10, 0x2, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1}}, [0x0, 0xa9, 0x100, 0x8, 0x7, 0x0, 0x5, 0x0, 0x0, 0x2, 0x1, 0x10]}, &(0x7f00000003c0)=0x100) 04:19:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="a7724bdef64346bc14b7b0f781d1d3abf9d1a51c4bfce1e77551a8bd678625f508300200000040847bc2fdffe8cd918b035041291559f3ee3a46069062af9680d512f4d8a5c51817c3ff01a1f601000080445d8f244f6be479ffffffffff8756ea7d4865881a000000b90f1d7106f5776f7894ee47382b8811e658a49a0eba9b9d6a05995f5ed199fcf8722be75fa42c080601d48e793d1429196b4d91"], 0x9d) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) sendfile(r2, r3, &(0x7f0000000000), 0x8080fffffffc) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000208, 0x0) socket(0x0, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) geteuid() socketpair$tipc(0x1e, 0x212e23bfec5513ee, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, 0x0) 04:19:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455cc, 0x0) 04:19:59 executing program 3: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x2010, r0, 0x10000000) 04:19:59 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xc}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000200}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0xac, 0x32, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x13, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0xc, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0xe, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xd, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0xb, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7f}]}, 0xac}, 0x1, 0x0, 0x0, 0x810}, 0x2404c002) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="2367aad95331aa233e14a5e55e20f6b6"}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r5}]]}}}]}, 0x4c}}, 0x0) 04:19:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x2, 0x0) 04:19:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x3c0a, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000000)='rxrpc_s\x00', &(0x7f00000000c0)='(!\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES64], 0xb0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="1efcac6c2c1703e7a09bc3971bc05618d57284cd4b64b00b915a84a677b6045f5247bdfb6c9e40f5959ea14d9fd3c7c588f1c2efc2ebec5a47e07d9cc38a54935e71191bae263faba745b651dee148ab5eb200149acd4a", 0x57) fsetxattr$security_ima(r0, 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="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"], 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x513901, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r5 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r4, &(0x7f0000001400)="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", 0x150) sendfile(r4, r5, 0x0, 0x10000) [ 255.927076][ T9970] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 04:19:59 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r1 = request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000001c40)='#\x00', 0xfffffffffffffffc) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r1) request_key(&(0x7f0000000300)='pkcs7_test\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0xfffffffffffffffb) r2 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000000c0)={'.\x00'}, &(0x7f0000000080), 0xfe28, 0xfffffffffffffffb) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x5) socket(0x10, 0x0, 0x0) keyctl$chown(0x4, r2, 0x0, 0x0) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000200)={0x5, 0x200, 0x2, 0x0, 0x15c0, 0xfff, 0x5, 0x200, 0x0, 0x2, 0x7e, 0x10000, 0x6, 0x39, &(0x7f0000000100)=""/92, 0x9, 0x9, 0x1}) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, r2) [ 256.059557][ T9979] encrypted_key: insufficient parameters specified 04:19:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x149000, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000001c0)={0x4, @capture={0x2800, 0x1, {0x9, 0x9}, 0x1000, 0x7f}}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0xff00}, 0x8) [ 256.243623][ T26] audit: type=1804 audit(1574050799.890:33): pid=9979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir912269704/syzkaller.dr3uXF/39/file0/file0" dev="loop3" ino=118 res=1 04:20:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x10, 0x0) [ 256.426588][ T9988] dns_resolver: Unsupported server list version (0) [ 256.448677][ T9979] encrypted_key: insufficient parameters specified 04:20:00 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1d7) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0xffffffff}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 256.497520][ T9990] dns_resolver: Unsupported server list version (0) 04:20:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x4c00, 0x0) 04:20:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000030000000000000008006966623000000000000000000000000064756d6d79300000000000000000000040000000200030000000000000000000697036746e6c30000000000000000000aaaaaaaaaabf0000000000000180c20000000000000000000000f000000070010000a801000069700000000000000000000000000000000000000000000000000000000000002000000000f500007f000001ac141400000007140db6ac28e4f362984d2d3800000000842000000000dce6476f00000000007265616c6d0000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa000000000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a3100000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaa00000000"]}, 0x2b0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r6) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x2530, 0x9}, {0x8, 0x3}], r6}, 0x18, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1b\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x9], [0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8], [0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffafd63bfb, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) creat(0x0, 0x0) r8 = socket(0x10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, 0x0) r9 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r9, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) 04:20:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x61c, 0x8}, 0x0, 0x0, 0x8004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) close(r0) getsockopt$inet_dccp_int(r0, 0x21, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) close(0xffffffffffffffff) openat$urandom(0xffffffffffffff9c, &(0x7f0000000540)='/dev/urandom\x00', 0x20800, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/sequencer\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001800)={0x0, 0x6}, &(0x7f0000001840)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000001880)=@assoc_value={r2, 0x29}, 0x8) 04:20:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x180, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) writev(r0, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) 04:20:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x4c01, 0x0) 04:20:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00090062726964676500000c0002000800050001000000"], 0x3c}}, 0x0) r1 = socket(0x9, 0x1, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x9, 0xd8d, 0x3, 0x6, 0xfffeffff, 0x9, 0x1f, 0xfffffff7, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0xadd0}, &(0x7f0000000180)=0x8) 04:20:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x110, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xffffffffffffff9b) ioctl(0xffffffffffffffff, 0x0, 0x0) 04:20:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5409, 0x0) 04:20:00 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffffffff, 0x88420) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x20, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x14, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r4}, @IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}]]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 04:20:00 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001480)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000014c0)={0x14, r3, 0x125}, 0x14}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9e96403df98fa24b}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x7}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000000) sendfile(r1, r0, 0x0, 0x7fffffff) 04:20:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x61c, 0x8}, 0x0, 0x0, 0x8004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) close(r0) getsockopt$inet_dccp_int(r0, 0x21, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) close(0xffffffffffffffff) openat$urandom(0xffffffffffffff9c, &(0x7f0000000540)='/dev/urandom\x00', 0x20800, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/sequencer\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001800)={0x0, 0x6}, &(0x7f0000001840)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000001880)=@assoc_value={r2, 0x29}, 0x8) [ 257.405673][T10048] netlink: 'syz-executor.3': attribute type 22 has an invalid length. 04:20:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) socket(0x2000000000000021, 0x0, 0x10000000000002) io_setup(0xff, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e", 0x8}], 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000100)={{}, 0xc}, 0x10) socket$netlink(0x10, 0x3, 0x2000000000000c) modify_ldt$read_default(0x2, &(0x7f0000001580)=""/4096, 0x1051) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="1f0000000203193b020007000000068100023b050900030000134042010058", 0x1f}], 0x1) socket$caif_stream(0x25, 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) 04:20:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540a, 0x0) [ 257.473110][T10048] team0: Device gre1 is of different type 04:20:01 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x94) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x20000, 0x0) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000180)) 04:20:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x61c, 0x8}, 0x0, 0x0, 0x8004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) close(r0) getsockopt$inet_dccp_int(r0, 0x21, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) close(0xffffffffffffffff) openat$urandom(0xffffffffffffff9c, &(0x7f0000000540)='/dev/urandom\x00', 0x20800, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/sequencer\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001800)={0x0, 0x6}, &(0x7f0000001840)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000001880)=@assoc_value={r2, 0x29}, 0x8) 04:20:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f00000001c0)={{0x2, 0x0, @reserved="456f83cecd88b4e4792f2c834741b4481c0e76d18e3ed056a19b41db08031caf"}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) write(r3, &(0x7f00000000c0)="240000001a005f001400000600000000070020000000000000050000080003007f00000104050000008d708991992b972811f9a06c6753a202000000000000001cd328c3681da2ddb0efe66b289e2d39962cf8d88673ed000000000000001df98306c7fcef09f793008601777bb672a44df040f153ce07c4ccfa9a360a863900f8c26de0ee80ee58e2b0681d6a9bbdfb4fb4a4e68396b390b3713fbbc25dad3df14ebc3d3990a160d074234a0e4631576366f3b4e0f4e370276a6d1bf0556285c23ae92fe5453e4a8887f02e2bd46d95e68c791c0a7bc2eaa37c6d70cf9731575da15c6078fb9e7f48e915221cf2fcd28e", 0xf1) 04:20:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540b, 0x0) [ 257.792534][T10069] FAT-fs (loop5): bogus number of reserved sectors 04:20:01 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)=0x0) setpriority(0x0, r3, 0x200) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b24, &(0x7f0000000000)='wlan1\x00kM\xaa\xbf\xf6\xa2\xf1\xe0\xb7\xff(M>\xa2\xbcNa+\vb@\x89\x94\x1e\x94\xcd\xeb<\xca\x8fVc^\xdc,\x15\xf1-\xfd\xd9\x8e\xd8\n\x1d\xeeL\xe5\'a\x9e8\xd9[\xf8\xb1\xba\x85\r\xf4\xed\x90\xde\xf6\\\x06\x849UP\xde\xf9\xc5\xe3\xfd\x0f\xfbc\x9cC\xbd+Tc\xd1\x13]\xf8\ntQ)\xa2\xc4x\xc9N3D\xaeI%\xfd\x8ba') 04:20:01 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000080)) sendfile(r1, r1, 0x0, 0x6c2b) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000040), 0x4) sendfile(r1, r0, 0x0, 0x7fffffff) [ 257.836853][T10069] FAT-fs (loop5): Can't find a valid FAT filesystem 04:20:01 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884113, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x246400, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x2, 0x1, 0x40, 0x8, 0x5}, 0xc) pipe2(&(0x7f0000000000), 0x800) 04:20:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540c, 0x0) 04:20:01 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) accept4$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x800) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000240)={0x8, 0xa3, 0x200, 0x2, 0x2}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x101801, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f0000000180)={0x59, ""/89}) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="25bca274769e620aa734fa0095e0d0a18db43915e3a702a9d8aea872943afd874e2f98b579a7186270146d0e02c06cffa8c67cd7dcc6760253ef0b2a20a602210318f8104a27ea57b012d31c34951dc119dac04eab9c68842086234a45fbe202000000000029", 0x66, 0x400}], 0x8b00, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0xfffffffffffffffc) 04:20:01 executing program 4: clone3(&(0x7f00000002c0)={0x50201000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0, 0x15, 0x0, &(0x7f0000000180)=""/205, 0xcd, &(0x7f0000000280)=""/63}, 0x40) r1 = syz_open_procfs(r0, &(0x7f0000000300)='net/if_inet6\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r2, r2, 0x0, 0x6c2b) sendfile(r2, r1, 0x0, 0x7fffffff) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000080)={'netpci0\x00', {0x2, 0x4e23, @multicast2}}) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) [ 258.270909][T10063] FAT-fs (loop5): bogus number of reserved sectors [ 258.340538][T10063] FAT-fs (loop5): Can't find a valid FAT filesystem [ 258.362013][T10100] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (800) [ 258.401648][T10100] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 258.531008][T10105] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (800) [ 258.541080][T10112] IPVS: ftp: loaded support on port[0] = 21 04:20:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540d, 0x0) [ 258.571233][T10105] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 04:20:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000001c0), 0x8) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) close(r2) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x3a) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x82, &(0x7f00000001c0), 0x8) r4 = openat$cgroup_int(r2, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) fcntl$notify(r4, 0x402, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') prctl$PR_GET_FP_MODE(0x2e) sendfile(r1, r5, 0x0, 0x88002) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 04:20:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) getresuid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000540)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='overlay\x00', 0x94, &(0x7f00000006c0)=ANY=[@ANYBLOB="6d657461636f70793d6f6e2c6c6f7765726469723d131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f2c6c6f7765726469723d131377c5fc35d41454d56029598146e6be166e41ad0dbd4054033c72e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f2c6e66735f6578706f72743d6f66662c6d657461636f70793d6f66662c6d657461636f70793d6f6e2c657569643e00"/231, @ANYRESDEC=r3, @ANYBLOB="00000000000b12339d070fdb6553", @ANYRESDEC=r4, @ANYBLOB=',appraise_type=imasig,\x00']) ioprio_get$uid(0x3, r3) ioctl$FS_IOC_FSSETXATTR(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x3, 0x1, 0x5}) truncate(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x40) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r6 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) accept4(r0, &(0x7f00000000c0)=@sco, &(0x7f0000000000)=0x80, 0x800) ioctl$FS_IOC_FSSETXATTR(r7, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) r8 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x330, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e000102000000000000000007000000", @ANYRES32, @ANYBLOB="e1cd291defeab57c304600b5700000e774b406978859a1cbe571c69363f9f95c89de005369906b651a82", @ANYRES16=r9], 0x4}}, 0x0) 04:20:02 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f0000000100)="bd384ce1f54f7c522811c090bbf4ef7b4926a15e53a1bbb46854e2666d3327c6ae8e714ad8116298b6e23a4b036512e680d8864f6e29ae93b95733e5d0164691a37189b857a07bae4ee2995204e470c4c5ae2742f1a98076174e9420fa41857fbd21c794423e7851022eb84c0059c29ec119542880d2e770e56b498dfc425e4fdc7abdf6be20499b8bb6eb267a31a66c683c0feb6ecc488f3a2dc72e6db795aad7b717787df3b8e32eba76dddafc94c432d52ad8d07cc2cd9e3831e868ed4781c75508b8b07196c7b2", 0xfe94, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000080)={'ip6tnl0\x00', {0x2, 0x4e22, @rand_addr=0x2}}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x104eb, 0x11, 0x0, 0x27) 04:20:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540e, 0x0) 04:20:02 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r3 = gettid() r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00'}) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r6 = gettid() sendmsg$key(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRESDEC=r6]], 0x8}}, 0x20004850) r7 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r7) r8 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43", 0x29}, {&(0x7f0000000180)}], 0x2) ioctl$SG_GET_REQUEST_TABLE(r8, 0x227d, 0x0) kcmp(r7, r6, 0x0, 0xffffffffffffffff, r8) r9 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x7, 0x9, 0x2}, &(0x7f0000000380)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfffffffffffffca9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r7, r9, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r10}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r6, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r10}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r10}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r10}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r10}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r10}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r10}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r4, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r10}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r10}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000040)='sit0\x00', r10}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)='selinux\x00', r10}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, r10}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r2, r0, 0x0, 0x16, &(0x7f00000000c0)='wlan1posix_acl_access\x00', r10}, 0x30) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 04:20:02 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) fcntl$setflags(r0, 0x2, 0x1) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="78696e6f3d6175746f2c6c6b7765726469723d2e2f6275732c75707065726469723d2e2f2cb6cb647e17622e726b6469723d2e2f6669717a6cdb0a"]) [ 259.062555][T10112] IPVS: ftp: loaded support on port[0] = 21 [ 259.071261][ T26] audit: type=1804 audit(1574050802.730:34): pid=10140 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir912269704/syzkaller.dr3uXF/44/bus" dev="sda1" ino=16687 res=1 04:20:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540f, 0x0) [ 259.276518][T10147] overlayfs: unrecognized mount option "lkwerdir=./bus" or missing value 04:20:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5410, 0x0) [ 259.303937][ T26] audit: type=1804 audit(1574050802.960:35): pid=10135 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir912269704/syzkaller.dr3uXF/44/bus" dev="sda1" ino=16687 res=1 [ 259.337347][ T7] TX() has been purged, node left! [ 259.391941][T10155] overlayfs: unrecognized mount option "lkwerdir=./bus" or missing value 04:20:03 executing program 5: r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) connect$vsock_stream(r0, &(0x7f0000000240)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f00000000c0)=""/79, 0xffa0) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x182}, "14ae1b366902f2e2", "5aefcf0b2b68b220aaf46f27490ef940", "93108d5e", "e0dc2c8f31ab13af"}, 0x28) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0xa008) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='.\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r4, 0x200004) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x1d000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 04:20:03 executing program 0: r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x2) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00\x00\x00\x00H\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x9c0) 04:20:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5412, 0x0) [ 259.614765][ T26] audit: type=1804 audit(1574050803.270:36): pid=10140 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir912269704/syzkaller.dr3uXF/44/bus" dev="sda1" ino=16687 res=1 [ 259.675742][T10165] ebt_among: wrong size: 1048 against expected 181666836, rounded to 181666840 04:20:03 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = getpgid(0x0) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000000c0), 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x40, 0x4) r3 = syz_open_procfs(r1, &(0x7f0000000080)='fd/3\x00') r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000100)) r6 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000180)={0x81, 0x2, 0x3}) sendfile(r3, r3, 0x0, 0x6c2b) sendfile(r3, r0, 0x0, 0x7fffffff) 04:20:03 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="ae4640326457be1c6241e6c8acf9aa2f8ca5693f2b5c443ffa78c9932a24e862eeb28f2c78d2bd97e46cc281ee23a20aaa7084000000100000000064ae39170ce2ce2d2a1ff944f885a22b00e5e9aaa2f1fa01a0e77a3cb3ad836ee3031c9fbe2d1b2f04c031ab9f24b709e1259ec027caaa3b6b8265db5e2fe1583f3d74402e237f00731957dd32514d40b577a715"], 0x1) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:20:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x4, 0x7, 0xf1a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r0}, 0x3c) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0x0, 0x74c5, 0x100, 0x7}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r2}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r3, &(0x7f0000000380), 0x0}, 0x20) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/co\x00', 0x3fe, 0x0) 04:20:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5413, 0x0) 04:20:03 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r0, r0, 0x0, 0x6c2b) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x800) r4 = socket$caif_seqpacket(0x25, 0x5, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'syzkaller0\x00', 0x1}, 0x18) sendfile(r3, r4, 0x0, 0x8) 04:20:03 executing program 1: r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x400, 0x1c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x1, 0x0, 0x5}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) openat(r0, &(0x7f00000004c0)='./file0\x00', 0x60000, 0xc9) r4 = socket$inet6(0xa, 0x801, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x199400, 0x0) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x1010, r6, 0xffffe000) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) ioctl$SG_GET_TIMEOUT(r7, 0x2202, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x40, 0x0, 0x0, 0x41c1, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0xfd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r8 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) openat$cgroup_procs(r8, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r9 = socket$inet6(0xa, 0x80000, 0xf9) bind$inet6(r9, 0x0, 0xfe62) listen(r4, 0x0) syz_emit_ethernet(0x2014f8a7, 0x0, 0x0) r10 = socket$inet(0x2, 0x1, 0x0) r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x482001, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) pipe2(0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000006, 0x8010, r5, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r12 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r12, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) setsockopt$sock_int(r12, 0x1, 0x6, &(0x7f00000000c0)=0x3, 0x4) r13 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r10, r13, 0x0, 0x80000003) 04:20:03 executing program 0: r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000009000)={@dev, 0x0}, &(0x7f0000009040)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000009080)={@mcast1, @mcast2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9, 0xc6, 0x1, 0x100, 0xfffffffffffff800, 0x100000, r1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x10d, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) r4 = inotify_init1(0x0) dup2(r4, r2) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000000c0)={0x40}) openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000040)=0x7f) r6 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$GIO_FONT(r6, 0x4b60, &(0x7f0000000200)=""/80) [ 260.156708][ T26] audit: type=1800 audit(1574050803.810:37): pid=10164 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16609 res=0 04:20:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5414, 0x0) 04:20:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) recvmsg$can_bcm(r0, &(0x7f0000001b00)={&(0x7f0000000440)=@generic, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000740)=""/187, 0xbb}, {&(0x7f0000000800)=""/203, 0xcb}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/62, 0x3e}, {&(0x7f0000001940)=""/179, 0xb3}], 0x5, &(0x7f0000001a80)=""/92, 0x5c}, 0x2021) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f00000002c0)={&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001c40)=""/164, 0xa4}) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180)=@generic, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000540)=""/213, 0xd5}, 0x80014022) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') write$cgroup_subtree(r2, &(0x7f0000001b40)=ANY=[@ANYBLOB="2d63707520ff92b2f197d86ad80547edb4cd282eaa6ef7ad6224d7b3ecb7b7a2436978ac3aad2814b44d3d3a4a9f842473a457206fcb95c665a50bd1a286b2445614306acda1963025e1dfa600a8713bc838b04a459a4600db8401f170d92ee34e1f04ea91df2bacb934a272caa68cb930f14608493b756c3d164ffa1f3c97a8728bf67e946ec1000000000000000035716ed0be9fb90437e907d4ee63c572a67fb888108744339e535a893509d12bb3d06a2e00000000000000000000ff70d800a631d90b6b405cd7b93b9471a17f6833e4193fd72e8649"], 0x5) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f0000000400)={0x80000000}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$KDDELIO(r5, 0x4b35, 0x1ff) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)='trusted.overlay.redirect\x00', &(0x7f00000003c0)='./file0\x00', 0x8, 0x3) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, [], [{0x5, 0x0, 0xfffffffffffffffd, 0x6fd, 0x8, 0x9}, {0x0, 0x0, 0x5, 0x0, 0x80000001}]}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000240)) 04:20:04 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) chroot(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0xffffffffffff3e99}, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa518d9387a66f53) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x4000) 04:20:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5415, 0x0) 04:20:04 executing program 5: r0 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000480)='memory.stat\x00', 0x0, 0x0) perf_event_open$cgroup(0x0, r1, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = gettid() perf_event_open(&(0x7f0000001640)={0x4, 0x70, 0xb4, 0x8, 0x0, 0x5, 0x0, 0x9, 0x48, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000001600), 0x1}, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}, r2, 0x0, r0, 0x8) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000000c0c0)={&(0x7f000000a880)=@xdp, 0x80, &(0x7f000000c000)=[{0x0}, {0x0}, {&(0x7f000000bec0)=""/121, 0x79}], 0x3}, 0x40) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0xfffffff5) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) recvfrom$packet(r5, &(0x7f00000016c0)=""/4096, 0x1000, 0x40000000, &(0x7f00000000c0)={0x11, 0x1b, 0x0, 0x1, 0x2, 0x6, @random="2d0947d898d6"}, 0x14) write$cgroup_pid(r4, &(0x7f0000000100), 0xda4fff08) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000240)='hugetlb.2MB.max_usage_in_bytes\x00') write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x2000020a5e8, 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x682400, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18001500c9", @ANYRES32, @ANYBLOB="000000f4000000001567400011000000850000001e0000007b450a003b7019fe8825f342e1ffffffff95000033eae68a0cf142492d547922ce322e5c6dacd982e9b623f617282acc51bb4c7dc64f57b99bba7bd88f01e16963015c8865791e69d0df9c75fc6212ae4bcbe5fa4c62250d5511bf8bf6f64a629a886f23a87225fd853c8764a51235dd2a49c5e3c67153e0"], &(0x7f0000000500)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x4, 0xe}, 0x10}, 0x70) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r6, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r7}, 0xc) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r7, 0x80000001, 0x8}, 0xc) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x660c, 0x0) 04:20:04 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x80000101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x534efde5d2bae475) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="80fd02090003", 0x6}], 0x1, 0x0) 04:20:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5416, 0x0) 04:20:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newsa={0x138, 0x1a, 0x801, 0x0, 0x0, {{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x150}, {@in, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 04:20:04 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0xa, 0x802, 0x88) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) write$P9_RFSYNC(r2, &(0x7f0000000200)={0x7, 0x33, 0x2}, 0x7) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2, 0x7}, 0x80, 0x0}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280)}, 0x0) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) write$apparmor_exec(r3, &(0x7f0000000280)={'exec ', 'trusted[-eth1\x1d$cgroup\x00'}, 0x1b) 04:20:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5418, 0x0) 04:20:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x68, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000140)=0x7, 0x4) select(0x40, &(0x7f0000000040)={0x8, 0x7, 0x743, 0x3, 0x0, 0x6, 0x4000000000000, 0xc50d}, &(0x7f0000000080)={0x4, 0xa39, 0x7b589b1e, 0x0, 0x5, 0x5, 0x6, 0x1f}, &(0x7f00000000c0)={0x3, 0x80000001, 0x4, 0x7, 0x6, 0x9, 0x1}, &(0x7f0000000100)={0x77359400}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x7}, 0xc) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x03\x00', @ifru_flags}) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f00000001c0)=0x1) 04:20:04 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x201, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) io_cancel(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x2, r0, &(0x7f0000000040)="e72a82c747a3b68a6e914335eef6f2b47b524866a9fc783b715caadcf2aee32580a460a801c9ffa9eb673d5e3e3e5fbf43dcf1230b44ebbd235cd340da6b9759af17f88e7da492d667983b0d4ce8535fa5", 0x51, 0x1, 0x0, 0x2, r4}, &(0x7f0000000100)) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) sendfile(r1, r2, 0x0, 0x7fffffff) 04:20:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x541d, 0x0) 04:20:05 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0xa, 0x802, 0x88) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) write$P9_RFSYNC(r2, &(0x7f0000000200)={0x7, 0x33, 0x2}, 0x7) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2, 0x7}, 0x80, 0x0}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280)}, 0x0) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) write$apparmor_exec(r3, &(0x7f0000000280)={'exec ', 'trusted[-eth1\x1d$cgroup\x00'}, 0x1b) 04:20:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x541e, 0x0) 04:20:05 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000040)={0x7e, "69fe0f9e8a6a7bed25279bce0ea42f266855a99a1c2591aae4c27a0028d70806f1a2bd09679a4fc5c91168dd0771e840673e482db2c1d7fc8713a9e66619af8f3058372cc14716d74358ea19231bad87a2cc496392dc79154dba0ca0037d65188745171fe136cedd1b9a14e05538d3f1e9efb5f5f56cba816a26007e14a704f3"}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r2, r2, 0x0, 0x6c2b) sendfile(r2, r0, 0x0, 0x7fffffff) 04:20:05 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7f, 0x180) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x1}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8080000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="d801", @ANYRES16=r1, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES64=r0]], 0x3}, 0x1, 0x0, 0x0, 0x20000014}, 0x1) syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@statfs_quantum={'statfs_quantum'}}, {@noloccookie='noloccookie'}]}) [ 261.894601][T10291] gfs2: not a GFS2 filesystem 04:20:05 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x9, 0x200000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3ea, 0xfd, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_config_ext={0x0, 0x9}, 0x0, 0x100000000401, 0xfffffffc, 0x0, 0x0, 0x1f}, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000280)='/dev/rtc#\x00', 0x6, 0x4000) pwritev(r2, &(0x7f0000001600)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f00000002c0)="5a01361ab6d9188b6115068931a4e29fcd25cb6b0fe295fe5d02c83ceb69967d0325545caa6b4fe635431bb4c485b0b05b4afbccd224d0c6b6126951e3e8cbea1c6750", 0x43}, {&(0x7f0000000340)="6e2a6ef68cb99413827b0321b47a2328bed9f3b0205c5e5f", 0x18}, {&(0x7f0000000380)="856c55415ba6f3754921eee430a41bfcffe4b7bb4699c533f38c36ec7deda2cdeaba8795553e8841eb100cac99de4fb6394c05b7ba9a847a64eaea024b7adb61d52b9c3ff5cd327c023c82cc7656830d8db4dc969ccff4c70b6cabe9ec60e74312ce71ac1f307ee9b822a606056e07b9a04827d51bd5d448c83a8d2f8fadd5ce994ce480cc2e1407a9b16bd60774b6797153a46fd019bf0bc93927c7e26816e3b5b646bf1bccecadf7dd52e1107edab51356d08cc3c9ecf51f379953e12b5aed0f457ca8c7403a2a4a9e2a4bc33fa8589d3233b8c1cd6f86", 0xd8}, {&(0x7f0000001540)="221fd1f51cbb080c8408783fc6424ebe9fa750555d4fdc5a4d3df75abd2bab8944bdfcb1c16281dbd2a9d4de0c662d2065f45970ddafd3d64cb22dc650e76140bcbd3d23b88633ea08a0ab92fb58d29b7929baf1eb98105884483f9bd05f04950d7caaa2b446e1d71a3770228dd3b4f6f7f66d3e32412f7577e2d13c08591c2c355ea64296ede476f019d921fbb8082dbd209ed432eb71a7dbbdbd6c143eb1f654b7e3e6d7c6438027dbda2b0c617979d2f000", 0xb3}], 0x5, 0x100) mmap(&(0x7f0000ce2000/0x1000)=nil, 0x1000, 0x200000e, 0x40010, r1, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000000000)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000100)=0x5) r6 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f00000001c0)={0xbd1c000000000, 0x3b, 0x3, 0x10000, 0x2, [{0x8000, 0x10001, 0x1, 0x0, 0x0, 0x10c0}, {0x5, 0x7, 0x101, 0x0, 0x0, 0x200}]}) 04:20:05 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000040)=""/216, &(0x7f0000000140)=0xd8) 04:20:05 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0xa, 0x802, 0x88) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) write$P9_RFSYNC(r2, &(0x7f0000000200)={0x7, 0x33, 0x2}, 0x7) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2, 0x7}, 0x80, 0x0}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280)}, 0x0) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) write$apparmor_exec(r3, &(0x7f0000000280)={'exec ', 'trusted[-eth1\x1d$cgroup\x00'}, 0x1b) 04:20:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x541f, 0x0) 04:20:05 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_STATS_ENABLED={0x8, 0x29, 0x5}]}}}]}, 0x3c}}, 0x0) r0 = socket(0x10, 0x800, 0x0) sendmmsg$alg(r0, &(0x7f0000000180), 0x27a4eaa51029717, 0x0) 04:20:05 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x41}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a800000000000000000000039000900350002000000000019000500fe800010000000dc1338d54400009b84132000000083de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f000000dfaa)="5500000018007f5f00fe01b2a4a280930206000100000001000000003900090035000c", 0x23}], 0x1}, 0x0) r0 = socket(0x10, 0x200080002, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x5, 0x200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 04:20:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x401, 0x400200) read$rfkill(r5, &(0x7f0000000040), 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 04:20:05 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x5) r6 = syz_open_procfs(r5, &(0x7f0000000300)='net\x00') r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x311000, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) fcntl$getflags(r4, 0x408) getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=0x0) keyctl$chown(0x4, r2, 0x0, r8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x18000, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',dfltgid=', @ANYRESHEX=r8, @ANYBLOB="2c76657273696f6e3d39703230303074691f2c657569643e205b53bbd709a93a6437b13941135e68777e929ea3179b03bea85714ae84796b47d5fc06a99a90253ab8e49011107867fa826e8d1e852047c6bce56374cc8782656d75d432c47cc8c595a27facf8acfffd1490ff11b93790344340ca8d608132a8a13bdb7b6aae1a37af025fd02776a91f788b271ce70309c1b313aedaad0676", @ANYRESDEC=0xee01, @ANYBLOB=',dont_hash,uid=', @ANYRESDEC=r9, @ANYBLOB=',uid<', @ANYRESDEC=r10, @ANYBLOB=',mask=MAY_WRITE,\x00']) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r11, r11, 0x0, 0x6c2b) sendfile(r11, r0, 0x0, 0x7fffffff) 04:20:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5420, 0x0) 04:20:05 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x1}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x3934, 0x408000) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x68, r4, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x1f, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x10, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x1f, 0x9, 0x0, 0x200}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10044082}, 0x4000000) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000001c0)=0x400, 0x4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) r7 = getpgid(0x0) syz_open_procfs(r7, &(0x7f0000000240)='net/ip6_flowlabel\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000004480)=""/245, 0xf5}], 0x1}}], 0x1, 0x0, 0x0) writev(r6, &(0x7f00000023c0), 0x1000000000000252) 04:20:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) dup2(r0, r1) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0xc) openat(r2, &(0x7f0000000300)='./bus\x00', 0x40000, 0x1) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000240)={{0x0, 0x1c9c380}}, &(0x7f00000002c0)) r3 = msgget$private(0x0, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x4e23, 0x0, @rand_addr="58a43816785b3bb640974e3232cd2fae"}, @in6={0xa, 0x4e22, 0x7f, @empty, 0x1}, @in6={0xa, 0x4e22, 0x7, @remote, 0x2}, @in6={0xa, 0x4e22, 0xdbf, @rand_addr="9f288eacfc5618a7cce8037f4ad2794f", 0x7fff}, @in6={0xa, 0x4e24, 0x1000, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x73a0}], 0x8c) msgctl$IPC_RMID(r3, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x182ae55aba894ae2) 04:20:06 executing program 0: r0 = socket(0x1, 0x800, 0x8c) bind(r0, &(0x7f0000000100)=@generic={0x11, "00000f0000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a01ffc2c65400"}, 0x80) write$binfmt_aout(r0, &(0x7f0000002340)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88}, "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", [[], [], [], []]}, 0xff0) 04:20:06 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) pidfd_send_signal(r2, 0x3c, &(0x7f0000000240)={0x3e, 0x7fffffff}, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000040)=""/219, 0xdb}, {&(0x7f0000000140)=""/67, 0x43}, {&(0x7f00000001c0)=""/63, 0x3f}], 0x3) sendfile(r1, r0, 0x0, 0x7fffffff) 04:20:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5421, 0x0) 04:20:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x88, &(0x7f0000000180)={0x0, 0xfffffffffffffede}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000002400070500000000000080001d6b5cd1", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70000800020000000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0xffffffffffffff31, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000002400070510000b000000000000000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000002400080000000000000000000000000000020037cdbf89d5e00c5a6d4f6dca2d4859d4fe57b9c1ec5a505149ed0095b0b7e9910efd3e9e037e28e100"/83], 0x48}}, 0x0) 04:20:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5422, 0x0) 04:20:06 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x800, 0x5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000013003586000000030000000007000000", @ANYRES32=r4, @ANYRES32], 0x3}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 04:20:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xa0c, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000100)) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000001380), &(0x7f0000001400)=0x6e, 0x80000) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000001440)={r4, 0x8}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x4, {0x7fffffff, 0x1, 0xffffffff}}) r7 = socket(0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000001b40)={r8}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x2, 0x80, 0x8, r8}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r8, 0x6, 0x20, 0x20}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000240)={r9, 0x96, "d685dbdcb3412959d85ad451c142f092c120fc88d204c6285312d9a6643bfa623f78a49bf9f253029e05ab3243f7308d6e3ae7d5acd97a0eec57112d7b1a3062f6f0354f50f67908c8859794ba1b768f2c74f0f7fbfbf1b5913a10b48d4323879f4c61aedb27570de17de3ea216eed2887e87dcb68d060b8e9b8a12ced4245068e3813852501b7f63c6c087fc0b37673877936486e25"}, &(0x7f0000000300)=0x9e) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f00000000c0)={0x1f, 0x7b12, 0x0, 0xf, &(0x7f0000000000)=""/15, 0x1000, &(0x7f0000000380)=""/4096, 0x51, &(0x7f0000000040)=""/81}) 04:20:06 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000000)='loginuid\x00') accept4$x25(r1, 0x0, &(0x7f00000000c0), 0xc0000) sendfile(r3, r3, 0x0, 0x6c2b) sendfile(r3, r0, 0x0, 0x7fffffff) 04:20:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000002c0)=@nat={'na%\x00', 0x19, 0x1, 0x1e0, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x258) 04:20:06 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) getpid() sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x158}}, 0x24000141) sched_setscheduler(0x0, 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000000604020225bd7000fedbdf250e00000812630f873113b4f38db2f2bfb0ab463b50fde0f6c9b218d59d0fe9eb15848508f5a34fcd66dd6bb2982e4f2c607e2899a8bafcae5bfb7d63520006014fadf8fd6fa7eb950eca22b09d6fdcbe7315361187ac53482663f9536d7af0296b81e81bc3ae72f4a71d3ffc8febde660e2aa752744ab5abf7ede4889198a61f0c4771f657bd411482e12143d092dd78ea9d218a6b1b54b15137b66ee69c4adceb0d429742bfb31a55825b91b939e9b2f5119c9232b77c92731449e25463762e3de8f83a8c8c24986429d1"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x8082) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x40000000) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) syncfs(r1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x12a0, 0x1) 04:20:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5423, 0x0) 04:20:06 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000040)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='team0\x00', 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r2, r2, 0x0, 0x6c2b) sendfile(r2, r0, 0x0, 0x7fffffff) [ 263.111361][T10365] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.220242][T10385] IPVS: ftp: loaded support on port[0] = 21 [ 263.222584][T10383] x_tables: eb_tables: snat target: only valid in nat table, not na% [ 263.247511][T10365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 04:20:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5424, 0x0) [ 263.292790][T10365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 04:20:07 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r2, 0x0, 0x1, &(0x7f0000000040)='\x00', 0xffffffffffffffff}, 0x30) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r4, 0x0, 0x9, &(0x7f00000000c0)='loginuid\x00', 0xffffffffffffffff}, 0x30) r6 = socket$pppoe(0x18, 0x1, 0x0) r7 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) kcmp(r3, r5, 0x4, r6, r8) sendfile(r1, r0, 0x0, 0x7fffffff) 04:20:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5425, 0x0) 04:20:07 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0x10) socket(0x1e, 0x4, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000000)={@remote, @initdev}, &(0x7f0000000080)=0xc) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7e, 0x40, 0x3}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) dup2(r3, r4) 04:20:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0x8, 0x2, [@tunl_policy=[@IFLA_IPTUN_COLLECT_METADATA={0x4}]]}}}]}, 0x38}}, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='team0\x00') 04:20:07 executing program 0: mkdir(&(0x7f0000000600)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/343], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl='posixacl'}]}}) 04:20:07 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) sendfile(r3, r5, 0x0, 0x6c25) sendfile(r1, r0, 0x0, 0x7fffffff) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f00000000c0)={0x200000000000000, 0x1, 0x800, 0x2, 0x4}) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000080)=[0x2c7f, 0x2]) 04:20:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5427, 0x0) 04:20:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x5, 0x1, 0x80, &(0x7f0000ffd000/0x1000)=nil, 0x1ff}) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000780)="0f8de6669ba9e6ee2e83bff9d261899bb647ca4787aa105bd2e9b35c0663c7e556e25f7b584c7916398cccb30d721747816fb152b163a79d46502ffe9793c24c5ede953501adc585db", 0x49}], 0x1}}], 0x1, 0x0) [ 264.123960][T10387] IPVS: ftp: loaded support on port[0] = 21 [ 265.268552][ T7] TX() has been purged, node left! 04:20:11 executing program 3: r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000066b92f1affbdb3ac78f3ef6ae3ba431d43d9d384d04c1c78474392dc899cccb487a7d26f881e238c9e501c86b67193548ac2bab01229f1d1098665c1130bce84c505af8a128a34aafc706741c8d059b75b480db81cc2a6abd93761daf4844376989649c92a4c06775a44a3fe1829ff8cedd3c371792ca3be4cea7370c7cf34b2978deafb53242055a262aa9ef4c9b934c412bb13cc8faefe0971a4de0f34891b16c8678be46a652e70f0ed5d88a377e2d667ed209bedca337a3949e3fc73381d22fd2d5e38f7425940e89fdad3e64948819e46242a1f83d09828226279432d263f4b665098c3adae0b29047c91de398025b780f2885d10b8"], 0x48) 04:20:11 executing program 0: sync() r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) syz_mount_image$reiserfs(&(0x7f00000000c0)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x342, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) 04:20:11 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x2, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) sendfile(r1, r0, 0x0, 0x7fffffff) 04:20:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5428, 0x0) 04:20:11 executing program 1: close(0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(0xffffffffffffffff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$sock_x25_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@null=' \x00', 0x6, 'ip6_vti0\x00'}) r4 = dup(r1) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x2000000000000000) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) writev(r5, &(0x7f0000000800)=[{&(0x7f00000003c0)="00f1562d645aaeeb46095c6b91578711edaf77fbd791cdee4913d559a0905bbf0f2c188da10943147fdd0a9b6349ee3fb26ab8465ebb44882538e28e837348bced61b67d2711ee76396419509f1a965e01528a2b5d", 0x55}, {&(0x7f0000000440)="338955bde91e598d72d86893baec2c7f4dc19eae32532632611dfad1eb037ab94eddf93fa6195b63431a9a847fe78628e4cfc085d7f898a8cd03da9ced23f148c22341ef3f359d78a91535f8d4d678bed6c71c2eb36a7cd48cbbe934be197a785aca", 0x62}, {&(0x7f00000004c0)="fd1382c8035237aa803caa89cc0628bdf372f2d13e0e388a93edb6a418b2b0c5148254bdb788d6dd509952de76023e1ba7e877c59222225f5a4dc8d84c7a45a8b8b8779f302a5b811ce2c1898f257ac01105183349500d", 0x57}, {&(0x7f0000000540)="ab20cdf3cf6538bc", 0x8}, {&(0x7f0000000580)="f62fb3fc933d767a300894ea0e4fa51b8a7a79cc5fa378e04f8847de39cec18b51196032eb31750da6163024e2bb46fad28a68eae10b3c93db8e856ee27b5cfd43e0282756e9194cfae286", 0x4b}, {&(0x7f0000000600)="8113bb726459feb494b4c7e59a4353abf312e36ea5301d78b433b3ca713066fa1bcf7b277d42dd99f7f3ff599fb70f773ecc4c3b4afc0b05780f11b13d96bf34f87211106549b978e64a58347b4db9b6e55529cf6818eefa5175e9ab88821a96d7c6a464552d5804458adadf55abba262e4b260bd08d79ae82443c2507d35f973f9d20bd85961ce6c4530b028e0f576e6340aba30be9827751198b342471901b0ce0e0cfbad9a3ef0f1f9dc33a65082852db8762b6501ac22109f0ff92bdd0169d0f8a5b526733d96b07064f722e7d2c56af56eee56b3d33c593", 0xda}, {&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000000700)="7f3ea4706b891932b8f56390a55554de66905926d8bb4882981391ac3344782debf5072e8be42368f85b0fc16a89a5339f8de5a9dab3f83e69ab6bd9f46c9f1075ef36aaf803621ff48b45548ead3a3a7760e0fff318f93497d52fdf515d580350757ac5790da03c77bf60b5b225ec3ca541abde7cf0eff02513d0540546a5ac8696328e466ca82476dee7b2ca5c0db6e180d459bcb972c615939fd3d8d220b314b5cb265bb5178094503a520ff6699d91e5bf233cf9b32fdbf78518cd4d0dbc31a402ed3b02a5cf4f28627e", 0xcc}], 0x8) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x110, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc21}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @empty}}}}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5f40}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x80}, 0x20001002) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000280)) 04:20:11 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) signalfd(r2, &(0x7f0000000000)={0x9}, 0x8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) 04:20:11 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) write(r1, &(0x7f0000000040)="3374a444ab7951ca1bbd9076a9acaa4cc5762064ff22080190523a620108fd09f7c889181afa", 0x26) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r2, r2, 0x0, 0x6c2b) sendfile(r2, r0, 0x0, 0x7fffffff) [ 267.866015][T10456] IPVS: ftp: loaded support on port[0] = 21 04:20:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5429, 0x0) 04:20:11 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x144}}, 0x0) r0 = socket$inet6(0xa, 0x8000008000080003, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011003586000000030000000007000000", @ANYRES32=r1, @ANYBLOB="00000005000000000c001a000800020000000400"], 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@nat={'nat\x00', 0x1b, 0x5, 0x508, 0x350, 0xe0, 0x0, 0x470, 0x350, 0x470, 0x470, 0x470, 0x470, 0x470, 0x5, &(0x7f0000000180), {[{{@ip={@broadcast, @local, 0xff, 0xffffffff, 'veth1\x00', 'veth0_to_team\x00', {}, {0xff}, 0x67, 0x1, 0x8}, 0x0, 0x98, 0xe0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv4=@multicast2, @ipv6=@local, @gre_key=0x6, @port=0x4e20}}}, {{@ip={@remote, @rand_addr=0x10000, 0xffffffff, 0x0, 'bridge0\x00', 'ip6erspan0\x00', {}, {}, 0x6, 0x1, 0x12}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@conntrack1={0xc0, 'conntrack\x00', 0x1, {{@ipv6=@loopback, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffff00, 0xff, 0xffffffff, 0x7f000000], @ipv4=@rand_addr=0x7ff, [0xffffff00, 0x0, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0x0, 0xff, 0xffffff00], 0x0, 0x101, 0x48, 0x4e21, 0x4e21, 0x4e22, 0x4e22, 0x100, 0x282}, 0x100, 0x4620}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xc, @ipv6=@dev={0xfe, 0x80, [], 0x18}, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @icmp_id=0x68, @port=0x4e24}}}, {{@ip={@multicast2, @remote, 0xffffffff, 0xffffff00, 'bridge_slave_0\x00', '\x00', {0x80}, {0xff}, 0x62, 0x1, 0xa}, 0x0, 0x98, 0xd0}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xf, @local, @multicast1, @gre_key=0xc000, @port=0x4e24}}}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x2, 0x1, 0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @gre_key=0x6, @port=0x4e24}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x568) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 04:20:11 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) 04:20:12 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x5, 0x0, 0xfa4c253c102c9e0d, {0x9, 0x7f, 0x4, 0xfffffffa}}) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000b40)=[{&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @rand_addr="e10c8ffd9d48c5ddcbac3b70d4ec45c6"}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000002c0)="fd", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000eca4f5d10008000000000000002000000000000000840000000800000000000000000000000000ffffac1e0001"], 0x38}], 0x1, 0x20000040) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x20000, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) 04:20:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5437, 0x0) [ 269.051830][T10456] IPVS: ftp: loaded support on port[0] = 21 04:20:13 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x80000000, 0x0, "e8c20db874b69cbebe13a8647f001747fd6384688faca598913baf13eb4b6772"}) 04:20:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5441, 0x0) 04:20:13 executing program 4: syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x480) sendfile(r1, r0, 0x0, 0x7fffffff) 04:20:13 executing program 0: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x5) r1 = syz_open_procfs(r0, &(0x7f0000000180)='net/rpc\x00') ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f00000001c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x4, 0x80000001, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xcff9d414d0bc00e7, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x22, 0x2, 0x4) r3 = socket(0x4, 0x800, 0x1) dup2(r2, r3) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x82f1, 0x0, "1eacaecab96e11b8f98911d8303bb746a466eddb28d746ddd782bc803c250217467cc5908d742a92747e98574b597ceb631abad0a8fb5b80f89509efb85a32d7402a495e57cfd97943ce5a3f0f1e6abd"}, 0xd8) 04:20:13 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x534c, 0x40) getsockopt$inet6_dccp_int(r0, 0x21, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) chdir(&(0x7f0000000080)='./file0\x00') r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x9) rmdir(&(0x7f0000000000)='./file0\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 04:20:13 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) signalfd(r2, &(0x7f0000000000)={0x9}, 0x8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) 04:20:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5450, 0x0) 04:20:13 executing program 0: prctl$PR_SET_TSC(0x1a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x30, r3, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x1) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "94896bc7308e00ff", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x40, 0x0, 0x0) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000000)={{0x9}, 0x81, 0x9, 0xdd, 0xef93857, &(0x7f0000000280)="840bfcaab155aa87e215fd60cce9cd108d5953bb948c7cdae4fcc39877f98523b8b27740cd619857c929ee15841cd671a3ba78c2b95473cb97b937e8211041b524a13c2730780815822fa75cf0f10fb1ce35e2115d1623863d8ca416adc2d39531da7510fc50c6325d370bac542be35eead50a1bfb6ddead7a6d7a179e71f0436900b3123efdc0efb71170c367e241fc7745612b128bb52aa8982387b399147d9735ad10b2e1bb4bbc474a35c20e14566ecd2db4e8f136f25268b7b4da55216653786616933af34c0be7d186a7f2a667333b424fa8e2c03ac980e3c7cd"}) 04:20:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x301000) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x22a000, 0x0) openat(r3, &(0x7f0000000300)='./bus\x00', 0x40400, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) ioctl$IMHOLD_L1(r4, 0x80044948, 0x0) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)={r5}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x2302, 0x0) ioctl$SG_GET_ACCESS_COUNT(r6, 0x2289, &(0x7f0000000240)) socket(0x10, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xff0e) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r7 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r7, &(0x7f0000000280)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000000040)=0x9) sendfile(r1, r4, 0x0, 0x80001d000010) r8 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r8, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) fcntl$F_SET_FILE_RW_HINT(r8, 0x40e, &(0x7f0000000340)) 04:20:13 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000080)='-{\x00') fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='loginuid\x00', 0x0, r3) sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) 04:20:13 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x50, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="880e9dae4b4c966aed653e2fbb55f0c2"}]}]}, 0x50}}, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000080)=[0x9bf6, 0x1ff], 0x2, 0x80f3, 0x4, 0x4, 0x5, 0x9870, {0x101, 0x6, 0x5, 0x101, 0x522d, 0x3, 0xac, 0x4, 0x8, 0x8, 0x0, 0xbf, 0x200c5, 0x7a9, "eb9711cb4d8807a90510d25b068acb62c6874382ef027222076757f2c14f3222"}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 04:20:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5451, 0x0) 04:20:13 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02e23e042231a03a1dccbe17ff2a84330995cc6170"], 0x15, 0x0) sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) [ 270.102227][ T26] audit: type=1800 audit(1574050813.760:38): pid=10530 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16745 res=0 04:20:13 executing program 1: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xef1f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x7}, 0x10) sendmmsg(r0, &(0x7f00000001c0), 0x400000000000150, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$9p(r4, &(0x7f0000000800)="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", 0x5e8) sendfile(r4, r5, 0x0, 0x10000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0x0, r7}}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000540)={0xddd35a8203c52752, 0x0, @pic={0x81, 0xff, 0x7, 0x7, 0x3f, 0x85, 0x6, 0x1f, 0x6c, 0x46, 0x1, 0x80, 0x1, 0x8, 0x12, 0x80}}) getgroups(0x1, &(0x7f00000001c0)=[r7]) write$FUSE_ENTRY(r4, &(0x7f00000003c0)={0x90, 0x2, 0x6, {0x0, 0x3, 0x1, 0xcd720000000000, 0xcf, 0x3, {0x3, 0x1, 0x200, 0x8, 0x1, 0x3f, 0xe62, 0x4, 0x6, 0xdd6, 0x0, 0xee01, r7, 0xe7, 0xffff8000}}}, 0x90) write$9p(r2, &(0x7f0000000800)="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", 0x600) sendfile(r2, r3, 0x0, 0x10000) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @local}, &(0x7f0000000140)=0xc) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x1d, r8}, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="01200000040c00004000000000000000", @ANYRES64=r9, @ANYRES64=r10/1000+10000, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="ab0e868a8f4043e2938c278706d80d87c04978351888e023d6fc0f5d157865d8182aa1f296fedee5a462d5cbcabd9a564feab204535b31199e201c38540aa64b67"], 0x6}}, 0x4000001) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xe4, 0x20001) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000040)={0x7, 0x2}) r11 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r11, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) vmsplice(r11, &(0x7f0000000000), 0x0, 0x6) 04:20:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5452, 0x0) 04:20:13 executing program 0: prctl$PR_SET_TSC(0x1a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x30, r3, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x1) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "94896bc7308e00ff", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x40, 0x0, 0x0) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000000)={{0x9}, 0x81, 0x9, 0xdd, 0xef93857, &(0x7f0000000280)="840bfcaab155aa87e215fd60cce9cd108d5953bb948c7cdae4fcc39877f98523b8b27740cd619857c929ee15841cd671a3ba78c2b95473cb97b937e8211041b524a13c2730780815822fa75cf0f10fb1ce35e2115d1623863d8ca416adc2d39531da7510fc50c6325d370bac542be35eead50a1bfb6ddead7a6d7a179e71f0436900b3123efdc0efb71170c367e241fc7745612b128bb52aa8982387b399147d9735ad10b2e1bb4bbc474a35c20e14566ecd2db4e8f136f25268b7b4da55216653786616933af34c0be7d186a7f2a667333b424fa8e2c03ac980e3c7cd"}) 04:20:14 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x5) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x5) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000000)='loginuid\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') ioctl$TCGETS(r3, 0x5401, &(0x7f0000000040)) sendfile(r4, r4, 0x0, 0x6c2b) sendfile(r4, r3, 0x0, 0x7fffffff) [ 270.384491][ T26] audit: type=1800 audit(1574050814.040:39): pid=10559 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16753 res=0 [ 270.464135][ T26] audit: type=1804 audit(1574050814.090:40): pid=10564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir135452690/syzkaller.YotJMd/55/file0" dev="sda1" ino=16753 res=1 [ 270.592334][ T26] audit: type=1804 audit(1574050814.110:41): pid=10559 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir135452690/syzkaller.YotJMd/55/file0" dev="sda1" ino=16753 res=1 04:20:14 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x2000)=nil) sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) 04:20:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2600000013003ff1eb14c1f8030322ff0c1000e313000000093903680000000006000300124b", 0x26) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f00000000c0)={0x14c2, 0x1e, [{0x5}, {0x0, 0x1}, {0xd}, {0xc, 0x1}, {0x3, 0x1}, {0x9, 0x1}, {0x9}, {0x6}, {0x6, 0x1}, {0x2}, {0x8, 0x1}, {0x16, 0x1}, {0x4, 0x1}, {0x6}, {0x4}, {0x3}, {0x4, 0x1}, {0x9}, {0xd}, {0xf}, {0x4, 0x1}, {0x8}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0xd, 0x1}, {0xc}, {}, {0x1}, {0x3}]}) 04:20:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x545d, 0x0) 04:20:14 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x3, 0xbb5}, 0x10) write(r0, &(0x7f0000000000)="2000000012005f0214f9f40700000000800200"/32, 0x20) [ 270.757605][ T26] audit: type=1804 audit(1574050814.170:42): pid=10564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir135452690/syzkaller.YotJMd/55/file0" dev="sda1" ino=16753 res=1 04:20:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvmsg$kcm(r0, &(0x7f0000000ec0)={&(0x7f0000000a40)=@hci, 0x80, 0x0, 0x0, &(0x7f0000000dc0)=""/224, 0xe0}, 0x10000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0x6d356) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x1, 0x4, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0xfff}, 0x0, 0xbfffffffffffffbf, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xcb8, 0x0, 0x1}, 0x3c) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000540)=ANY=[@ANYBLOB="abe70080ffff004036965fe32c9b3ea5ee5d992cc2b95daa4f586a45e74c65475c50dac46a3c78c14b6f4642f3191a3158c36b15776b248917d2467f3631da80419d9222d5ca84874e391dbf3127a01f5e4c599202cc9e299925aff281ffa8e3803999d3974f9200002d34"]) recvmsg$kcm(r2, &(0x7f0000000ec0)={&(0x7f0000000a40)=@hci, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000840)=""/23, 0x17}, {&(0x7f0000000c00)}, {&(0x7f0000000c40)=""/8, 0x8}, {&(0x7f0000000c80)=""/196, 0xc4}], 0x4}, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0xfedb) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x0, 0x0) r4 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000014c0)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x51f1c3207f3e47f3, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, @perf_bp={&(0x7f0000000400)}, 0x24800, 0x0, 0x0, 0x0, 0x0, 0x64}, r4, 0xd, 0xffffffffffffffff, 0xd) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) perf_event_open(0x0, 0x0, 0x0, r5, 0x3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = socket$kcm(0xa, 0x8000000001, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000840)=""/23, 0x17}, {&(0x7f0000000c00)}, {&(0x7f0000000c40)=""/8, 0x8}, {&(0x7f0000000c80)=""/196, 0xc4}], 0x4, &(0x7f0000000dc0)=""/224, 0xe0}, 0x10000) recvmsg$kcm(r6, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, 0x0, 0x0) r8 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80360000005e510befccd7", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x22, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fffffeff00000000040000000369020000000010950000000000000020c57aada1c6ca710663fca7c5443819d094b51f2d513fc6003d98f19401c61412a97e90938c4b85b08d4338c4316c46512a2b061a7e5e3da37e462686f35ccd475d67b5d437eb492c2eb0636b3ffe296cca5378e3cbf5f99962726f7b4dcd33fc6bf52ffa7867dcadb0"], &(0x7f0000000080)='GPL\x00', 0x7ff, 0x26, &(0x7f00000000c0)=""/38, 0x0, 0x1, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0xffff}, 0x10}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r9 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, 0x0) 04:20:14 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) bind$packet(r4, &(0x7f0000000000)={0x11, 0xd, r7, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="030400306c00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) 04:20:14 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) sendfile(0xffffffffffffffff, r0, 0x0, 0x1) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x2, 0x0) sendfile(r4, r6, 0x0, 0x1) 04:20:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5460, 0x0) [ 270.958661][T10578] K: renamed from caif0 04:20:14 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f00000000c0)={r6, 0x9}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x480002, 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 271.088557][T10578] device K entered promiscuous mode [ 271.123053][T10578] A link change request failed with some changes committed already. Interface K may have been left with an inconsistent configuration, please check. [ 271.149924][T10595] netlink: 'syz-executor.3': attribute type 29 has an invalid length. 04:20:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x6364, 0x0) [ 271.287211][T10595] netlink: 'syz-executor.3': attribute type 29 has an invalid length. 04:20:15 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x5) r1 = getpgid(r0) r2 = syz_open_procfs(r1, &(0x7f0000000180)='net/icmp6\x00\xd4\xd0Q\x9e3:\x92\x81\xd2\x03\x85\xa4\xa7\xa6\xb4\x13\x97u\xc2\xdf\xa3\x10\xa6\xd8_\xeb\x8e\xd9@-0x>\x1f\x84\x02\xcbv\xdb\x1c\xff\xf8\x1e\xe6@\xe3\x0e\xf4K\x0f+b\'\x88p\xcc\xb77c\xbf\x9e\xed!\xb1\x83\xd7\x10?{xu\xaa\xda3\xf8;e^\xc0\xf3\xbce\x8c\x03#S\xe8\xb1W\x91\x84~hY\x01\xee\xc0\xb7U\xa2\x1aKz\x83\x01(\x1b_+\f`\xfbX\xff\xa0W\xebi\x12\xf7\xbd\xde_G\xac\xe2\xee\xd2u\x0e\v_\xb6\xdc\a\xced\xba\x9e\x1doA1\xb4\xb9\xa8\xe3\xbcN\x8d\xfc{ak\x04Z\x1d\xc69b\x17\xcf\x00\xb0\xc0H\xd1e\xea\xe37\xef\x8b\xda\xa5\n\xecR\xd0') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r3, r3, 0x0, 0x6c2b) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000040)=""/210) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) gettid() io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r8, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$EVIOCGRAB(r8, 0x40044590, &(0x7f0000000340)=0x34) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) io_pgetevents(r7, 0x9, 0x1, &(0x7f0000000140)=[{}], &(0x7f0000000280)={r9, r10+10000000}, &(0x7f0000000300)={&(0x7f00000002c0)={0xffffffff}, 0x8}) sendfile(r3, r2, 0x0, 0x7fffffff) [ 271.430105][T10578] A link change request failed with some changes committed already. Interface K may have been left with an inconsistent configuration, please check. 04:20:15 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040)=0x81, 0x4) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', r6}) connect(r3, &(0x7f00000000c0)=@xdp={0x2c, 0x6, r7, 0x3e}, 0x80) 04:20:15 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r1 = inotify_init() dup2(r0, r1) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 04:20:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7eecdb0b6300000c630000a8659f7cc51dcfb17967175b3bcc4b4f21b050cb17a14acdf4f9033cfde74aab8b3561fd616ff90309054a25f5f5fa5ef33b6b044cff26ab99120e0a8f79"], 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000000)=@buf={0x5d, &(0x7f0000000080)="342b68eddc9c3df5fc5ff077a6192efb911d6bf8a3633c6740c3a0387d8674359a133bc3894458c4785310755091f4232c830ba03c7f321702a72c3f01ad589b2f78bce59776aa7798604acebdfa38aceb7c9b30094d4d48240898b477"}) 04:20:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x8912, 0x0) 04:20:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) bind$packet(r4, &(0x7f0000000000)={0x11, 0xd, r7, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="030400306c00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) [ 271.652938][T10623] binder: 10619:10623 unknown command 198962302 [ 271.740535][T10623] binder: 10619:10623 ioctl c0306201 20000600 returned -22 04:20:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x18d, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f00000000c0)=0x3) r2 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) readv(r2, &(0x7f00000007c0), 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0x38a, 0x0}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000680)={{0x4, 0x5000, 0xd, 0x9, 0x3a, 0x1f, 0x1, 0x0, 0x0, 0x9, 0x0, 0x80}, {0x2, 0x10000, 0x0, 0x5, 0x8, 0xfe, 0x7f, 0x3d, 0x22, 0x0, 0x4, 0x1e}, {0x0, 0x4, 0xe, 0x0, 0x5, 0x2, 0x3, 0x3f, 0x0, 0x6, 0x0, 0xff}, {0x5000, 0x4, 0x0, 0x0, 0x0, 0x4e, 0x1, 0x2, 0x0, 0x5d, 0x1}, {0xd000, 0x5000, 0x10, 0x6, 0x0, 0x7f, 0x3, 0x17, 0x9, 0x80, 0x0, 0x40}, {0xd000, 0x2, 0x0, 0x40, 0x90, 0x1, 0x1f, 0xfd, 0x6, 0x0, 0x4}, {0x0, 0x5000, 0x9, 0x80, 0x6, 0x3, 0x9, 0x0, 0x80, 0x8, 0xd9}, {0x8c004, 0x100800, 0xb, 0x0, 0x0, 0xfc, 0xc, 0x3, 0x0, 0x2, 0x6, 0x1}, {0x100000}, {0x104000, 0x1000}, 0x10000, 0x0, 0x4000, 0x0, 0x8, 0x1000, 0x2, [0x0, 0x0, 0x7d7f, 0x100]}) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000001c0)=0x4, 0x4) [ 271.786650][T10623] binder: 10619:10623 unknown command 198962302 04:20:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ftruncate(r2, 0xee) ioctl$FS_IOC_FSSETXATTR(r3, 0xc0189436, &(0x7f0000000040)={0x0, 0x1, 0x2, 0xb93, 0x0, 0x5}) write$binfmt_misc(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/264], 0xfc) r4 = dup(r0) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000000)=0x9) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000c00010062721bc4d0cbd100"/36], 0x3}}, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.SMACK64IPOUT\x00', &(0x7f0000000140)='#&\x00', 0x3, 0x1) [ 271.838393][T10623] binder: 10619:10623 ioctl c0306201 20000600 returned -22 04:20:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x8933, 0x0) 04:20:15 executing program 5: syz_read_part_table(0x800, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="0201a9ffffff00000000ff0700000000000055000800000014f4ffff0040000000006300000000040040886700720030b5829237c300000000000080000055aa1f1be2179fe0b4598842853097c031fa63558ad7c4f6e2900439b8f21c924e23acc5302c700d1c08ffaceddd1a8a77720f0972504c067331105040829c7204285fe7711cad643c93fbcbc7dc2370a6257204137ddf2c22ee3cfe22e9e8ad4064be0cba7996a9dd3249", 0xa9, 0x1c0}]) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f00000000c0)={0x0, 0x4, 0x400, 0x4, 0x1}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000100)=0xfc, 0x4) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) setxattr$security_selinux(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:agp_device_t:s0\x00', 0x22, 0x2) r2 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4200, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) tee(0xffffffffffffffff, r2, 0x3, 0x1) 04:20:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000100)=r4) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000040)="35d6dac5f643b92bc0e1fb87b48dcbb0f9bdcc497f462446e236d98ef16f975ed5977a") ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x14) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, &(0x7f0000000080)={0x7f, 0x17db}) r6 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f00000001c0)=""/18, 0x0, 0x800, 0xa4ddc37}, 0x18) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000140)={0x6, 0x9, 0x1f, 0x8, 0x0, 0x0, 0xf8, 0x1, 0x9, 0x4}) dup3(r1, r0, 0x0) 04:20:15 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000180)={0x4fa14a29}, 0x4) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x68, r4, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x1f, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x68, r6, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x1f, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r7 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r7, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r8 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r8, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r4, 0x4, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x7ffd, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x26}, 0x1, 0x0, 0x0, 0x20040000}, 0x810) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r9, r9, 0x0, 0x6c2b) sendfile(r9, r0, 0x0, 0x7fffffff) 04:20:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0xae01, 0x0) [ 272.228424][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 272.234629][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:20:16 executing program 0: r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2ea40157d19d389}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7408}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x1000}, 0x4041474) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r2 = open(&(0x7f0000000280)='./file0\x00', 0x40, 0x40) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x3c0a, r3) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$revoke(0x3, r4) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0xb149a31dc33377a8, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0xfffffffa, 0x4) ioctl$KIOCSOUND(r0, 0x4b2f, 0x101) [ 272.348435][T10658] loop5: p1 p2[EZD] p3 p4 [ 272.352928][T10658] loop5: partition table partially beyond EOD, truncated 04:20:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x4, {0x7fffffff, 0x1, 0xffffffff}}) r3 = socket(0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0xfffffffffffffecf) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000001b40)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x2, 0x80, 0x8, r4}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x4, 0x3f74b7d6eb6b0195, 0x2576e190, 0xca2, 0x9, 0xffffff2e, 0x1, r4}, 0x20) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15, 0x5c831, 0xffffffffffffffff, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40080, 0x0) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000080)=0x865) write$capi20(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x8999, 0x88, 0x0, 0x9}, 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) 04:20:16 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r0, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x1eec442d516b538a, 0x0) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000300)='cgroup.controllers\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, r7, 0x30, 0x1, @in6={0xa, 0x4e24, 0x400, @remote, 0xa27}}}, 0xa0) getsockopt$inet_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000200)=""/147, &(0x7f00000002c0)=0x93) [ 272.498727][T10658] loop5: p1 size 2047 extends beyond EOD, truncated 04:20:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0xae41, 0x0) [ 272.551436][T10658] loop5: p2 start 4094951424 is beyond EOD, truncated [ 272.573895][T10678] encrypted_key: insufficient parameters specified [ 272.591780][T10658] loop5: p3 start 1073742848 is beyond EOD, truncated 04:20:16 executing program 1: syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x7, 0x48800) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) fcntl$notify(r0, 0x402, 0x139dee9cc0bac775) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000100)=0x2, 0x2c7) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) nanosleep(&(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) bind(r2, &(0x7f0000000040)=@ax25={{0x3, @bcast, 0x7}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) bind(r3, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x80) [ 272.625499][T10658] loop5: p4 size 32768 extends beyond EOD, truncated [ 272.663905][T10689] encrypted_key: insufficient parameters specified 04:20:16 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x2, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000021c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xbe911d969f3f6470}, 0xc, &(0x7f0000001100)={&(0x7f0000001180)={0x1014, 0x20, 0x4, 0x1070bd2a, 0x25dfdbfd, {0xe}, [@generic="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"]}, 0x1014}, 0x1, 0x0, 0x0, 0x4c018}, 0x18004050) 04:20:16 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8200, 0x0) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) membarrier(0x0, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000001280)=0x10001) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000001240)={0x9d0000, 0x1, 0x0, [], &(0x7f0000001200)={0x990a77, 0x62, [], @ptr=0x9}}) unshare(0x6e050100) sendmsg$inet6(r0, &(0x7f00000011c0)={&(0x7f0000000080)={0xa, 0x4e23, 0x368d0f79, @empty, 0x80000001}, 0x1c, &(0x7f0000001140)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="ded9c1e59b44325f9574e50de599b8e52cb88d112cda2bd9a3c34ad52ae77363554bbbd49beb0841c5322b5b2474232babac80ef5c07882a0bf7f514b411bbc3063eb4122a67dd04d44a03dbcce63eab34ef3d51dc46604d3bd7856ca1523ea2f31415b0f21fe29a", 0x68}], 0x2, &(0x7f0000001180)=[@flowinfo={{0x14}}], 0x18}, 0x40000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x4, {0x7fffffff, 0x1, 0xffffffff}}) r5 = socket(0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000001b40)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x2, 0x80, 0x8, r6}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000012c0)={r6, 0x71, "1bc4e9298dd7a23219d93f2f7ccf912f2c5948e8887c676821f75b9b25ea578039d3bd8e49164951b44ec2565fa3be22f2fd98bd9e3c6407f06709ec2a0c8751e865941fc596fa9475dc28769e0ce20e1d5eb29d5be7a2c192405439c3bf353aea21f1605bc82d9d61b587f8ce6bbfd989"}, &(0x7f0000001340)=0x79) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000001380)={r7, 0x20}, 0x8) 04:20:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0xae60, 0x0) 04:20:16 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000000840), 0x0, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000001340)='bpf\x00', 0x58010, &(0x7f0000001380)={[], [{@audit='audit'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vmnet1+vboxnet0proc'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'bridge0\x00h\x00\x01\xd8\x00H\x00'}}]}) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000100)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000012c0)={0x1, 0x4, 0x1000, 0x1000, &(0x7f00000002c0)="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", 0x70, 0x0, &(0x7f00000001c0)="2ada5bec1eae53fd17d953fe0dd91564e4adcf4837f838663f8f3707291042d3985e0e9b7583bd83f4f25966e03e3a2d7be63e0c4ee97d51a053916bf104d7780fec9127867a59c5bee3e9dd63c3b8ce6e2ab016210851818e898b3371cbcff51c9cfe6ee2c5db336fd1c0143a696270"}) [ 273.147659][T10722] Unknown ioctl 1074820173 04:20:16 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='stat\x00') sendfile(r2, r2, 0x0, 0x6c2b) sendfile(r2, r0, 0x0, 0x7fffffff) [ 273.217043][T10722] Unknown ioctl -1071622583 04:20:16 executing program 3: mkdir(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000001c0)='\n\x00B\b\x00', 0x2, 0x480000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={0x0, r0, 0x6}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x6000000}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r2 = open(0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, 0x0, 0x0) [ 273.276975][T10722] Unknown ioctl 1074820173 04:20:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40045431, 0x0) [ 273.328010][T10725] Unknown ioctl -1071622583 [ 273.399771][ T7] TX() has been purged, node left! [ 273.415889][T10727] bridge0: port 3(gretap0) entered disabled state [ 273.424493][T10727] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.436202][T10727] bridge0: port 1(bridge_slave_0) entered disabled state 04:20:17 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='\x92\xb9;u\x1b\xb1\x7fJ\xe0\xc5\x8d|\xa5\xd8\xb5\xac%\x9c\xb2\xe3#\xca*p\xe79\\\x16\x9b\x1f\xcb\xf9\x95\xd7\xcf\x15\xc8\x11\x8e\xd4\xc8\xb7%\x10\xb3\x99\x80\x94\xd5\x14\xa2\xef\x17\xd3\xb4,\x89\x1cy\xc4n#\xf95+(\x81q\x0e0\xacI\xe5\xea\xa5\xbb\xcf\x1a O\x96D\xcaG\x8a\xa6\x1dS,\xabcy\x96W\xc9\xd6\x9b)$Z\x05\xfd\xcf\xca\xb0\xb3\xd0b\x99\xc2\xa2\xd9\x93\xa6W\xd7\x84Bu\x84U\xbf?\x9d\xa5\xa6gq\xcc\\\x82\xe3$3L\xc9\xde\xe0X\x06\x19\"\x97\x95\x86\xf0\xb1x\x0e\xbe\x92lZ') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r0, r0, 0x0, 0x6c2b) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) sendfile(r0, r2, 0x0, 0x80000000) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x80000001, 0x2, 0x81, &(0x7f0000ffd000/0x2000)=nil, 0x7}) 04:20:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40045436, 0x0) 04:20:17 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000140)='loginuid\x00') sendfile(r2, r2, 0x0, 0x6c2b) sendfile(r2, r0, 0x0, 0x7fffffff) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x60800, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000080)) 04:20:17 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x40, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4080, 0x0) 04:20:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0xfcf5a0a59d640b12, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000004540)={0xa, 0x4e28, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0x2a7}, {&(0x7f00000000c0)="4d27c0d84df0ad801518e4eea364461795145e8a7be90300000000da1100", 0x10}, {&(0x7f00000012c0)="496288e0b5feefd3ff461c68e4fd5c8ecdcff3c85146c785e809c9ca7cb538fa2f0e2ca36adfc49e66123dec9cac26f3e4e77eadba335fecf61c5891ceea669ef775557e1b9d3415515a3ed13c2f932d1beb7d0e66fcf84982e7dc839dd15878", 0x60}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6d8f64f95c69e8a45bd4a19cff0e5", 0xe3}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45ee22ba99cfe850d62e87e556e8fa3459d346b4d1a572c7334773786ad61a45508f7e", 0x44}], 0x6, 0x0, 0xfec0}}], 0x40000d9, 0xc846ccf923abdda7) 04:20:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400454ca, 0x0) 04:20:18 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400800, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup2(r2, r1) fcntl$setstatus(r1, 0x4, 0x800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) io_setup(0x7, 0x0) open(0x0, 0x100, 0x8c) socketpair(0x3, 0x0, 0x6, &(0x7f0000000080)={0xffffffffffffffff}) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000280)="af0a6d338e363201186b283958361e3f3eb8d60df54dda1a6e432ab3802d4b93aeb7e2e7e18e6ce51e3f0caaa84639f7df84929fe11b27e19ca90dfb46ef85c90225d6608c00d8e8ec98997684d0c0f3203de1dbd00ba9f55d1b92382779c86c1653b36071c3a53c6fc34a9177ad57c177d1878ff6e08d10c3fa12b82e6b055dfe1437bb31e8ff63e90105", 0x8b) openat$null(0xffffffffffffff9c, 0x0, 0x202000, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r5 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x8000000000000001, 0x3}, 0x20) r6 = syz_open_procfs(0x0, 0x0) sendfile(r5, r6, 0x0, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, 0x0, 0x18081) r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x40) connect$pptp(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) ftruncate(r7, 0x200004) sendfile(r0, r7, 0x0, 0x80001d00c0d0) 04:20:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 04:20:18 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x15, 0xa, 0x3, 0x10, 0xffffffffffffff9c, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f0000001140)}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x3, 0x0, 0x20000000, 0x0, 0x711000, 0x0, 0xfffffffd, [], 0x0, r2}, 0x3c) 04:20:18 executing program 4: r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) fgetxattr(r1, &(0x7f0000000040)=@random={'user.', 'ppp0&trustedvmnet0wlan1mime_typewlan0eth1md5sumGPLtrustedem1-\'bdev[vboxnet0\x00'}, &(0x7f00000000c0)=""/24, 0x18) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x5) r4 = syz_open_procfs(r3, &(0x7f0000000000)='statm\x00') sendfile(r4, r4, 0x0, 0x6c2b) sendfile(r4, r2, 0x0, 0x7fffffff) 04:20:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x4, r0, 0x1, 0x7, 0x1, 0xff}) 04:20:18 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$cgroup_procs(r1, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xe70, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) sendfile(r1, r0, 0x0, 0x7fffffff) [ 274.592354][ T26] audit: type=1800 audit(1574050818.250:43): pid=10788 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="hugetlb.2MB.e_in_bytes" dev="sda1" ino=16775 res=0 04:20:18 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x82200, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x4, {0x7fffffff, 0x1, 0xffffffff}}) r5 = socket(0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000001b40)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x2, 0x80, 0x8, r6}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={r6, 0x397f, 0x3}, &(0x7f00000000c0)=0x8) sendfile(r1, r0, 0x0, 0x1006c2d) sendfile(r1, r0, 0x0, 0x7fffffff) 04:20:18 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) fchdir(r2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r3, r3, 0x0, 0x6c2b) sendfile(r3, r0, 0x0, 0x387) 04:20:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$sock_rose_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @bcast, @bpq0='bpq0\x00', 0x0, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) r6 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) r7 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r7, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000040)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) 04:20:18 executing program 3: creat(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x20000, 0x0) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0x2}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}, {@default_permissions='default_permissions'}]}}) 04:20:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x4, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) munmap(&(0x7f000013e000/0x1000)=nil, 0x1000) 04:20:18 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000180)=0x3) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x20) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000140)) sendfile(r3, r1, 0x0, 0x7) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000040)="f928f33c2083d7c3e6b68ac16b91f680f1e86c073be7644962f7931978028efc9bf41b778b898ea250196e3f5be50dac568d86fedc67f1604c05", &(0x7f0000000080)="4bdb0bd825d89dbc85ba7e1e6e4c81e3ee6d4fb0fd", 0x2}, 0x20) sendfile(r1, r0, 0x0, 0x7fffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/ddma_\xb8\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xd7\x00', 0x2, 0x0) [ 275.164960][ T26] audit: type=1804 audit(1574050818.820:44): pid=10823 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir912269704/syzkaller.dr3uXF/60/file0" dev="sda1" ino=16767 res=1 04:20:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfe, 0x6, 0x0, 0x7f, 0x2cfc8c63dac402e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3224}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x13) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c460009e8ffffffffffffff0000000000000000000000000000000000004002000000000000000000000000000000000000ec0c38000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000e40a000000000000"], 0x78) dup(0xffffffffffffffff) getuid() socket$inet(0x2, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0x0, &(0x7f0000000000), 0x3c) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0x8, 0x0) [ 275.274336][ T26] audit: type=1800 audit(1574050818.870:45): pid=10792 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16545 res=0 [ 275.363894][ T26] audit: type=1804 audit(1574050818.930:46): pid=10823 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir912269704/syzkaller.dr3uXF/60/file0" dev="sda1" ino=16767 res=1 [ 275.490472][T10835] IPVS: ftp: loaded support on port[0] = 21 [ 275.639451][T10839] IPVS: ftp: loaded support on port[0] = 21 [ 276.630010][ T8891] Bluetooth: hci0: command 0x1003 tx timeout [ 276.636920][T10790] Bluetooth: hci0: sending frame failed (-49) [ 277.748523][ T7] TX() has been purged, node left! [ 277.908525][ T7] TX() has been purged, node left! [ 278.098378][ T7] TX() has been purged, node left! [ 278.708449][ T3620] Bluetooth: hci0: command 0x1001 tx timeout [ 278.714613][T10790] Bluetooth: hci0: sending frame failed (-49) [ 280.798427][ T3620] Bluetooth: hci0: command 0x1009 tx timeout 04:20:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455cb, 0x0) 04:20:28 executing program 1: socket$kcm(0x2, 0x3, 0x2) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1ff, 0x240004) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'\x00', @random="b3e6ca4d2a31"}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 04:20:28 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x5) r2 = syz_open_procfs(r1, &(0x7f0000000000)='loginuid\x00') r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000140)) r4 = accept4$unix(r3, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x800) pwrite64(r4, &(0x7f0000000100)="9f52edb8a3f12eeeaf568baf73c4a499234750a92baf9c56f165b97ea10e21deaab197f1a835d2006119d99d51cf8fc17836bdd739dcd91ccef18d0257df4a", 0x3f, 0xfffffffffffffbff) sendfile(r2, r2, 0x0, 0x6c2b) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x28c00, 0x0) write$P9_RREMOVE(r5, &(0x7f0000000200)={0x7, 0x7b, 0x1}, 0x7) sendfile(r2, r0, 0x0, 0x7fffffff) 04:20:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x200) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@remote, 0x0, 0x3c}, 0x2, @in=@empty, 0x0, 0x4, 0x0, 0x3}}, 0xe8) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0) 04:20:28 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x1}, 0x116) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x4, {0x7fffffff, 0x1, 0xffffffff}}) r3 = socket(0x10, 0x0, 0x0) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000001b40)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x2, 0x80, 0x8, r5}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={r5, 0xff}, &(0x7f0000000140)=0x8) r6 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x4000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r7, @ANYBLOB="10002bbd7000fcdbdf25150000004400010038000400200001000a004e210000000300000000000000000000ffffffffffffd77300001400020002004e218c1e0001000000000000000008000300ff0700006c0004001400010062726f6164636173742d6c696e6b0000540007000800030009000000080004000900000008000200ff03000008000200ff420000080002000002000008000100170000000800020001000000080004000100000008000100040000000800020000000000bc3dbb6483f25b977919599c3e9f7b5fe7afc1017260d60211222a7a2ffb43dda174331bdb046379e9dc099c4df98f4519431c465bce8cc57215e7f4dfaa445b0d245ddf2c962bcb3e801a22ede61ed4a48bb560440512da121dc61e9c906d83508a4431fdfec10eaa"], 0xc4}, 0x1, 0x0, 0x0, 0x200000d0}, 0x800) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x363, &(0x7f0000000200)=[{&(0x7f0000000140), 0x304}], 0x8}, 0x2}], 0x13, 0x24000004) 04:20:28 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x330, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setstatus(r0, 0x4, 0x2000) shutdown(r0, 0x0) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4) [ 285.197450][T10849] device team0 entered promiscuous mode 04:20:28 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/unix\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) [ 285.254145][T10849] device team_slave_0 entered promiscuous mode [ 285.288810][T10849] device team_slave_1 entered promiscuous mode 04:20:29 executing program 1: gettid() tkill(0xffffffffffffffff, 0x33) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000380)) r1 = getpgrp(0x0) setpriority(0x0, r1, 0xffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::],0::6:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 04:20:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40049409, 0x0) 04:20:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000240)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000000), 0x4) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$RTC_VL_CLR(r2, 0x7014) r4 = socket$inet(0x10, 0x2, 0x0) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) recvmmsg(r6, &(0x7f0000003c80)=[{{&(0x7f00000002c0)=@llc, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/59, 0x3b}], 0x1, &(0x7f0000000380)=""/132, 0x84}, 0x4e}, {{&(0x7f0000000440)=@ll, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)=""/165, 0xa5}], 0x1, &(0x7f0000000640)=""/4096, 0x1000}, 0x96}, {{&(0x7f0000001640)=@ipx, 0x80, &(0x7f0000001980)=[{&(0x7f00000016c0)=""/248, 0xf8}, {&(0x7f00000017c0)=""/17, 0x11}, {&(0x7f0000001800)=""/89, 0x59}, {&(0x7f0000001880)=""/27, 0x1b}, {&(0x7f00000018c0)=""/166, 0xa6}], 0x5, &(0x7f0000001a00)=""/102, 0x66}, 0x6000000}, {{&(0x7f0000001a80)=@nl=@proc, 0x80, &(0x7f0000003c00)=[{&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/146, 0x92}, {&(0x7f0000002bc0)}, {&(0x7f0000002c00)=""/4096, 0x1000}], 0x4, &(0x7f0000003c40)=""/48, 0x30}}], 0x4, 0x2060, &(0x7f0000003d80)={0x0, 0x1c9c380}) r7 = openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) connect$inet(r5, &(0x7f0000002bc0)={0x2, 0x4e22, @empty}, 0x10) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) nanosleep(&(0x7f0000000100)={r8, r9+30000000}, &(0x7f0000000140)) readahead(r7, 0x7, 0x8) sendmsg(r4, &(0x7f00000000c0)={0x0, 0xfffffe43, &(0x7f0000000040)=[{&(0x7f00000001c0)="24000000190007041dfffd946f6105000af80200fe0200000002080008001e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 04:20:29 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0xd, &(0x7f00000001c0)=0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420fe10000000000580f02000000003f420f000000000000ffffffff000000", 0x38}]) socket$can_j1939(0x1d, 0x2, 0x7) 04:20:29 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x6, 0x424001) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000000c0)={0x7f63, 0x0, 0x1000, 0x3, 0x2, @stepwise={{0x2707, 0x200}, {0x2, 0x9}, {0x61d, 0x5}}}) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000b00)={0x10, 0x0, 0xffffffffffffffff}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 04:20:29 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x44) sendfile(r1, r0, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000040)={{0x2, 0x4e22, @multicast1}, {0x1, @local}, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 'nr0\x00'}) 04:20:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x4008af04, 0x0) [ 285.707351][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 285.975599][ T8957] libceph: connect (1)[d::]:6789 error -101 [ 285.983150][ T8957] libceph: mon0 (1)[d::]:6789 connect error [ 285.992936][ T8957] libceph: connect (1)[d::]:6789 error -101 [ 285.998997][ T8957] libceph: mon0 (1)[d::]:6789 connect error 04:20:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40186366, 0x0) 04:20:29 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x5) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00'}) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r4 = gettid() sendmsg$key(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRESDEC=r4]], 0x8}}, 0x20004850) r5 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r5) r6 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43", 0x29}, {&(0x7f0000000180)}], 0x2) ioctl$SG_GET_REQUEST_TABLE(r6, 0x227d, 0x0) kcmp(r5, r4, 0x0, 0xffffffffffffffff, r6) r7 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x7, 0x9, 0x2}, &(0x7f0000000380)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfffffffffffffca9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r5, r7, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r8}, 0x51) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r4, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r8}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r8}, 0x249) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r8}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r8}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r8}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r8}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r2, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r8}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r8}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000040)='sit0\x00', r8}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)='selinux\x00', r8}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, r8}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)='loginuid\x00', r8}, 0x30) r10 = syz_open_procfs(r9, &(0x7f0000000100)='net/xfrm_stat\x00') r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r11, r11, 0x0, 0x6c2b) sendfile(r11, r10, 0x0, 0x7fffffff) 04:20:29 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/unix\x00') sendfile(r1, r1, 0x0, 0x6c2b) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xc28001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) sendfile(r1, r0, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000100)) 04:20:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x4020940d, 0x0) 04:20:29 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffc6e, &(0x7f0000000340)}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20\x00', 0x410080, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000380)={0x7, 0x81, 0x1ff, 0xd35, 0x9, 0x80, 0xf, 0x1, 0x1ff, 0x1, 0xfffffff9, 0x9202}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x240001) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x4, {0x7fffffff, 0x1, 0xffffffff}}) r6 = socket(0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000001b40)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x2, 0x80, 0x8, r7}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={r7, 0xca90, 0x20}, &(0x7f00000000c0)=0xc) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="01"], 0x1) ioctl(0xffffffffffffffff, 0x9fd3, &(0x7f0000000100)="2d38974a5229c76af9a8c78c22a3d0a79cce1368f48d4b3dd8f293222a7bff48a7ea1defc38e9f1a7b3a8087e20da792919aed4281f727746eff672ff0ba52dd4ae0e83d41fb5c80aec9fc443e9a9cc758d1f0d0ad50b2be2b5dacd0a1181d726b1641d34d4869263f242b3c5a6639d741f9961c4470990ba7603880cb63bc33cfc16b319b2d0fd28e8b40bec3f8f6e24e2f8b6f6b78faa3f107f4b74b773a904ce107e062da130ba96c5c48251e3b86af219f54b7aab174722b98863fb6a43106291dd3ea1a7b275037a12ca15ed3c68a703b4bf5100be9be7d56") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x275c, 0x0) r8 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r8, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r9 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r9, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$KVM_GET_SREGS(r9, 0x8138ae83, &(0x7f0000000880)) 04:20:30 executing program 1: gettid() tkill(0xffffffffffffffff, 0x33) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000380)) r1 = getpgrp(0x0) setpriority(0x0, r1, 0xffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::],0::6:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 04:20:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045430, 0x0) 04:20:30 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14, 0x13, 0x1, {0x4, 0x3, 0xffffffff80000001}}, 0x14) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0xffffffff00000000, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/120], 0x78) [ 286.966207][ T5] libceph: connect (1)[d::]:6789 error -101 [ 286.972762][ T5] libceph: mon0 (1)[d::]:6789 connect error [ 286.999191][ T5] libceph: connect (1)[d::]:6789 error -101 [ 287.005208][ T5] libceph: mon0 (1)[d::]:6789 connect error [ 287.461696][T10947] IPVS: ftp: loaded support on port[0] = 21 04:20:31 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = getpgrp(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='oom_score\x00') sendfile(r2, r2, 0x0, 0x6c2b) sendfile(r2, r0, 0x0, 0x7fffffff) 04:20:31 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000000e40), 0x0, 0x0) 04:20:31 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000100) lseek(0xffffffffffffffff, 0x0, 0x3) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x0, 0x2) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f00000002c0), 0x4) getsockopt$sock_cred(r2, 0x1, 0x2f, &(0x7f0000001480), &(0x7f0000000180)=0xc) r4 = openat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x2a4040, 0xa1) ioctl$BLKIOMIN(r4, 0x1278, &(0x7f00000003c0)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = getpid() sendmsg$netlink(r5, &(0x7f00000019c0)={0x0, 0xffffffffffffff75, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee00}}}], 0x20}, 0x0) connect(r5, &(0x7f0000000340)=@sco={0x1f, {0xa6, 0x9, 0xf7, 0x92, 0x7d, 0xf9}}, 0x80) getsockname(r2, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000080)=0x80) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@multicast1, @in6=@ipv4={[], [], @empty}, 0x0, 0xfff, 0x4e23, 0xffffffff, 0xa, 0x20, 0x80, 0x73, r7}, {0x7f, 0x5, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5, 0xe, 0x8}, {0x4, 0x10001, 0x0, 0x3f}, 0xffffffff, 0x6e6bbf, 0x0, 0x1, 0x0, 0x3}, {{@in6=@local, 0x4d2, 0x32}, 0xdacf5ec2db0facb5, @in=@loopback, 0x0, 0x0, 0x0, 0x795afa9d, 0x7ff, 0x5, 0x5}}, 0xe8) dup(0xffffffffffffffff) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r9 = syz_open_dev$rtc(&(0x7f0000000400)='/dev/rtc#\x00', 0x5, 0x842) write$binfmt_misc(r9, &(0x7f0000000440)=ANY=[@ANYBLOB="73797a71ac1aedc4ed6eb55c7969b6c38a837b2fef82d89bb454b0e2f9cbe336516c10903e1f659d10eadbc351853ed44b37c77c6352a3194f68c2fd5a0dd67f3c000000"], 0x4e) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r10+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:20:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045432, 0x0) 04:20:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x1000, 0x2b, &(0x7f0000000100)="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", &(0x7f0000000000)=""/43, 0xf, 0x0, 0xb0, 0x1000, &(0x7f0000001100)="68f21d982fc0e38a1e81550c1e5003b9c2ad3ed24e0d26d4960e8fd7d73498f5a2e72422fa42b86e233e381b7a23c04f8b70ca63a95d546902f2a5591e4b8b5eadeb14bc171752026152502d79d21ba1650230a6b9bbfa325ab7b934bcd208c6476d9cffa4a78c74d65fe973b58fdb3a0dcea581bbc4ba29e2572b4e9ef3a8738f35192b9e86dfc8c2f1a0fb65e8b64a6caa92a14b2402f25b16a9b0fcf74f704ebb2124d8b692f61103bab0f6a483ca", &(0x7f00000011c0)="ad267f088b6984bbf9b54c0f92484143d38c675d03cd85eb17192b87f0ec63d4953ba979d932c6820aeb41602a1820495f21a4bfcc3a1b871e0d77dbd0faf9b39fdd2f6eed6e40a51bf608869656e778b1a8ec563d406c93cc3c9d7ebd7aab9c133de202c6ab92984be963a72fdfa5a170e4b3f36776157cbcebbe6efda2d6ba777ba12c1b83d6e5375e54562f90bc4470e70d435d0c541144c1195c23639a62a67c90ca6a8d17061d3e97138304cf584ca439022a94702d71397e5230bf9fe42d55b4322d3e1e7d5a42155d91e5b707b4ed71cc28c370fc6764dad38551c61f2a0087bc8d64bbebcf0d9288288e1a52625d6c8c473bcf5dfc9f1386d3d2eee65f13d2ed118e0d1b649afbbec182164249f777c36844b3666327c55b475223d1f8b81ab5a0615d6060285044ad70fd674f385f8de4c3d37cc74e4ac4588def7c1b0fcb2ef1f73db04a08fc92b24d47479dcc518b65042fa1c108a60205227995b844b49bcc4e336dec4506f296d47c204bbea17aff6e105ca7341810672b35bc7c7cc100028571039c77b7d4079093b77250bc44b076ec2a6e2c108aaac798f8f1a613898ec75e593b31b9c9c41581329166601ae9ece323246d4250d53142a1a75aca0e9839244805a6d274f518e4c1df700d22556b7639f77e0265e902af1bb01142dbce1a68ca1bb2ef38817165833741538a1edfb5e964a22933ee2abec10c1e589ee7fef40319cea8dacd416eee8b069f46c4707880d0f47636cc902898fd0eb2a1a5c06f010457d039ea7c6b4e707f98e378920258c649de9bb058039eb3743b52e8fb6c8478bf9ebb1214ae1454d2a2c140f4b2eda7ef8bc6bf7dd7f46d1cd4ddf5e9c028570d17384a46654d221fa2b869513a4b8717cdf6dff9a8115cf4377badc6f11b48e8944329877494de203b8e3a1e0d8f11135287ce00433395a1bfaab3f01c082076b2a6e1914049a0defc50cafa5a2b96d8b076436fb29570746927c67c842f0d881471307bd2b2865b4e3285adb5e034c314cf17ccd25b3d809d29a62c51ae984cd532f6a5461f03be55a0e7232bac8b350f139c1bd30bffc70cbd1735e5d227fcb5ad37bd830b6545208233582c663d9821d89a6d269b443f38cd85e2eed3c2e651071b8497dc856fdada6415bcd765de2b558ab09c964ff83b2548347dd26658d10729cbab65fc2001828db85869248c45728d01fb0d2726bfb3504d101688a3ae4d49d5bf21ece4df3c22a84f23501c685e8b6e185d053dd5431ac6b29b73d85b7b67dc61f84abc811c3f8042b86a93acedd1190390a4a94f2d8678ce57980ea604d51547e0ffe62d24aee292de10c778b7c95b27f88e557ac99ffd6846709dca464ac090fd5411ee6896d6d92c6326997c9c65374e2f485b50b7f6b15257ec981b60aa8445abfac54ea09256bfdaa8d77ffa8e9d38c61647e367467c66de44ffd3281e4e647260e2f6aafb590a3f694c8bde7a5f2b652f54b8bc58a0320c0f0c16f07e2f050c51628e39fc1be551c54b3a0acba048eec84aa9f5cddfd88a5517acc7f033d3d7a3825a04fd1de274908cbf31e88db78454bfe98081bb7137cc6713b3fcf08614c76d8424c8cde10afed97ade716ebd2f9e8685fc92a9547b205553dbf6bc88dd9e204ed61c1f78e451730cd46a7b156c850e6a17ac04bb77084ebf017f2d5862466b90223865764724d46582ad0ab5fdd3c4220e6e0ae9eb2700c3fe2ea84918310de31ada48ef5e3e94a940f3d2ecf28b8d9b2e87f22114f86ac20311fa166f6bd7966fc486c266aa73661ca3de19e66aa4783ebd9b77368c4fb8113ad73e16c36712ddc271133f8fbb4243dbb3bed8db87a8722f2a679254db7d06b02de686b362d9667239d5f520df23e3c3d96d86a97b08ba8aaab33226f841df51eba306436832cc217a6b0e9968b3c79afc339be4619a90eacf45de2a3dc37db5f3f2fda4d7f341ade7f80959a40181d99734c64c94f266139b90c85c06f5ff754df32c0979eb9ab9690f32a676e003778d0c8019c3688253ef85d1b5589dd87fd077366e079c226f152948bd7adcc0fc8d547e22fabbdd334fee19f5711e3b41cef69add10e6cb5e925a0654858b31178cae87ee7427a9cd75bcc7bab9fc85a2ec1da873a8cc1c713f5cb5c1e53bdc07a19fbfbf995d0e3d1c1ed00caf487c6484dd00148f535ad19bab3eae44181339336593908c070f4508e2b109d60503d3d807d0c7431e7f4b5b8e8e2cd177e33eff5d2fe10419cf18c490c18e3b3fce670984674bf71c9b104a845c09a6f2d07d89b2ba4e26cf79498858af0d6d91d116ff6e947dda0b95eaf50faf2bb51c3edce05922515d934be2dff3071570957fb0dfa48528dbcdef82f8ed56139710c09fbe3bbc77b26eb87a92f36549523dd0374b64af0373c8669f3663165d758a85653754cbf557881ddde14df5afd02ed8b083a11ceca61f83ab145aecf26f4f8fa9fffd9520620d7875b20d7b5ca76182ee9f694ca73c4a44c8455a0e3bc68e6601b859a2b7dec079212db7650380e7ba095f03e52a4fbb9673b46342a57232f5861981b0c4379dc265bb87d23e714346bb834b97a073a7e15835672045b317f9d6c0cb935e6372a5716d6f87f8eed588de546ec9067773de56da2a3b35f458e3ac80efef0cc336d936888011abc1b82ca7bb9f7521600491ea5cc7e86a50b06c85d5d74a1b254d3ac05188648aa8bbcc6cc3660d842ac30584b7d513e7385359591d654d0131955899362b134e557761ac43c47f24aa7f8f32e5a08ccefd1ad8cd6be649109d03b335e5148d5321f240795834f8a3e9983505d6eaa69ab0510870e54aeeb1df0d321f3cdcb6f2e86fc5dd9d2c070f0bfdc7e185e5b4f13cabd80ffa20821010be9e334e161067d89f0d3778efc7aa53002f8e4a7574e0e041e4485ede25e0e62cefe661cd58b4c3ad74c47db35fc1aa02fc54c0c2db58caa35ad36a0a3a0bc81d745714fd21da4139b9e5f4693e3b2a7fe3e5cd22306d33cbdc297d142d626486b1fa74ab36eb7d71bd678980047e5f1e0874e1c62f55c3d5f1600d4f2f01286f499acc0dd0be705384458ca69f8e39a599954fdfb435018cf9ccc9f248129efadcc91579634f2606ba62de85b1451dcca5a21e9334ba4126f4ea5efd12a5f423c8188b95adf95fce31d73cff63241b33eea845943f436f5fcf20d37b855636347b15f9deff162f3002e7146b73c97fce902b0c93f04d03a80f841959a4ba7ec4785ad4ea2f062f0de22474aa23f6d9775ed497647385f15e05448c44e41e3271de10dc3f24450eb9f268e97acbcb006ad803404ec0c804535773c113d4c2ce2378ae623b1e82b94c91fa3cb6b276560ce6b9b12238e868a83a723e96211dfba4a1109c3326b154edd43c2d633f7c1efaf9655eb751a91d73f8d6e93a453b1c2183c3fbb405a1980a9174aca4f0a3a90ac87f01ed5384d56a2a451020040200df160705d6d8a30a8a6a4e3a92f8c0867c50b7f451ae58a80ab33a52cd91757bf6032e232f3ef6726ecdb08ad31f73a9850e25df7300fdaacc5306af861b897255f44030a91ee8ff3ccc9287e0ffb0193bb933ea0cc5386a8989204d626ca45fd768c75620e246c464545248987e4e390df75efb61b82c2107db4e0abdbac1fa8cac43e924b8947831d75d7985e7ceb76876b4fb83dad5971629d7b2d82caad9338915e0f741a837ca30f59fc922e0bf9604fd94162d5b2d925b8c1abfc6c335f54034d0c18a118776e0b2610641741d2b32eb86111307f23935321a524325a90de05b33b66c15579137758a48fcf03e19764386d60cd044f3ddfb7ee6b0b8c01d61dc7c23c795bd8f4f1eae4f5c2f82e3c4e42a36430b6ee7b3e76268f55c463777c5622b3c2cc965713cbb574cf193846be4f4528502cc64cedbffbad548e3f320da33b03271512f11e0ad4e14552e0ceb431fe5df2075f9089584cff39eaaf605cfac4e5cec3f24ec67a5fea88970057a865a8bda236cb94fb2505b3d7272022682f3a95b18fa52de174d6ee2d6f4e834f1d8296828f44752abd8fedb1d03327d6f92fb9a09069afe3e4225a2ab79695e96a8d0454451474e494f4383a0a438f0d9e7c31d5c6910b6cf363eb5a03a93cad79944477c6f8cbb6cf7462574e6fc3c0f2bab5721c0e4a11fade51e448f821021aaf47f7168ae05f9895e0bcb13b7c8d87ea459c61cd6ed1ab1305c06c5a7d713ffb50b303df7018eb5cf6c57d323f4611750e798f84223e14aa1e51357409dd57db4d45a9fc13c5b770193691316486799faf31e0d5dd87a7fef5d7e52ab7222c7863407db7c742100b15014344513f01af888e9aadf4743287d90791bfbadf9205ba605f6f25f3f353774248073339db699824d913a69d9866fcee7f8802705f6f3a606e44e598d9d69f8542ce928659bf7126764c0d9d98cd8aff559bc66687c5833049390ba4ba1aeca0183e130b5b68a170aa9a69997e1cd92bdae9c96eb3ba0ef3e64445ec18df000af2ce6d7b3fc51d9bfae47ea34f1de14dcdd5cb038920680ef38e9bb54f7d990f7771997f119eb9cb73b99a4a4c3ac3fca6118b45cefab008659786208d978f491fc06dca8d48ac693a71daa6395f7448a83060f7a732a57d9d12e753d338ec68e21389cd18ce9c92becd737c6a473f1d282895ace3ea6ca3711ea58576030a81e9cb488ee458f1cf2962b9a23705ce0d2f8f9293d265e03f7d15ec7a9ab1edad7b192c00f255d87706a682f1b96822807a8ec5827ef3b9b4eb15f1569945cb7b1db185a5ab52864f835f52e06dcb2be2760172c484a7a1887606d565da97f7659eb5f8c12b6d944732880f8604a49383b06fd678a4191ae84c4f959e9f21f4004bfd41e899496b9ea91435cac2f6fc7f49761d8b0dc6479ce0600f2c333ccfc180f5bcc43332c10878a3628fd7a99840961d6af40c15f30eefe89e2f3e8474ce40252f29c1f0c086a960f4798468e182e25c6dd75ec1c063620628aa2a9ba6b2a86c0153b25cb4c17bd734e232352d35611325a46c50c5a32d9f1d1c125af3e05894a62d873976ce70dfe040a88bd366ec574c788a450c059e998ba50f3ddb4b3f6ed5a408e0df6fc3af43f124b903231174f673dc4f9b82632a6c3a71c29eb3b1ef053f122e359a8ab8ada9559f1da0a5c4d3a22e1ea304074aa172fb72cc6f26c74084740d364c266a7b07fdb3af991559859ac6d5dde3b6687bf2d97be6db9af399b1d23c3df40be2ed3df59c0073885e7da157d3b9d9d39ebd1f91527c4f3dec0c774a7eeccde8ee0d97e9be2c156d575c3499b6730a3174482c9ac449b08ea918c66cbd969da949821c4c17a04fb80983d2d3c0f4a6caef5d0d589463e4515fd7adac7c6dcb47d0a977b81be97488736f8a741a6ba840179c746fcb3494b6fa823733262c396cc7e96946d6479a01d3da65184731dc55f6f06de837c4e3374a11c9c126ae3677794fc4f47386737b90567cd6be6e7c82baf3273a1121f536ab420f4278e24a4fe696c671b0efb6ec578be9198ec1a6b9304e23ac5011077bee53c7fb2fddcc66b0fce888b98ffbfeb95b12ea543ca35212e515c9db511aa2415a87e09f4cd48a396a256afbfc515a507618b59bf1290a0d497673b1172e250e0418f3de234d29367f1adacd34e250a0b0812eebf762c4be53e83fe123cacb561887a22dfda59230fa5cc12e47fa105511ccdf7795d2dd3ed8113e4017fc4d09e22d2c4f5fadcb00ba10045503bd6a6edad573f4094e2b46fcdca487d"}, 0x40) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) 04:20:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x8940, 0x0) setns(r2, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) fcntl$getflags(r1, 0x400) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, &(0x7f0000000340)={[{@mode={'mode'}}]}) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0) 04:20:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045438, 0x0) 04:20:31 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x2000}, {r0, 0xc242}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x8404}], 0x4, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={0x1}, 0x8) 04:20:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80000, 0x0) recvfrom$llc(r1, &(0x7f0000000040)=""/98, 0x62, 0x80010053, 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x2, 0x0, 0x0, &(0x7f0000000800)}) 04:20:31 executing program 5: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x60000008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xc3\t\xbb\x0f\xac\x03,') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) accept$nfc_llcp(r2, &(0x7f0000000000), &(0x7f0000000080)=0x60) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0) getdents64(r0, &(0x7f0000000df0)=""/528, 0xfe06) r4 = gettid() tkill(r4, 0x3f) 04:20:31 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000080)={0x3, 0x48e3892d, 0x911, 0x7ff, 0x1a, 0x9, 0x7, 0x5, 0x9, 0x80000000, 0x8, 0x9}) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000000cffd04c0005610c000100060000007d0a02000c00020000000000000000007b6b0f3bb2ae9899ad5d1e86529469277e3eb69e8b79a07a5f09811924e60dc10f"], 0x23}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 04:20:31 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) bind$llc(r1, &(0x7f0000000040)={0x1a, 0xfffe, 0xdd, 0x4, 0x0, 0x9}, 0x10) sendfile(r1, r0, 0x0, 0x7fffffff) 04:20:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045439, 0x0) 04:20:31 executing program 5: unshare(0x40000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x3, 0x1ff, 0x8001, 0x84000, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 288.128455][ T99] TX() has been purged, node left! [ 288.296619][T11005] IPVS: ftp: loaded support on port[0] = 21 [ 288.507185][T11005] IPVS: ftp: loaded support on port[0] = 21 04:20:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='\x00\xe2\xae\xdb)\xce\xc4\x95\xee\x9a\x10\xc2n\xb4\x069\xdf\xb1h\xa0\x8d)\x7f:\x97\xc8\xa6t\x84\xfdY\x1d\xab[\xd2\xae\xf0\x83\xb5\"\xa4 \x8d\xb5i\x88(`_N\xfaY}Y-d\x8aeI\xe4>\xf6\xff\xd4\xcdM\xda\x8a\x9d\x82\xe2?v\xdf~\xeb\x00\r\xc0{\x82\x18\x18p\aKl\xfdzV\xb2\xeb\xfc q\x86\x02\x94l\x8e?\x1b<\x1d\xbf\xedUB\x05\x99\x82\x1b\xcf\xb6A\x8d\xdeP{<\xc4\xf1:<\x9e\x15\xedp\x15\xb8\xd10b\xcc\x8e\n\xc7\b,\xcfM\x98~\t\xa8,\xc4 ]\x88\xbf\x8f\x80\xee\x88\xdd\xc1\xb8\x13\x8bT\xe0x\xf2\a-a\xfe\xd3\xb4,\x84\x16\xd6\xb0') getuid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f9504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b8564458e100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d000000000000000000000058f1798e21b93e002ce3ecb8872ebbe6a55dac4810e8bec7fe4ff162226648db3243866208242456ceae0360b6b8eacde297e4dbe43aedd6f7f769c45da1b11703a78c6df31d9900000000"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) setxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='trusted.overlay.nli\ak\x00', 0x0, 0x0, 0x1) 04:20:32 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) sendfile(r1, r0, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000500)='./file0\x00', 0x408000, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) splice(r3, &(0x7f00000000c0)=0x7ff, r1, &(0x7f0000000100)=0x100000000, 0xffff, 0x4) 04:20:32 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x7f, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x80000000004, 0xe657}, 0x3c) close(r0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffff, 0x10000) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000000c0)=0xf4240) 04:20:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045440, 0x0) 04:20:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="25bca274769e7c0aa734fa0095e0612687463915e38802a9d8aea872943afd874a2f98b479a7316270146d0e0af8e63ba889cad7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f757365725f78050000002c00"]) 04:20:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x6) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x49a1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb2518aa7}]}]}, 0x38}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'bond_slave_0\x00', 0x7fff}) mount$fuse(0x0, 0x0, 0x0, 0x10000, 0x0) 04:20:32 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x3505, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x15) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r5 = socket$inet_udplite(0x2, 0x2, 0x88) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4000, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") dup3(r1, r4, 0x0) tkill(r2, 0x1002000000016) [ 289.144499][T11022] EXT4-fs (loop5): Unrecognized mount option "nouser_x" or missing value 04:20:32 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) dup2(r0, r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xc40, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4') ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r3 = msgget$private(0x0, 0x10) msgctl$IPC_RMID(r3, 0x0) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000380)={0x0, 0x6}, 0x8) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) 04:20:33 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r0, r0, 0x0, 0x6c2b) sendfile(r0, 0xffffffffffffffff, 0x0, 0xef2) 04:20:33 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x80000000, 0x840) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={r1, 0x16, 0x1, 0xc3, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@empty, 0x0}, &(0x7f0000000100)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x19, 0x0, 0x40, 0x100, 0xc0, 0x1, 0x1d6, [], r2, 0xffffffffffffffff, 0x1, 0x4}, 0x3c) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, &(0x7f0000000140)={0x7fffffff}, 0x8) syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x1, 0x101080) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) 04:20:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800454d2, 0x0) 04:20:33 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x6000, 0xa000}) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000080)={0xc4ce02ab3d8c2e48, @capture={0x0, 0x1, {0x4, 0x7}, 0xffff8001, 0x28000}}) sendfile(r1, r0, 0x0, 0x7fffffff) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/tcp6\x00') r4 = add_key$user(&(0x7f00000002c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=0x0) keyctl$chown(0x4, r4, 0x0, r5) ioctl$TUNSETGROUP(r3, 0x400454ce, r5) 04:20:33 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e28, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) fcntl$dupfd(r0, 0x0, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000140)="cd27c0d84df0ad804ad5262a10c5f4", 0xf}, {&(0x7f00000012c0), 0xfc00}, {&(0x7f0000001340)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6d8f64f95c69e8a", 0xdc}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45ee22ba99cfe850d62e87e556e8fa3459d346b4d1a572c7334773", 0x3c}], 0x6}}], 0x1, 0x4000000) 04:20:33 executing program 3: socket$kcm(0x2b, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) perf_event_open(&(0x7f0000000b80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x3402, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f041}) ioctl$TCSETXF(r1, 0x5434, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\x19\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x96B\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xaa\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1fwL-t\xfc\xaa\x12m\x03\xb9bM\xba\xf1\x02\xf9\xcc`rtA\xa6\x9d\x86\xfc\xd2\x8d\xb6L\xc7Nw\xf9UU#8\xa1\xb7\v\xa4yu\xbc\xb9FnRHm\xf7\xf62B\xf3\xc5\xdbi\x82\xe5\x13\xcd<=_\x88\t\x9c\xd5@\xb5\x8b\xdet\xd1\xa1\x040/eH\xba\xabL\x87Zvy\b4H\x8c]\x05%\x1e\xa4\xfd\xc71,Rj\xa5\x9e=\xa1\x1c\tqT,[\x852\xc4Yf\xdc]\xcc\x18h\xf2\xbf)\x8eg\f\"-\x1a\x99\x0e\xc3\x1cg\xd2\x8f\xb8\xc9P\x05\xdb\xb6\x1a;]\xa2\xb3\xe1J\xba\xcbK', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000100)={0x1, 0x1, [0x1, 0xffff, 0x400, 0x80000001, 0x0, 0x5, 0x1, 0xfff]}) setsockopt$packet_buf(r2, 0x107, 0x1a, &(0x7f0000000040)="f957de5ded68fd1619db844387007c3f507757c467674360559e2151f9b721a5f73b1cc2c70ff99caef93c3fe7", 0x2d) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 04:20:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455c9, 0x0) 04:20:33 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x80000000, 0x840) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={r1, 0x16, 0x1, 0xc3, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@empty, 0x0}, &(0x7f0000000100)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x19, 0x0, 0x40, 0x100, 0xc0, 0x1, 0x1d6, [], r2, 0xffffffffffffffff, 0x1, 0x4}, 0x3c) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, &(0x7f0000000140)={0x7fffffff}, 0x8) syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x1, 0x101080) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) 04:20:33 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) creat(&(0x7f0000000580)='./bus\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xfffffffffffffec8, 0x0, 0x0, 0xffffffffffffffaf) 04:20:33 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x5}) vmsplice(r3, &(0x7f0000000200)=[{&(0x7f0000000040)="ae2f718bab65e19cb9306d86b07d239c38a6b8768e796c7b1399a29344d4f11a04fca247d9bccf5eccd3b49f0b681f5100312b0219b6dc42f59a59f42a14f8a398369aeaecdb2dce08d18de09fb76a0e4a63b1bfe005e5db73d087bb707b775b46c3e1b05f4fefd7d1a702c2ee05c71d19131ccf8c8f4bfd", 0x78}, {&(0x7f00000000c0)="2b2cf24a4fbd6f3a461d7d8eb37170b60ee3d9b98e2ea7a0acfec5571967e684aa8736df5df4a3b5e8ae5a027491268984969eeb5cee8577fa1dcb878cd80b515216e7f4bdaf010213f074a7b5a8516b5203791467a0f27449b338652b3688de06bd5d8f95caa07a2abd3ee62d571e9f146856446b8b253bf4de7248a92d3e8b5a2e82b7f041c1aed662f03469c3", 0x8e}, {&(0x7f0000000180)="9a26081a37a5324afa1b59553a700aee7a4c03442f7d7ed91d3f580ae7c4dd50dfd8cf23ba4a302342add7026c6c1f2415b265d039f45caa459aacb58d342da3dc6dc025cd69c6c8a2757d070d8e9b680e01876c4317622472064f40834b0af86dbc805312a37265e91001e9c04a8a036ac79f165f5d9e2c103744b65e0b301e", 0x80}], 0x3, 0x2) sendfile(r1, r1, 0x0, 0x6c2b) ioctl$NBD_CLEAR_QUE(r2, 0xab05) sendfile(r1, r0, 0x0, 0x7fffffff) 04:20:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455ca, 0x0) 04:20:33 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x0, 0x10000}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="171ab0d9a83a093f", @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x110, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) statfs(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x80540, 0x0) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000880)=""/4096) fchdir(0xffffffffffffffff) r5 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa, 0xfffe}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r6, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000780)={0x6, 0x9, 0x8, 0xd3, 0x4, [{0x0, 0x9, 0x2, 0x0, 0x0, 0x407}, {0xfd, 0x464e, 0x0, 0x0, 0x0, 0x800}, {0x1f, 0x6486, 0x0, 0x0, 0x0, 0x10}, {0x5, 0x11, 0xc0000, 0x0, 0x0, 0x8c3}]}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x1}, {0x0, 0x3, 0x7ff, 0x5}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x2, 0x3}, {{@in6=@loopback}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0x0, 0x3, 0x4e9}}, 0xe8) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x2c, &(0x7f0000000140)=[{&(0x7f0000001880)="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", 0x0, 0x7fff}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 290.163699][T11080] vivid-006: disconnect 04:20:33 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000040)={0x1000000000, 0x1}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r2, r2, 0x0, 0x6c2b) sendfile(r2, r0, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e26, @remote}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e23, 0x200, @dev={0xfe, 0x80, [], 0x20}, 0x400}, @in6={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0xfffffffd, @local, 0x14f}, @in6={0xa, 0x4e21, 0x8, @mcast1, 0x9}], 0xa0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x9, 0xff}, @timestamp, @window={0x3, 0x9, 0x7}, @mss={0x2, 0x40}, @timestamp, @window={0x3, 0x7, 0x401}, @window={0x3, 0x810c, 0x6}, @sack_perm, @window={0x3, 0x1ff, 0x76f3}, @window={0x3, 0x6, 0x3}], 0xa) [ 290.277209][T11073] vivid-006: reconnect 04:20:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80086301, 0x0) [ 290.360262][T11088] vivid-006: disconnect 04:20:34 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x5) r1 = syz_open_procfs(r0, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) sendfile(r1, r1, 0x0, 0xbcf) 04:20:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='/jstat\x00\xc6S\x81\xb4z\xae\xdf*\xf5\xc8\xaf4#\xfcA\x89\x1b\xd2\xa3\xc5m\x8c\x88\xe2\x9b\xadC\xf1\xda\x90n\x85_\xf1\x82\xde\x04\"~\xdc\xbb\xc2\xb1\xdf\x8f\x18\x0e\x15\x8e\x8a\xbdD,\xc0I\xcf\xfd\xa00\xff\'xu\xee\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf52\x14M\x16q\xa6\xcd\xf5\x06\x9e[\xdd\xcf%\xcd\x7f#\x95kJ\x82\xdf\x90\x0f^\xb5v;O\xe8\xccqr\x96-%\x90\xb2\xdc\xa2\xa10\x8c8%A\xb0S\x19M\x90\'\xd8>\xe7\xba.2\x80\x85\x7f\x8f\x9fc\xfc\x90\xba\xe9Y\xc6\xe6px\xbf\x97\xe6\x15\xbf\xd9@\x99\x14\x95\x8a\xad\xcf\xb3ysT<`\xd85&\xe5\xc2g\xf7\xdf\xa5K\xd5$\xcc\x96q\xde\xddfQ\x992+\xda\xde\xe1%\xa3[@\xb7\xbe\f\a0\x1fC\x9a~\xdf\xa2o\xa9\x82w\xc8\a\x8b\x02\xe2\ab\x91\xc37\x87\xc5\x8b\x0e\xab\xbc9(\x8f\xc1\x05\t@\x9d\xe1\b\xf5\xca&\xa8\xc8\xe1\xaf\xb7\v*\x95i\xcf\x8fL\xdbmN\x97\xeb\x7f\xdf$\x1d\xee\x16\x0e`qa\x833\xcc\v\x0e\x8b\xc6\xa1z\v}`EP\xfd\x14\x9a\xd0x\xff\xe5Lc\x92\xfb\xa2\x90\x15\xa3\xaeswL\xd1,\x9c\x0e\xd2Q\xa7\xcf\x84=q-', 0x2761, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000200), &(0x7f0000000380)=0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d623455e1ffb5ea3544438cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user='access=user'}, {@dfltgid={'dfltgid'}}, {@afid={'afid', 0x3d, 0x200}}, {@loose='loose'}, {@afid={'afid', 0x3d, 0x2}}, {@aname={'aname', 0x3d, '9p\x00'}}]}}) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="00fb4c00003535612161354c0f041a15fda9d281b4a4d60b5094548af077bcabee2adf4e35466eba17e1aaac20f41178deca0e6663f5edc458c3cbe8b58dd2d47817d51c61f4a7c7d839a191"], 0x4c, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000100005070000000000000000000a0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) [ 290.456439][T11073] vivid-006: reconnect 04:20:34 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e28, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) fcntl$dupfd(r0, 0x0, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000140)="cd27c0d84df0ad804ad5262a10c5f4", 0xf}, {&(0x7f00000012c0), 0xfc00}, {&(0x7f0000001340)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6d8f64f95c69e8a", 0xdc}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45ee22ba99cfe850d62e87e556e8fa3459d346b4d1a572c7334773", 0x3c}], 0x6}}], 0x1, 0x4000000) 04:20:34 executing program 3: socket$kcm(0x2b, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) perf_event_open(&(0x7f0000000b80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x3402, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f041}) ioctl$TCSETXF(r1, 0x5434, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\x19\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x96B\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xaa\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1fwL-t\xfc\xaa\x12m\x03\xb9bM\xba\xf1\x02\xf9\xcc`rtA\xa6\x9d\x86\xfc\xd2\x8d\xb6L\xc7Nw\xf9UU#8\xa1\xb7\v\xa4yu\xbc\xb9FnRHm\xf7\xf62B\xf3\xc5\xdbi\x82\xe5\x13\xcd<=_\x88\t\x9c\xd5@\xb5\x8b\xdet\xd1\xa1\x040/eH\xba\xabL\x87Zvy\b4H\x8c]\x05%\x1e\xa4\xfd\xc71,Rj\xa5\x9e=\xa1\x1c\tqT,[\x852\xc4Yf\xdc]\xcc\x18h\xf2\xbf)\x8eg\f\"-\x1a\x99\x0e\xc3\x1cg\xd2\x8f\xb8\xc9P\x05\xdb\xb6\x1a;]\xa2\xb3\xe1J\xba\xcbK', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000100)={0x1, 0x1, [0x1, 0xffff, 0x400, 0x80000001, 0x0, 0x5, 0x1, 0xfff]}) setsockopt$packet_buf(r2, 0x107, 0x1a, &(0x7f0000000040)="f957de5ded68fd1619db844387007c3f507757c467674360559e2151f9b721a5f73b1cc2c70ff99caef93c3fe7", 0x2d) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 04:20:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x801054db, 0x0) 04:20:34 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = open(&(0x7f0000000500)='./file0\x00', 0x100, 0x2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x3ff, 0x8, 0x1, 0xff, 0x9b0a}, &(0x7f0000000200)=0xffffffffffffff6b) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000580)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000080)='\x06\x9a\xbd\xe9\xe7uid\x00') sendfile(r5, r5, 0x0, 0x6c2b) request_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)=',trusted{\x00', 0xfffffffffffffff9) sendfile(r5, r0, 0x0, 0x7fffffff) pread64(r5, &(0x7f0000000240)=""/168, 0xa8, 0x5f) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x13d001, 0x0) r6 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) mkdirat$cgroup(r6, &(0x7f0000000340), 0x1ff) r7 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x3c0a, r7) keyctl$get_security(0x11, r7, &(0x7f00000000c0)=""/2, 0x2) [ 290.938881][T11127] encrypted_key: insufficient parameters specified [ 291.019235][T11122] vivid-006: disconnect 04:20:34 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r1, r1, 0x0, 0x6c2b) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$int_out(r2, 0xfca2, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x7fffffff) 04:20:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0xc0045878, 0x0) [ 291.142629][T11119] vivid-006: reconnect 04:20:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r1, 0x203ffffd, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/102, 0x66) r2 = socket(0x10, 0x0, 0xc) write(r2, &(0x7f0000000000)="1f00000003027ffffd3f00c007110000f30501000b00060000b67aca310000", 0x1f) read(0xffffffffffffffff, &(0x7f0000000200)=""/102, 0x66) r3 = socket(0x10, 0x200000000080003, 0x0) write(r3, &(0x7f0000000000)="1f00000003027ffffd3f00c007110000f30501000b00060000b67aca310000", 0x1f) read(r3, &(0x7f0000000200)=""/102, 0x66) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000600)={{{@in=@initdev, @in6=@ipv4={[], [], @multicast1}}}, {{@in=@dev}, 0x0, @in6=@empty}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = socket(0x10, 0x200000000080003, 0xc) write(r4, &(0x7f0000000000)="1f00000003027ffffd3f00c007110000f30501000b00060000b67aca310000", 0x1f) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x0, 0x6, 0x2, 0xffffffe0}) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf, 0x1f, 0x21}, 0x20000357) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$IOC_PR_CLEAR(r5, 0x401070cd, &(0x7f0000000040)={0x1000}) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) 04:20:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0300a1695e1dcfe87b1071") r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) getsockopt$ax25_int(r1, 0x101, 0x3, 0x0, &(0x7f0000000100)=0x2d0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xc230, 0x10180) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) 04:20:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x660c, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000)=0x101, 0x4) getuid() r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000003c0)=0x0) fcntl$setstatus(r4, 0x4, 0x44800) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) 04:20:34 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e28, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) fcntl$dupfd(r0, 0x0, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000140)="cd27c0d84df0ad804ad5262a10c5f4", 0xf}, {&(0x7f00000012c0), 0xfc00}, {&(0x7f0000001340)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6d8f64f95c69e8a", 0xdc}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45ee22ba99cfe850d62e87e556e8fa3459d346b4d1a572c7334773", 0x3c}], 0x6}}], 0x1, 0x4000000) 04:20:35 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') getresuid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000540)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='overlay\x00', 0x94, &(0x7f00000006c0)=ANY=[@ANYBLOB="6d657461636f70793d6f6e2c6c6f7765726469723d131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f2c6c6f7765726469723d131377c5fc35d41454d56029598146e6be166e41ad0dbd4054033c72e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f2c6e66735f6578706f72743d6f66662c6d657461636f70793d6f66662c6d657461636f70793d6f6e2c657569643e00"/231, @ANYRESDEC=r1, @ANYBLOB='\x00'/14, @ANYRESDEC=r2, @ANYBLOB=',appraise_type=imasig,\x00']) ioctl$TUNSETOWNER(r0, 0x400454cc, r2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') sendfile(r3, r3, 0x0, 0x6c2b) sendfile(r3, r0, 0x0, 0x7fffffff) 04:20:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0xc0045878, 0x0) 04:20:35 executing program 5: r0 = socket$kcm(0x2b, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x5) capset(&(0x7f0000000000)={0x20071026, r2}, &(0x7f0000000100)={0x5000000, 0x20, 0x1000, 0x9, 0x1, 0x9}) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25fe8000000000000005baa68754a30000000002000000000000000000000000002f00000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) 04:20:35 executing program 4: r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000180)={0x7, 0x1c, [0x4, 0x9, 0x780, 0x8000, 0x80, 0x7, 0xaf7]}) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r3 = open(&(0x7f0000000280)='./file0\x00', 0x300, 0x1) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) bind$isdn_base(r4, &(0x7f0000000700)={0x22, 0x8, 0x7, 0xbd, 0x3f}, 0x6) iopl(0x3) openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r3, &(0x7f0000000040)="30c0ad5562a7de0f6bcd9275fb2396d7f1e5236f26909df4e3c9865a619e4ecae5c18f9bc982154cbbeed58acd6903f0b91d2e2500e002b5a83a1dc40544a13ff488693bfe3164f75529c50f7f7d6152084e45c6656587d0a4d9bbed7d3f5cfd1c6daf24a29a212e3ab65683218815703a3eb683066a0593503f228ddf48a58e16949f403f91160ab8c01cf34a145dd2caceba61a3cb011b24fc551a8224301550aae87206097f64f2fb04616d1eb12909980e8aa1eac357021bee852a77a2791b4fcfc298f0f245e2293e988c1b039166"}, 0x20) sendfile(r2, r2, 0x0, 0x6c2b) sendfile(r2, r1, 0x0, 0x7fffffff) lstat(&(0x7f00000005c0)='./file0/../file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$btrfs(&(0x7f00000001c0)='btrfs\x00', &(0x7f0000000200)='./file0/file0\x00', 0x5, 0x4, &(0x7f0000000540)=[{&(0x7f0000000240)="2ee1", 0x2, 0x6}, {&(0x7f00000002c0)="025b7782323f67bb90259a55", 0xc, 0x3bedaae7}, {&(0x7f0000000300)="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", 0xfc, 0x2}, {&(0x7f0000000400)="ef8e5ae61647e2965830be25f5dae739d416f3a218a8c54f7084fae4077e9c4daa9d69dacfb3d599cbcae376f80891eac26254e75b6d54bf31a78c95d3e4d9097d8181287394347fd3d00f234ee1f3815bf063060c7b431580262a190d42045b0edfa3131cb1577cc093134e5c64c9c13f66ad4ffb47f6628b37faa5982fff8a8492da8d705a00000000", 0x8a, 0xf}], 0x2000000, &(0x7f0000000780)=ANY=[@ANYBLOB="64617461636f772c6e6f7373642c757365725f737562766f6c5f726d5f616c6c6f7765642c6d61785f696e6c696e653d38732d306d3135652c667261676d656e743d6d657461646174612c7365636c6162656c2d7569643c5b833946dc323908cb2bed845062b07db6edb8d75eeb3cb45ac9be867f10abdd626d641464222e902042e564e2aa0c7fa852e09fdd9cd8b905ca561397a47329bb720d16c58df25e298d7963991818a6ae4ee8ca7a7b66a8bc832e7ec5aee1d1277d9f604bf1e0f706daef650829b171ec07d835b24e88f40e9babfc52c9e76603e15a98b01b3a", @ANYRESDEC=r5, @ANYBLOB=',\x00']) 04:20:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0xc0189436, 0x0) 04:20:35 executing program 0: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x750be9bd21a9698e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x10000, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="361c2741329b", 'ip6_vti0\x00'}}) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x36f}], 0x0, 0x0) [ 291.866027][T11171] kasan: CONFIG_KASAN_INLINE enabled [ 291.871380][T11171] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 291.879473][T11171] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 291.886423][T11171] CPU: 0 PID: 11171 Comm: syz-executor.4 Not tainted 5.4.0-rc7-next-20191115 #0 [ 291.895505][T11171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.905589][T11171] RIP: 0010:tss_update_io_bitmap+0x138/0x590 04:20:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0xc020660b, 0x0) [ 291.911581][T11171] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 9e 03 00 00 4c 89 ea 4c 8b 73 68 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 72 03 00 00 4d 3b 75 00 0f 85 35 02 00 00 48 8d [ 291.931194][T11171] RSP: 0018:ffff888059d97e80 EFLAGS: 00010046 [ 291.937270][T11171] RAX: dffffc0000000000 RBX: ffff8880ae80a000 RCX: ffffffff812a12e8 [ 291.945245][T11171] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880ae80a068 [ 291.953216][T11171] RBP: ffff888059d97f10 R08: 1ffff1100ad93c58 R09: ffffed100ad93c59 [ 291.961193][T11171] R10: ffffed100ad93c58 R11: ffff888056c9e2c7 R12: 1ffff1100b3b2fd2 [ 291.969170][T11171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.977096][ T4006] kobject: 'loop2' (00000000a6563092): kobject_uevent_env [ 291.977147][T11171] FS: 00007fdfe5cac700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 291.993156][T11171] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.993562][ T4006] kobject: 'loop2' (00000000a6563092): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 291.999746][T11171] CR2: 0000001b2fc22000 CR3: 000000009852f000 CR4: 00000000001406f0 [ 291.999757][T11171] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 291.999764][T11171] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 291.999768][T11171] Call Trace: [ 291.999791][T11171] ? set_tsc_mode+0x330/0x330 [ 291.999817][T11171] ? lockdown_is_locked_down+0x42/0xb4 [ 292.047277][T11171] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 292.053353][T11171] ? trace_hardirqs_off+0x62/0x240 [ 292.058470][T11171] ? task_update_io_bitmap+0x78/0xe0 04:20:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0xc040563e, 0x0) [ 292.063765][T11171] do_syscall_64+0x685/0x790 [ 292.068363][T11171] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 292.074257][T11171] RIP: 0033:0x45a639 [ 292.078158][T11171] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 292.097028][ T4006] kobject: 'loop2' (00000000a6563092): kobject_uevent_env [ 292.097797][T11171] RSP: 002b:00007fdfe5cabc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ac [ 292.111650][ T4006] kobject: 'loop2' (00000000a6563092): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 292.113283][T11171] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 000000000045a639 [ 292.113290][T11171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 292.113304][T11171] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 292.147336][T11171] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdfe5cac6d4 [ 292.155314][T11171] R13: 00000000004c6c26 R14: 00000000004dc060 R15: 00000000ffffffff [ 292.163293][T11171] Modules linked in: [ 292.167209][T11171] ---[ end trace bdd543a6fb260513 ]--- [ 292.172683][T11171] RIP: 0010:tss_update_io_bitmap+0x138/0x590 [ 292.178668][T11171] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 9e 03 00 00 4c 89 ea 4c 8b 73 68 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 72 03 00 00 4d 3b 75 00 0f 85 35 02 00 00 48 8d [ 292.198363][T11171] RSP: 0018:ffff888059d97e80 EFLAGS: 00010046 [ 292.204436][T11171] RAX: dffffc0000000000 RBX: ffff8880ae80a000 RCX: ffffffff812a12e8 04:20:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r1, 0x203ffffd, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/102, 0x66) r2 = socket(0x10, 0x0, 0xc) write(r2, &(0x7f0000000000)="1f00000003027ffffd3f00c007110000f30501000b00060000b67aca310000", 0x1f) read(0xffffffffffffffff, &(0x7f0000000200)=""/102, 0x66) r3 = socket(0x10, 0x200000000080003, 0x0) write(r3, &(0x7f0000000000)="1f00000003027ffffd3f00c007110000f30501000b00060000b67aca310000", 0x1f) read(r3, &(0x7f0000000200)=""/102, 0x66) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000600)={{{@in=@initdev, @in6=@ipv4={[], [], @multicast1}}}, {{@in=@dev}, 0x0, @in6=@empty}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = socket(0x10, 0x200000000080003, 0xc) write(r4, &(0x7f0000000000)="1f00000003027ffffd3f00c007110000f30501000b00060000b67aca310000", 0x1f) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x0, 0x6, 0x2, 0xffffffe0}) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf, 0x1f, 0x21}, 0x20000357) r5 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$IOC_PR_CLEAR(r5, 0x401070cd, &(0x7f0000000040)={0x1000}) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) 04:20:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0xc0945662, 0x0) [ 292.206801][ T4006] kobject: 'loop2' (00000000a6563092): kobject_uevent_env [ 292.212400][T11171] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880ae80a068 [ 292.212408][T11171] RBP: ffff888059d97f10 R08: 1ffff1100ad93c58 R09: ffffed100ad93c59 [ 292.212415][T11171] R10: ffffed100ad93c58 R11: ffff888056c9e2c7 R12: 1ffff1100b3b2fd2 [ 292.212422][T11171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 292.212437][T11171] FS: 00007fdfe5cac700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 292.237216][ T4006] kobject: 'loop2' (00000000a6563092): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 292.243413][T11171] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.243421][T11171] CR2: 0000001b2fc22000 CR3: 000000009852f000 CR4: 00000000001406f0 [ 292.243431][T11171] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 292.243437][T11171] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 292.243452][T11171] Kernel panic - not syncing: Fatal exception [ 292.308458][T11171] Kernel Offset: disabled [ 292.312796][T11171] Rebooting in 86400 seconds..