2425.424913][T27888] R10: 00007fff5bc3c780 R11: 0000000000000246 R12: fffffffffffffffe [ 2425.432875][T27888] R13: 000000000025025d R14: 00000000000003e8 R15: 000000000073bf0c 03:46:49 executing program 5: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x90002) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0x8800000) 03:46:49 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0ee0e110f9ff000000002d0003257b066f0240683bd50f41e00d4176f85bc5da442dcf02f2bc044924e4d9002000000000e114987208000029c6367f1dbc72260ba2b728c7393b4089fced1519125b04d7125eae309387be1f9987700900d0d7b87fe4167e07d368a8db66283450ed42c4320bb11c9dfc5774a820333eee131db8df3722bf17a39aa9e958289a5893f15007f8498fc450e109ff0db106fa5eed88b3cce47a97c47a4a1d248a3fa0bf6193000000000000000000"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x400, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0xfffffffffffffd6d, 0x0, 0x0, 0x7ac4328309b792a3) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) accept(r1, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x80) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[0x1ff, 0x4, 0xfffffffffffffff9, 0x1, 0x0, 0x8000, 0x6]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r3, 0x0, r3) keyctl$session_to_parent(0x12) [ 2425.449316][T27888] memory: usage 307200kB, limit 307200kB, failcnt 8354 [ 2425.484621][ T26] audit: type=1800 audit(2000000809.340:1103): pid=27910 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17227 res=0 [ 2425.506923][T27888] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2425.528572][T27888] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2425.576640][T27888] Memory cgroup stats for /syz1: cache:11044KB rss:243188KB rss_huge:221184KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:243196KB inactive_file:4KB active_file:4KB unevictable:11008KB [ 2425.585429][ T26] audit: type=1800 audit(2000000809.440:1104): pid=27910 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17227 res=0 [ 2425.621953][T27888] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=26304,uid=0 [ 2425.637840][T27888] Memory cgroup out of memory: Killed process 26304 (syz-executor.1) total-vm:72580kB, anon-rss:4264kB, file-rss:35800kB, shmem-rss:0kB 03:46:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) semget$private(0x0, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) rt_sigsuspend(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x600, 0x2000000000002) 03:46:51 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="240000000b0607031dfffd946fa2830020200a0010000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:46:51 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_TSC(0x19, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{0x8, 0x2}, {0x8, 0x0, r2}, {0x8, 0x0, r2}], {0x10, 0x2}}, 0x3c, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) 03:46:51 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000003) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000000)='\x00\x00\x04\x00\x00\x00\xfd\xfd\xff\xff\xa5,\xd0\xfdOp\x95\x00\xd7\xf4\xda\xa6\x1f\x8c\x82\x81\xbf\xb1\xe2G\xc3\x00\x80\x00\x00[Pu \xa8\x8b\x911\f\x8a\x15\xbb\xc7)\x06\tN\x19\xder?\xc4%\xbbS\xe8\x91\x134~\x9f=/a\x04\x01\xe8*s\x0eV\xf2B\xa9t:\x9f7\xaf\xc2\x02\\\x19:5V\x19\x9b\xa1\x05\xf9D\xff2\xf0m0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0xc8) shutdown(r1, 0x8000000000000002) 03:46:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$VHOST_SET_MEM_TABLE(r0, 0xaf01, 0x0) 03:46:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x2, {{0x2, 0x0, @multicast2}}}, 0x118) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f00000000c0), 0x4) 03:46:52 executing program 1: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, 0x0, 0x60d93187db0eea97, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(r3, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) timerfd_settime(r3, 0x1, &(0x7f0000000200)={{}, {0x0, 0x989680}}, &(0x7f0000000240)) ptrace(0x10, r4) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000003c0)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{0x2, 0x401, 0x1f, 0x7f}, 'syz0\x00', 0x2b}) ptrace$pokeuser(0x6, r4, 0x388, 0xffffffffffffffff) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r0, 0x0, 0x0, 0x4003ff) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000280)={@remote, @broadcast}, 0x8) write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/195, 0xc3, 0x401c, 0x8, 0x46048ba3, 0x9, 0x101}, 0x120) [ 2428.097341][T27937] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 03:46:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0xc8) shutdown(r1, 0x8000000000000002) 03:46:52 executing program 0: pipe(&(0x7f0000000000)) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r1, &(0x7f0000000080), 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 03:46:52 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="240000000b0607031dfffd946fa2830020200a0010000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:46:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x3}, 0x14) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x35) fcntl$setstatus(r1, 0x4, 0x42805) 03:46:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0xc8) shutdown(r1, 0x8000000000000002) 03:46:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) semget$private(0x0, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) rt_sigsuspend(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x600, 0x2000000000002) [ 2428.330276][T27954] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 03:46:52 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="240000000b0607031dfffd946fa2830020200a0010000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:46:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0xc8) shutdown(r1, 0x8000000000000002) 03:46:52 executing program 1: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, 0x0, 0x60d93187db0eea97, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(r3, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) timerfd_settime(r3, 0x1, &(0x7f0000000200)={{}, {0x0, 0x989680}}, &(0x7f0000000240)) ptrace(0x10, r4) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000003c0)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{0x2, 0x401, 0x1f, 0x7f}, 'syz0\x00', 0x2b}) ptrace$pokeuser(0x6, r4, 0x388, 0xffffffffffffffff) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r0, 0x0, 0x0, 0x4003ff) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000280)={@remote, @broadcast}, 0x8) write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/195, 0xc3, 0x401c, 0x8, 0x46048ba3, 0x9, 0x101}, 0x120) [ 2428.535664][T27971] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 03:46:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) semget$private(0x0, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) rt_sigsuspend(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x600, 0x2000000000002) 03:46:52 executing program 5: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, 0x0, 0x60d93187db0eea97, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(r3, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) timerfd_settime(r3, 0x1, &(0x7f0000000200)={{}, {0x0, 0x989680}}, &(0x7f0000000240)) ptrace(0x10, r4) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000003c0)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{0x2, 0x401, 0x1f, 0x7f}, 'syz0\x00', 0x2b}) ptrace$pokeuser(0x6, r4, 0x388, 0xffffffffffffffff) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r0, 0x0, 0x0, 0x4003ff) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000280)={@remote, @broadcast}, 0x8) write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/195, 0xc3, 0x401c, 0x8, 0x46048ba3, 0x9, 0x101}, 0x120) 03:46:52 executing program 1: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, 0x0, 0x60d93187db0eea97, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(r3, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) timerfd_settime(r3, 0x1, &(0x7f0000000200)={{}, {0x0, 0x989680}}, &(0x7f0000000240)) ptrace(0x10, r4) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000003c0)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{0x2, 0x401, 0x1f, 0x7f}, 'syz0\x00', 0x2b}) ptrace$pokeuser(0x6, r4, 0x388, 0xffffffffffffffff) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r0, 0x0, 0x0, 0x4003ff) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000280)={@remote, @broadcast}, 0x8) write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/195, 0xc3, 0x401c, 0x8, 0x46048ba3, 0x9, 0x101}, 0x120) 03:46:52 executing program 4: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, 0x0, 0x60d93187db0eea97, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(r3, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) timerfd_settime(r3, 0x1, &(0x7f0000000200)={{}, {0x0, 0x989680}}, &(0x7f0000000240)) ptrace(0x10, r4) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000003c0)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{0x2, 0x401, 0x1f, 0x7f}, 'syz0\x00', 0x2b}) ptrace$pokeuser(0x6, r4, 0x388, 0xffffffffffffffff) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r0, 0x0, 0x0, 0x4003ff) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000280)={@remote, @broadcast}, 0x8) write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/195, 0xc3, 0x401c, 0x8, 0x46048ba3, 0x9, 0x101}, 0x120) 03:46:52 executing program 0: pipe(&(0x7f0000000000)) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r1, &(0x7f0000000080), 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 03:46:52 executing program 1: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, 0x0, 0x60d93187db0eea97, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(r3, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) timerfd_settime(r3, 0x1, &(0x7f0000000200)={{}, {0x0, 0x989680}}, &(0x7f0000000240)) ptrace(0x10, r4) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000003c0)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{0x2, 0x401, 0x1f, 0x7f}, 'syz0\x00', 0x2b}) ptrace$pokeuser(0x6, r4, 0x388, 0xffffffffffffffff) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r0, 0x0, 0x0, 0x4003ff) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000280)={@remote, @broadcast}, 0x8) write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/195, 0xc3, 0x401c, 0x8, 0x46048ba3, 0x9, 0x101}, 0x120) [ 2429.223872][ C0] net_ratelimit: 26 callbacks suppressed [ 2429.223880][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2429.235489][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2429.241329][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2429.247188][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2429.253027][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2429.258837][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2429.264701][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2429.270467][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2429.276371][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2429.282123][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:46:55 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)) 03:46:55 executing program 4: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, 0x0, 0x60d93187db0eea97, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(r3, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) timerfd_settime(r3, 0x1, &(0x7f0000000200)={{}, {0x0, 0x989680}}, &(0x7f0000000240)) ptrace(0x10, r4) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000003c0)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{0x2, 0x401, 0x1f, 0x7f}, 'syz0\x00', 0x2b}) ptrace$pokeuser(0x6, r4, 0x388, 0xffffffffffffffff) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r0, 0x0, 0x0, 0x4003ff) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000280)={@remote, @broadcast}, 0x8) write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/195, 0xc3, 0x401c, 0x8, 0x46048ba3, 0x9, 0x101}, 0x120) 03:46:55 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x101000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}}, &(0x7f0000000340)=0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x1106, 'lblc\x00'}, 0x2c) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r6 = socket$l2tp(0x18, 0x1, 0x1) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000600)=""/160) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000500)={r3, 0x4}, 0x8) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000440)={0x0, 0x0, {0x9, 0x14, 0x15, 0x1e, 0xa, 0x10001, 0x6, 0x11b}}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000380)={r3, 0x4}, 0x8) connect$l2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e21, 0x81, @empty, 0x8000}}}, &(0x7f0000000200)=0x84) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) sendmmsg(r6, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x2ed, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000400)={0x1, 0x0, {0x0, 0x0, 0x0, 0x12, 0xa, 0xff}}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8050c800}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x34, r8, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x3, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}}}, [""]}, 0x34}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0xc56, 0x4) 03:46:55 executing program 5: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, 0x0, 0x60d93187db0eea97, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(r3, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) timerfd_settime(r3, 0x1, &(0x7f0000000200)={{}, {0x0, 0x989680}}, &(0x7f0000000240)) ptrace(0x10, r4) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000003c0)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{0x2, 0x401, 0x1f, 0x7f}, 'syz0\x00', 0x2b}) ptrace$pokeuser(0x6, r4, 0x388, 0xffffffffffffffff) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r0, 0x0, 0x0, 0x4003ff) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000280)={@remote, @broadcast}, 0x8) write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/195, 0xc3, 0x401c, 0x8, 0x46048ba3, 0x9, 0x101}, 0x120) 03:46:55 executing program 0: pipe(&(0x7f0000000000)) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r1, &(0x7f0000000080), 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 03:46:55 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x807, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x9, @pix={0x0, 0x0, 0x33565348}}) 03:46:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) 03:46:55 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r0 = semget(0xffffffffffffffff, 0x1, 0x0) semtimedop(r0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x5, 0x200, 0x1800}], 0x2, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0xc000000000000) 03:46:55 executing program 4: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, 0x0, 0x60d93187db0eea97, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(r3, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) timerfd_settime(r3, 0x1, &(0x7f0000000200)={{}, {0x0, 0x989680}}, &(0x7f0000000240)) ptrace(0x10, r4) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000003c0)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{0x2, 0x401, 0x1f, 0x7f}, 'syz0\x00', 0x2b}) ptrace$pokeuser(0x6, r4, 0x388, 0xffffffffffffffff) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r0, 0x0, 0x0, 0x4003ff) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000280)={@remote, @broadcast}, 0x8) write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/195, 0xc3, 0x401c, 0x8, 0x46048ba3, 0x9, 0x101}, 0x120) 03:46:55 executing program 5: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, 0x0, 0x60d93187db0eea97, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(r3, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) timerfd_settime(r3, 0x1, &(0x7f0000000200)={{}, {0x0, 0x989680}}, &(0x7f0000000240)) ptrace(0x10, r4) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000003c0)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{0x2, 0x401, 0x1f, 0x7f}, 'syz0\x00', 0x2b}) ptrace$pokeuser(0x6, r4, 0x388, 0xffffffffffffffff) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r0, 0x0, 0x0, 0x4003ff) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000280)={@remote, @broadcast}, 0x8) write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/195, 0xc3, 0x401c, 0x8, 0x46048ba3, 0x9, 0x101}, 0x120) 03:46:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) 03:46:55 executing program 0: pipe(&(0x7f0000000000)) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r1, &(0x7f0000000080), 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 03:46:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000000070708020068fffdffff2e0a0000000c0001400c00000565d0ff010c000200050088f237f2c9d7"], 0x2c}}, 0x0) 03:46:56 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000001000)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) 03:46:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) 03:46:56 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100), 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x7e) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000b85fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x400000000000033, &(0x7f0000000140)=0xb6a, 0x100000204) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x24}, 0x2000) sendmmsg(r0, &(0x7f00000000c0), 0x182, 0x0) 03:46:56 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x7400000000000000) 03:46:56 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000001000)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) 03:46:56 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x101000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}}, &(0x7f0000000340)=0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x1106, 'lblc\x00'}, 0x2c) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r6 = socket$l2tp(0x18, 0x1, 0x1) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000600)=""/160) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000500)={r3, 0x4}, 0x8) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000440)={0x0, 0x0, {0x9, 0x14, 0x15, 0x1e, 0xa, 0x10001, 0x6, 0x11b}}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000380)={r3, 0x4}, 0x8) connect$l2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e21, 0x81, @empty, 0x8000}}}, &(0x7f0000000200)=0x84) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) sendmmsg(r6, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x2ed, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000400)={0x1, 0x0, {0x0, 0x0, 0x0, 0x12, 0xa, 0xff}}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8050c800}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x34, r8, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x3, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}}}, [""]}, 0x34}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0xc56, 0x4) [ 2432.513118][T28062] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2432.532578][T28062] CPU: 1 PID: 28062 Comm: syz-executor.5 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2432.541743][T28062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2432.551871][T28062] Call Trace: [ 2432.555176][T28062] dump_stack+0x172/0x1f0 [ 2432.559528][T28062] dump_header+0x10f/0xb6c [ 2432.563964][T28062] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2432.569784][T28062] ? ___ratelimit+0x60/0x595 [ 2432.574382][T28062] ? do_raw_spin_unlock+0x57/0x270 [ 2432.579594][T28062] oom_kill_process.cold+0x10/0x15 [ 2432.584828][T28062] out_of_memory+0x79a/0x1280 [ 2432.589517][T28062] ? lock_downgrade+0x880/0x880 [ 2432.594374][T28062] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2432.600770][T28062] ? oom_killer_disable+0x280/0x280 [ 2432.606062][T28062] ? find_held_lock+0x35/0x130 [ 2432.610849][T28062] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2432.616404][T28062] ? memcg_event_wake+0x230/0x230 [ 2432.621531][T28062] ? do_raw_spin_unlock+0x57/0x270 [ 2432.626652][T28062] ? _raw_spin_unlock+0x2d/0x50 [ 2432.631511][T28062] try_charge+0x118d/0x1790 [ 2432.636033][T28062] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2432.641586][T28062] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2432.647896][T28062] ? kasan_check_read+0x11/0x20 [ 2432.652763][T28062] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2432.658319][T28062] mem_cgroup_try_charge+0x24d/0x5e0 [ 2432.663614][T28062] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2432.669255][T28062] wp_page_copy+0x408/0x1740 [ 2432.673881][T28062] ? find_held_lock+0x35/0x130 [ 2432.678657][T28062] ? pmd_pfn+0x1d0/0x1d0 [ 2432.682995][T28062] ? lock_downgrade+0x880/0x880 [ 2432.687855][T28062] ? __pte_alloc_kernel+0x220/0x220 [ 2432.693067][T28062] ? kasan_check_read+0x11/0x20 [ 2432.697928][T28062] ? do_raw_spin_unlock+0x57/0x270 [ 2432.703048][T28062] do_wp_page+0x5d8/0x16c0 [ 2432.707557][T28062] ? do_raw_spin_lock+0x12a/0x2e0 [ 2432.712590][T28062] ? rwlock_bug.part.0+0x90/0x90 [ 2432.717533][T28062] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2432.722904][T28062] ? add_mm_counter_fast.part.0+0x40/0x40 [ 2432.728736][T28062] __handle_mm_fault+0x22e8/0x3ec0 [ 2432.733862][T28062] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2432.739412][T28062] ? find_held_lock+0x35/0x130 [ 2432.744450][T28062] ? handle_mm_fault+0x322/0xb30 [ 2432.749409][T28062] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2432.755659][T28062] ? kasan_check_read+0x11/0x20 [ 2432.760521][T28062] handle_mm_fault+0x43f/0xb30 [ 2432.765298][T28062] __do_page_fault+0x5ef/0xda0 [ 2432.770077][T28062] do_page_fault+0x71/0x581 [ 2432.774586][T28062] ? page_fault+0x8/0x30 [ 2432.778836][T28062] page_fault+0x1e/0x30 [ 2432.782991][T28062] RIP: 0033:0x40d2e8 [ 2432.787333][T28062] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf e2 d5 4b 00 31 c0 e8 43 46 ff ff 31 ff e8 8c 42 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 7e 31 64 00 [ 2432.806945][T28062] RSP: 002b:00007ffc1614bec0 EFLAGS: 00010246 [ 2432.813020][T28062] RAX: 0000000081760279 RBX: 0000000076edc0ac RCX: 0000001b2de20000 [ 2432.820997][T28062] RDX: 0000000000000000 RSI: 0000000000000279 RDI: ffffffff81760279 [ 2432.828972][T28062] RBP: 0000000000000000 R08: 0000000081760279 R09: 000000008176027d [ 2432.836956][T28062] R10: 00007ffc1614c050 R11: 0000000000000246 R12: 000000000073bf88 [ 2432.844932][T28062] R13: 0000000080000000 R14: 00007f9efdb80008 R15: 0000000000000000 [ 2432.852934][T28062] ? trace_hardirqs_off_caller+0x19/0x220 03:46:56 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x101000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}}, &(0x7f0000000340)=0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x1106, 'lblc\x00'}, 0x2c) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r6 = socket$l2tp(0x18, 0x1, 0x1) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000600)=""/160) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000500)={r3, 0x4}, 0x8) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000440)={0x0, 0x0, {0x9, 0x14, 0x15, 0x1e, 0xa, 0x10001, 0x6, 0x11b}}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000380)={r3, 0x4}, 0x8) connect$l2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e21, 0x81, @empty, 0x8000}}}, &(0x7f0000000200)=0x84) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) sendmmsg(r6, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x2ed, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000400)={0x1, 0x0, {0x0, 0x0, 0x0, 0x12, 0xa, 0xff}}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8050c800}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x34, r8, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x3, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}}}, [""]}, 0x34}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0xc56, 0x4) 03:46:56 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x101000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}}, &(0x7f0000000340)=0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x1106, 'lblc\x00'}, 0x2c) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r6 = socket$l2tp(0x18, 0x1, 0x1) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000600)=""/160) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000500)={r3, 0x4}, 0x8) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000440)={0x0, 0x0, {0x9, 0x14, 0x15, 0x1e, 0xa, 0x10001, 0x6, 0x11b}}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000380)={r3, 0x4}, 0x8) connect$l2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e21, 0x81, @empty, 0x8000}}}, &(0x7f0000000200)=0x84) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) sendmmsg(r6, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x2ed, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000400)={0x1, 0x0, {0x0, 0x0, 0x0, 0x12, 0xa, 0xff}}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8050c800}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x34, r8, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x3, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}}}, [""]}, 0x34}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0xc56, 0x4) 03:46:56 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000001000)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) [ 2432.932286][T28062] memory: usage 307200kB, limit 307200kB, failcnt 6308 [ 2432.963016][T28062] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2432.996013][T28062] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2433.046383][T28062] Memory cgroup stats for /syz5: cache:76KB rss:249448KB rss_huge:225280KB shmem:56KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:249488KB inactive_file:0KB active_file:0KB unevictable:4KB 03:46:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) 03:46:57 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000001000)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) [ 2433.165057][T28062] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=27861,uid=0 [ 2433.311374][T28062] Memory cgroup out of memory: Killed process 27861 (syz-executor.5) total-vm:72580kB, anon-rss:4272kB, file-rss:35804kB, shmem-rss:0kB 03:46:57 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000001000)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) 03:46:57 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000001000)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) 03:46:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffdffbffffa0, &(0x7f0000000200)="60a7a4437409bbe695f44bfea6cfb493f66b549101040000000000008df2704631a5329025") 03:46:57 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) clock_getres(0x3, &(0x7f0000000080)) 03:46:57 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0xf0ffff, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2433.804334][ T26] audit: type=1804 audit(2000000817.674:1105): pid=28102 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="bus" dev="sda1" ino=17269 res=1 03:46:57 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000001000)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) 03:46:58 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x101000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}}, &(0x7f0000000340)=0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x1106, 'lblc\x00'}, 0x2c) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r6 = socket$l2tp(0x18, 0x1, 0x1) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000600)=""/160) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000500)={r3, 0x4}, 0x8) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000440)={0x0, 0x0, {0x9, 0x14, 0x15, 0x1e, 0xa, 0x10001, 0x6, 0x11b}}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000380)={r3, 0x4}, 0x8) connect$l2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e21, 0x81, @empty, 0x8000}}}, &(0x7f0000000200)=0x84) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) sendmmsg(r6, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x2ed, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000400)={0x1, 0x0, {0x0, 0x0, 0x0, 0x12, 0xa, 0xff}}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8050c800}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x34, r8, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x3, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}}}, [""]}, 0x34}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0xc56, 0x4) [ 2434.233471][ T26] audit: type=1804 audit(2000000818.104:1106): pid=28103 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="bus" dev="sda1" ino=17269 res=1 [ 2434.309528][ T26] audit: type=1804 audit(2000000818.144:1107): pid=28102 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="bus" dev="sda1" ino=17269 res=1 03:46:58 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x101000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}}, &(0x7f0000000340)=0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x1106, 'lblc\x00'}, 0x2c) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r6 = socket$l2tp(0x18, 0x1, 0x1) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000600)=""/160) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000500)={r3, 0x4}, 0x8) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000440)={0x0, 0x0, {0x9, 0x14, 0x15, 0x1e, 0xa, 0x10001, 0x6, 0x11b}}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000380)={r3, 0x4}, 0x8) connect$l2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e21, 0x81, @empty, 0x8000}}}, &(0x7f0000000200)=0x84) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) sendmmsg(r6, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x2ed, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000400)={0x1, 0x0, {0x0, 0x0, 0x0, 0x12, 0xa, 0xff}}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8050c800}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x34, r8, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x3, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}}}, [""]}, 0x34}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0xc56, 0x4) 03:46:58 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0xf0ffff, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:46:58 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syx1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00W1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x11c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80001, 0x0) 03:46:58 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) clock_getres(0x3, &(0x7f0000000080)) 03:46:58 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x101000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}}, &(0x7f0000000340)=0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x1106, 'lblc\x00'}, 0x2c) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r6 = socket$l2tp(0x18, 0x1, 0x1) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000600)=""/160) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000500)={r3, 0x4}, 0x8) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000440)={0x0, 0x0, {0x9, 0x14, 0x15, 0x1e, 0xa, 0x10001, 0x6, 0x11b}}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000380)={r3, 0x4}, 0x8) connect$l2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e21, 0x81, @empty, 0x8000}}}, &(0x7f0000000200)=0x84) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) sendmmsg(r6, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x2ed, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000400)={0x1, 0x0, {0x0, 0x0, 0x0, 0x12, 0xa, 0xff}}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8050c800}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x34, r8, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x3, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}}}, [""]}, 0x34}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0xc56, 0x4) [ 2434.627370][T28118] net_ratelimit: 28 callbacks suppressed [ 2434.627387][T28118] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2434.662963][ T26] audit: type=1804 audit(2000000818.525:1108): pid=28116 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="bus" dev="sda1" ino=17328 res=1 [ 2434.734709][T21041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2434.787393][T21041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 03:46:58 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) clock_getres(0x3, &(0x7f0000000080)) [ 2434.831047][T21041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2434.883240][T21041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2434.906149][ T9224] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2434.924202][T21041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 03:46:58 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0xf0ffff, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2434.940076][ T9224] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2434.968267][T21041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2434.989656][ T26] audit: type=1804 audit(2000000818.855:1109): pid=28130 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="bus" dev="sda1" ino=17245 res=1 [ 2435.009390][T21041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2435.036072][ T9224] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2435.055052][T21041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2435.092687][T28136] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2435.095259][ T9224] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2435.115272][T21041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2435.159079][T21041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2435.203619][T21041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2435.214690][ T9224] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2435.270840][ T9224] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 03:46:59 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0xf0ffff, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2435.325156][ T9224] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2435.348275][T21041] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syx1 [ 2435.392860][ T9224] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2435.414234][T28138] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2435.456075][ T9224] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2435.470717][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2435.476586][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2435.482462][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2435.488284][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2435.494202][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2435.500005][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2435.505908][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2435.516203][ T9224] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2435.556366][ T9224] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2435.620335][ T9224] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syx1 03:46:59 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) clock_getres(0x3, &(0x7f0000000080)) 03:46:59 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) clock_getres(0x3, &(0x7f0000000080)) 03:46:59 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syx1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00W1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x11c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80001, 0x0) [ 2435.809965][ T26] audit: type=1804 audit(2000000819.675:1110): pid=28140 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="bus" dev="sda1" ino=17253 res=1 [ 2435.864240][ T9224] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2435.885667][ T9224] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2435.913293][ T26] audit: type=1804 audit(2000000819.715:1111): pid=28143 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="bus" dev="sda1" ino=17260 res=1 [ 2435.950291][ T9224] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2435.993963][ T9224] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2436.032145][ T9224] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2436.068447][ T9224] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2436.105763][ T9224] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 03:47:00 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x101000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}}, &(0x7f0000000340)=0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x1106, 'lblc\x00'}, 0x2c) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r6 = socket$l2tp(0x18, 0x1, 0x1) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000600)=""/160) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000500)={r3, 0x4}, 0x8) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000440)={0x0, 0x0, {0x9, 0x14, 0x15, 0x1e, 0xa, 0x10001, 0x6, 0x11b}}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000380)={r3, 0x4}, 0x8) connect$l2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e21, 0x81, @empty, 0x8000}}}, &(0x7f0000000200)=0x84) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) sendmmsg(r6, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x2ed, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000400)={0x1, 0x0, {0x0, 0x0, 0x0, 0x12, 0xa, 0xff}}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8050c800}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x34, r8, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x3, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}}}, [""]}, 0x34}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0xc56, 0x4) [ 2436.138481][ T9224] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2436.167092][ T9224] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2436.192479][ T9224] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2436.219585][ T9224] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2436.258249][ T9224] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syx1 03:47:00 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x101000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}}, &(0x7f0000000340)=0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x1106, 'lblc\x00'}, 0x2c) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r6 = socket$l2tp(0x18, 0x1, 0x1) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000600)=""/160) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000500)={r3, 0x4}, 0x8) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000440)={0x0, 0x0, {0x9, 0x14, 0x15, 0x1e, 0xa, 0x10001, 0x6, 0x11b}}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000380)={r3, 0x4}, 0x8) connect$l2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e21, 0x81, @empty, 0x8000}}}, &(0x7f0000000200)=0x84) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) sendmmsg(r6, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x2ed, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000400)={0x1, 0x0, {0x0, 0x0, 0x0, 0x12, 0xa, 0xff}}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8050c800}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x34, r8, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x3, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}}}, [""]}, 0x34}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0xc56, 0x4) 03:47:00 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) clock_getres(0x3, &(0x7f0000000080)) 03:47:00 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syx1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00W1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x11c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80001, 0x0) 03:47:00 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syx1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00W1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x11c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80001, 0x0) 03:47:00 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x101000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}}, &(0x7f0000000340)=0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x1106, 'lblc\x00'}, 0x2c) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r6 = socket$l2tp(0x18, 0x1, 0x1) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000600)=""/160) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000500)={r3, 0x4}, 0x8) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000440)={0x0, 0x0, {0x9, 0x14, 0x15, 0x1e, 0xa, 0x10001, 0x6, 0x11b}}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000380)={r3, 0x4}, 0x8) connect$l2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e21, 0x81, @empty, 0x8000}}}, &(0x7f0000000200)=0x84) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) sendmmsg(r6, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x2ed, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000400)={0x1, 0x0, {0x0, 0x0, 0x0, 0x12, 0xa, 0xff}}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8050c800}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x34, r8, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x3, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}}}, [""]}, 0x34}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0xc56, 0x4) [ 2436.557810][ T26] audit: type=1804 audit(2000000820.426:1112): pid=28154 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="bus" dev="sda1" ino=17253 res=1 03:47:00 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syx1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00W1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x11c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80001, 0x0) [ 2436.662362][ T9224] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 2436.669812][ T9224] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 2436.729252][ T9224] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 2436.792578][ T9224] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 2436.853093][ T9224] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 03:47:00 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syx1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00W1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x11c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80001, 0x0) [ 2436.920908][ T9224] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 2436.984886][ T9224] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 2437.023399][ T9224] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 2437.053114][ T9224] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 2437.107727][ T9224] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 2437.151240][ T9224] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 03:47:01 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) clock_getres(0x3, &(0x7f0000000080)) 03:47:01 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) clock_getres(0x3, &(0x7f0000000080)) [ 2437.204465][ T9224] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syx1 [ 2437.348192][ T26] audit: type=1804 audit(2000000821.216:1113): pid=28175 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="bus" dev="sda1" ino=17253 res=1 [ 2437.444926][ T26] audit: type=1804 audit(2000000821.256:1114): pid=28176 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="bus" dev="sda1" ino=17290 res=1 03:47:01 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syx1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00W1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x11c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80001, 0x0) [ 2437.800152][ T9224] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 2437.807594][ T9224] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 2437.863152][ T9224] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 2437.893223][ T9224] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 03:47:01 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) clock_getres(0x3, &(0x7f0000000080)) [ 2437.923301][ T9224] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 2437.953074][ T9224] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 2437.971648][ T9224] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 2437.993072][ T9224] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 2438.022394][ T9224] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 2438.055046][ T9224] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 2438.092508][ T9224] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 2438.132435][ T9224] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syx1 03:47:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r0, &(0x7f0000000480), 0x20000000000000fd, 0x0) 03:47:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x4001, 0x4) sendto$inet6(r0, 0x0, 0xfffffd97, 0x0, &(0x7f0000000040)={0xa, 0x2000000004a23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x15}}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000540)={&(0x7f00000002c0)=@nl=@proc, 0x80, 0x0}, 0x2000) 03:47:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r2 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$netrom(r2, &(0x7f0000001640)=""/4096, 0xfefc, 0x0, 0x0, 0x0) 03:47:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000500)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) 03:47:02 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) clock_getres(0x3, &(0x7f0000000080)) 03:47:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rseq(0x0, 0x0, 0x0, 0x0) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20000, 0x81) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100)=0x41, 0x4) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000200)="0fc7f43e650f01c80f060fae8600000f01eeba410066ed66b9b70900000f320fc76cf6b876028ed8b84e0c8ed0", 0x2d}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040)=0x5, 0x2) 03:47:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000340)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000740)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x62000, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000240)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2) write$UHID_SET_REPORT_REPLY(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1d) setsockopt$inet6_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000480)={0x0, 0x3962, 0x7fff, [], &(0x7f0000000440)=0xea29}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x7ff}, &(0x7f00000002c0)=0x8) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'lo\x00\n\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00&\x00', {0x2, 0x0, @rand_addr=0xfffffffffffffffe}}) 03:47:02 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x2ba) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 03:47:02 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(r3, 0xf, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000300), 0x10) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000180)) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) syz_open_pts(r4, 0x0) sched_setscheduler(0x0, 0x6, 0x0) write(r4, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) 03:47:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000500)=[{&(0x7f0000000080)="803f8e15d67d000019000300e60100006cff9900000000000020000001000000004000000040000080000000000000006d5ebe5a0000ffff53efad51ffffffffff808b4cd8fcc14fdfb3f4fb4f913c8acc249699b8339715bdafe936bd82f6bf250f0bfb889ab581a4426ea388b2beb62f0df8f695aa4548a322679f7ea0587ae2f4353ae723a8caacfc9f64416f973d09da25a174f379f276470f9c467ffbf5f4f32a9d79762341f782d291f20e5eb9ff3203ef33590e2c982589b5f9d2d25ad2c0be1021e138fd73a0390a4ea43c6c6d22f9408404480232f5c801452c6cfe2446e0a3dd85e3772f07c514e8a7115caa388e02cd2f5ca280c4c60b1b0f357eef", 0x101, 0x400}], 0x0, 0x0) [ 2439.157732][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 2439.157747][ T26] audit: type=1326 audit(2000000823.027:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28205 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0x50000 03:47:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r2 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$netrom(r2, &(0x7f0000001640)=""/4096, 0xfefc, 0x0, 0x0, 0x0) 03:47:03 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x4000, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000200)={0x2, 0x1, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=[@mask_cswp={0x5000, 0x114, 0x2, {{}, &(0x7f0000000e80), &(0x7f0000000ec0)}}], 0x58}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xe5, 0x40) write$input_event(r3, &(0x7f00000000c0)={{0x0, 0x7530}, 0x15, 0x1, 0x9bdd}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0xda4fff08) perf_event_open(0x0, 0x0, 0xc, r1, 0x9) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0xff1c) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x660c, 0x1a000000) openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000140)) io_setup(0x1, &(0x7f0000000240)) io_setup(0x800, &(0x7f0000000280)=0x0) io_cancel(r5, 0x0, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101206, 0x0) 03:47:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000340)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000740)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x62000, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000240)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2) write$UHID_SET_REPORT_REPLY(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1d) setsockopt$inet6_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000480)={0x0, 0x3962, 0x7fff, [], &(0x7f0000000440)=0xea29}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x7ff}, &(0x7f00000002c0)=0x8) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'lo\x00\n\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00&\x00', {0x2, 0x0, @rand_addr=0xfffffffffffffffe}}) [ 2439.341918][ T26] audit: type=1326 audit(2000000823.027:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28205 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x458079 code=0x50000 [ 2439.427058][ T26] audit: type=1326 audit(2000000823.037:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28205 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x458079 code=0x50000 03:47:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 03:47:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000340)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000740)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x62000, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000240)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2) write$UHID_SET_REPORT_REPLY(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1d) setsockopt$inet6_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000480)={0x0, 0x3962, 0x7fff, [], &(0x7f0000000440)=0xea29}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x7ff}, &(0x7f00000002c0)=0x8) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'lo\x00\n\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00&\x00', {0x2, 0x0, @rand_addr=0xfffffffffffffffe}}) [ 2439.593088][ T26] audit: type=1326 audit(2000000823.037:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28205 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0x50000 03:47:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x600000000000000, [0x277, 0x0, 0x1b], [0xc2]}) [ 2439.667103][ T26] audit: type=1326 audit(2000000823.047:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28205 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=298 compat=0 ip=0x458079 code=0x50000 [ 2439.720903][ T26] audit: type=1326 audit(2000000823.047:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28205 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45aeda code=0x50000 03:47:03 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000002000000400030006000d00000002002000e000000100000000000000000800120002000200000000007d228000180000000303010000000300000000000000001f03000000160000000301000000000000000000000000000000000000030005000000000002000000e00000010000000000000000"], 0x80}}, 0x0) [ 2439.801779][ T26] audit: type=1326 audit(2000000823.047:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28205 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x458079 code=0x50000 [ 2439.916661][ T26] audit: type=1326 audit(2000000823.047:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28205 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x458079 code=0x50000 [ 2439.967937][ T26] audit: type=1326 audit(2000000823.057:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28205 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x458079 code=0x50000 [ 2439.999167][ T26] audit: type=1326 audit(2000000823.057:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28205 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x458079 code=0x50000 03:47:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rseq(0x0, 0x0, 0x0, 0x0) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20000, 0x81) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100)=0x41, 0x4) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000200)="0fc7f43e650f01c80f060fae8600000f01eeba410066ed66b9b70900000f320fc76cf6b876028ed8b84e0c8ed0", 0x2d}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040)=0x5, 0x2) 03:47:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r2 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$netrom(r2, &(0x7f0000001640)=""/4096, 0xfefc, 0x0, 0x0, 0x0) [ 2440.098449][ C1] net_ratelimit: 27 callbacks suppressed [ 2440.098458][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2440.109965][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:47:04 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000002000000400030006000d00000002002000e000000100000000000000000800120002000200000000007d228000180000000303010000000300000000000000001f03000000160000000301000000000000000000000000000000000000030005000000000002000000e00000010000000000000000"], 0x80}}, 0x0) 03:47:04 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(r3, 0xf, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000300), 0x10) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000180)) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) syz_open_pts(r4, 0x0) sched_setscheduler(0x0, 0x6, 0x0) write(r4, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) 03:47:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r2 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$netrom(r2, &(0x7f0000001640)=""/4096, 0xfefc, 0x0, 0x0, 0x0) 03:47:04 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000002000000400030006000d00000002002000e000000100000000000000000800120002000200000000007d228000180000000303010000000300000000000000001f03000000160000000301000000000000000000000000000000000000030005000000000002000000e00000010000000000000000"], 0x80}}, 0x0) 03:47:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000340)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000740)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x62000, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000240)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2) write$UHID_SET_REPORT_REPLY(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1d) setsockopt$inet6_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000480)={0x0, 0x3962, 0x7fff, [], &(0x7f0000000440)=0xea29}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x7ff}, &(0x7f00000002c0)=0x8) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'lo\x00\n\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00&\x00', {0x2, 0x0, @rand_addr=0xfffffffffffffffe}}) 03:47:04 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x4000, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000200)={0x2, 0x1, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=[@mask_cswp={0x5000, 0x114, 0x2, {{}, &(0x7f0000000e80), &(0x7f0000000ec0)}}], 0x58}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xe5, 0x40) write$input_event(r3, &(0x7f00000000c0)={{0x0, 0x7530}, 0x15, 0x1, 0x9bdd}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0xda4fff08) perf_event_open(0x0, 0x0, 0xc, r1, 0x9) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0xff1c) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x660c, 0x1a000000) openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000140)) io_setup(0x1, &(0x7f0000000240)) io_setup(0x800, &(0x7f0000000280)=0x0) io_cancel(r5, 0x0, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101206, 0x0) 03:47:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rseq(0x0, 0x0, 0x0, 0x0) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20000, 0x81) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100)=0x41, 0x4) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000200)="0fc7f43e650f01c80f060fae8600000f01eeba410066ed66b9b70900000f320fc76cf6b876028ed8b84e0c8ed0", 0x2d}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040)=0x5, 0x2) 03:47:04 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x4000, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000200)={0x2, 0x1, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=[@mask_cswp={0x5000, 0x114, 0x2, {{}, &(0x7f0000000e80), &(0x7f0000000ec0)}}], 0x58}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xe5, 0x40) write$input_event(r3, &(0x7f00000000c0)={{0x0, 0x7530}, 0x15, 0x1, 0x9bdd}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0xda4fff08) perf_event_open(0x0, 0x0, 0xc, r1, 0x9) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0xff1c) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x660c, 0x1a000000) openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000140)) io_setup(0x1, &(0x7f0000000240)) io_setup(0x800, &(0x7f0000000280)=0x0) io_cancel(r5, 0x0, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101206, 0x0) 03:47:04 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000002000000400030006000d00000002002000e000000100000000000000000800120002000200000000007d228000180000000303010000000300000000000000001f03000000160000000301000000000000000000000000000000000000030005000000000002000000e00000010000000000000000"], 0x80}}, 0x0) 03:47:05 executing program 5: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000480)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x40, 0x0, @dev, 0x6}, 0x1c) getpeername(r0, 0x0, &(0x7f0000000000)) 03:47:05 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x8a00, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:47:05 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000740)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x19, 0x1, 0x1a8, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, 'rose0\x00', 'ip6gre0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @remote, [], @link_local, [], 0x70, 0xe0, 0x118}, [@snat={'snat\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}, @common=@mark={'mark\x00', 0x10, {{0x0, 0xffffffffffffffff}}}]}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x220) 03:47:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rseq(0x0, 0x0, 0x0, 0x0) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20000, 0x81) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100)=0x41, 0x4) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000200)="0fc7f43e650f01c80f060fae8600000f01eeba410066ed66b9b70900000f320fc76cf6b876028ed8b84e0c8ed0", 0x2d}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040)=0x5, 0x2) [ 2441.472205][T28282] x_tables: eb_tables: arpreply target: used from hooks POSTROUTING, but only usable from PREROUTING [ 2441.698162][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2441.705021][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2441.712496][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2441.719263][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2441.727238][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2441.734114][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2441.740571][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2441.747260][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:05 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(r3, 0xf, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000300), 0x10) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000180)) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) syz_open_pts(r4, 0x0) sched_setscheduler(0x0, 0x6, 0x0) write(r4, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) 03:47:05 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) io_setup(0x7f, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000000005, 0x0, r0, 0x0}]) 03:47:05 executing program 5: mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffffff) setxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000000)=@ng={0x4, 0x5}, 0x2, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 03:47:05 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8084, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) creat(0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2}, 0x20) connect$unix(0xffffffffffffffff, &(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e) 03:47:05 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x4000, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000200)={0x2, 0x1, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=[@mask_cswp={0x5000, 0x114, 0x2, {{}, &(0x7f0000000e80), &(0x7f0000000ec0)}}], 0x58}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xe5, 0x40) write$input_event(r3, &(0x7f00000000c0)={{0x0, 0x7530}, 0x15, 0x1, 0x9bdd}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0xda4fff08) perf_event_open(0x0, 0x0, 0xc, r1, 0x9) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0xff1c) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x660c, 0x1a000000) openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000140)) io_setup(0x1, &(0x7f0000000240)) io_setup(0x800, &(0x7f0000000280)=0x0) io_cancel(r5, 0x0, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101206, 0x0) 03:47:05 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x4000, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000200)={0x2, 0x1, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=[@mask_cswp={0x5000, 0x114, 0x2, {{}, &(0x7f0000000e80), &(0x7f0000000ec0)}}], 0x58}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xe5, 0x40) write$input_event(r3, &(0x7f00000000c0)={{0x0, 0x7530}, 0x15, 0x1, 0x9bdd}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0xda4fff08) perf_event_open(0x0, 0x0, 0xc, r1, 0x9) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0xff1c) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x660c, 0x1a000000) openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000140)) io_setup(0x1, &(0x7f0000000240)) io_setup(0x800, &(0x7f0000000280)=0x0) io_cancel(r5, 0x0, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101206, 0x0) 03:47:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x0, @initdev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback}, 0x10) 03:47:06 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000002c0)) syz_open_dev$sndtimer(0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)=ANY=[@ANYBLOB], 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mlockall(0x41000002) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) prlimit64(r2, 0x3, 0x0, &(0x7f0000000240)) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000000f3"], 0x1) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r3, 0x0, 0x0, 0x0) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0xf96d) sendfile(r1, r1, 0x0, 0x0) unshare(0x40000000) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001000), 0xc5) ioctl$void(r1, 0xc0045c79) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r4 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000f608db"], 0x0, 0x0, 0x0}) ioctl$RTC_AIE_ON(r0, 0x7001) 03:47:06 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8084, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) creat(0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2}, 0x20) connect$unix(0xffffffffffffffff, &(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e) [ 2442.417726][T28315] IPVS: ftp: loaded support on port[0] = 21 03:47:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x0, @initdev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback}, 0x10) 03:47:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x0, @initdev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback}, 0x10) [ 2442.874664][T28318] IPVS: ftp: loaded support on port[0] = 21 03:47:06 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8084, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) creat(0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2}, 0x20) connect$unix(0xffffffffffffffff, &(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e) 03:47:07 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(r3, 0xf, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000300), 0x10) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000180)) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) syz_open_pts(r4, 0x0) sched_setscheduler(0x0, 0x6, 0x0) write(r4, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) 03:47:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x0, @initdev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback}, 0x10) 03:47:07 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000002c0)) syz_open_dev$sndtimer(0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)=ANY=[@ANYBLOB], 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mlockall(0x41000002) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) prlimit64(r2, 0x3, 0x0, &(0x7f0000000240)) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000000f3"], 0x1) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r3, 0x0, 0x0, 0x0) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0xf96d) sendfile(r1, r1, 0x0, 0x0) unshare(0x40000000) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001000), 0xc5) ioctl$void(r1, 0xc0045c79) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r4 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000f608db"], 0x0, 0x0, 0x0}) ioctl$RTC_AIE_ON(r0, 0x7001) 03:47:07 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8084, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) creat(0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2}, 0x20) connect$unix(0xffffffffffffffff, &(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e) [ 2443.518891][T28336] IPVS: ftp: loaded support on port[0] = 21 03:47:07 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x4000, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000200)={0x2, 0x1, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=[@mask_cswp={0x5000, 0x114, 0x2, {{}, &(0x7f0000000e80), &(0x7f0000000ec0)}}], 0x58}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xe5, 0x40) write$input_event(r3, &(0x7f00000000c0)={{0x0, 0x7530}, 0x15, 0x1, 0x9bdd}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0xda4fff08) perf_event_open(0x0, 0x0, 0xc, r1, 0x9) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0xff1c) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x660c, 0x1a000000) openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000140)) io_setup(0x1, &(0x7f0000000240)) io_setup(0x800, &(0x7f0000000280)=0x0) io_cancel(r5, 0x0, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101206, 0x0) 03:47:07 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x4000, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000200)={0x2, 0x1, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=[@mask_cswp={0x5000, 0x114, 0x2, {{}, &(0x7f0000000e80), &(0x7f0000000ec0)}}], 0x58}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xe5, 0x40) write$input_event(r3, &(0x7f00000000c0)={{0x0, 0x7530}, 0x15, 0x1, 0x9bdd}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0xda4fff08) perf_event_open(0x0, 0x0, 0xc, r1, 0x9) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0xff1c) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x660c, 0x1a000000) openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000140)) io_setup(0x1, &(0x7f0000000240)) io_setup(0x800, &(0x7f0000000280)=0x0) io_cancel(r5, 0x0, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101206, 0x0) 03:47:07 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000002c0)) syz_open_dev$sndtimer(0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)=ANY=[@ANYBLOB], 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mlockall(0x41000002) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) prlimit64(r2, 0x3, 0x0, &(0x7f0000000240)) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000000f3"], 0x1) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r3, 0x0, 0x0, 0x0) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0xf96d) sendfile(r1, r1, 0x0, 0x0) unshare(0x40000000) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001000), 0xc5) ioctl$void(r1, 0xc0045c79) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r4 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000f608db"], 0x0, 0x0, 0x0}) ioctl$RTC_AIE_ON(r0, 0x7001) [ 2444.083169][T28354] IPVS: ftp: loaded support on port[0] = 21 03:47:08 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000002c0)) syz_open_dev$sndtimer(0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)=ANY=[@ANYBLOB], 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mlockall(0x41000002) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) prlimit64(r2, 0x3, 0x0, &(0x7f0000000240)) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000000f3"], 0x1) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r3, 0x0, 0x0, 0x0) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0xf96d) sendfile(r1, r1, 0x0, 0x0) unshare(0x40000000) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001000), 0xc5) ioctl$void(r1, 0xc0045c79) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r4 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000f608db"], 0x0, 0x0, 0x0}) ioctl$RTC_AIE_ON(r0, 0x7001) 03:47:08 executing program 0: msgrcv(0x0, &(0x7f0000000080)={0x0, ""/43}, 0xffffffffffffffe9, 0x0, 0x0) 03:47:08 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 03:47:08 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000002c0)) syz_open_dev$sndtimer(0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)=ANY=[@ANYBLOB], 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mlockall(0x41000002) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) prlimit64(r2, 0x3, 0x0, &(0x7f0000000240)) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000000f3"], 0x1) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r3, 0x0, 0x0, 0x0) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0xf96d) sendfile(r1, r1, 0x0, 0x0) unshare(0x40000000) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001000), 0xc5) ioctl$void(r1, 0xc0045c79) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r4 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000f608db"], 0x0, 0x0, 0x0}) ioctl$RTC_AIE_ON(r0, 0x7001) [ 2444.635047][T28362] IPVS: ftp: loaded support on port[0] = 21 03:47:08 executing program 4: syz_mount_image$vfat(&(0x7f0000001b00)='vfat\x00', &(0x7f0000001b40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)={[{@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}]}) [ 2444.888322][T28368] IPVS: ftp: loaded support on port[0] = 21 03:47:09 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000002c0)) syz_open_dev$sndtimer(0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)=ANY=[@ANYBLOB], 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mlockall(0x41000002) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) prlimit64(r2, 0x3, 0x0, &(0x7f0000000240)) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000000f3"], 0x1) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r3, 0x0, 0x0, 0x0) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0xf96d) sendfile(r1, r1, 0x0, 0x0) unshare(0x40000000) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001000), 0xc5) ioctl$void(r1, 0xc0045c79) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r4 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000f608db"], 0x0, 0x0, 0x0}) ioctl$RTC_AIE_ON(r0, 0x7001) 03:47:09 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 03:47:09 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/19) r1 = socket$inet(0x2, 0x3, 0x2) syz_open_dev$adsp(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) openat$cgroup_int(r0, 0x0, 0x2, 0x0) stat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200001) 03:47:09 executing program 4: syz_mount_image$vfat(&(0x7f0000001b00)='vfat\x00', &(0x7f0000001b40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)={[{@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}]}) 03:47:09 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x8000) 03:47:09 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000002c0)) syz_open_dev$sndtimer(0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)=ANY=[@ANYBLOB], 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mlockall(0x41000002) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) prlimit64(r2, 0x3, 0x0, &(0x7f0000000240)) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000000f3"], 0x1) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r3, 0x0, 0x0, 0x0) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0xf96d) sendfile(r1, r1, 0x0, 0x0) unshare(0x40000000) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001000), 0xc5) ioctl$void(r1, 0xc0045c79) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r4 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x26, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000f608db"], 0x0, 0x0, 0x0}) ioctl$RTC_AIE_ON(r0, 0x7001) [ 2445.478032][T28375] IPVS: ftp: loaded support on port[0] = 21 03:47:09 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 03:47:09 executing program 4: syz_mount_image$vfat(&(0x7f0000001b00)='vfat\x00', &(0x7f0000001b40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)={[{@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}]}) [ 2445.650166][T28384] IPVS: ftp: loaded support on port[0] = 21 03:47:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000480)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0) 03:47:09 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/19) r1 = socket$inet(0x2, 0x3, 0x2) syz_open_dev$adsp(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) openat$cgroup_int(r0, 0x0, 0x2, 0x0) stat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200001) 03:47:09 executing program 4: syz_mount_image$vfat(&(0x7f0000001b00)='vfat\x00', &(0x7f0000001b40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)={[{@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}]}) [ 2445.935500][ C0] net_ratelimit: 16 callbacks suppressed [ 2445.935510][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2445.947033][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2445.952917][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2445.958767][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2445.964631][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2445.970457][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2445.976298][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:47:09 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 2445.976368][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2445.987934][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2445.993807][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000180)=@profile={'stack ', 'trusted.overlay.impure\x00'}, 0x1d) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, 0x0, 0x10000) dup3(r1, r0, 0x0) 03:47:10 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfa\x81\x00\x00\x00\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7.\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 03:47:10 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/19) r1 = socket$inet(0x2, 0x3, 0x2) syz_open_dev$adsp(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) openat$cgroup_int(r0, 0x0, 0x2, 0x0) stat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200001) 03:47:10 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='ip_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0x0, 0x0, 0x2000) 03:47:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REGS(r2, 0x4048ae9b, &(0x7f0000000000)) 03:47:10 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='ip_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0x0, 0x0, 0x2000) 03:47:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000480)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0) 03:47:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000180)=@profile={'stack ', 'trusted.overlay.impure\x00'}, 0x1d) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, 0x0, 0x10000) dup3(r1, r0, 0x0) 03:47:10 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/19) r1 = socket$inet(0x2, 0x3, 0x2) syz_open_dev$adsp(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) openat$cgroup_int(r0, 0x0, 0x2, 0x0) stat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200001) 03:47:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000180)=@profile={'stack ', 'trusted.overlay.impure\x00'}, 0x1d) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, 0x0, 0x10000) dup3(r1, r0, 0x0) [ 2446.750097][T28415] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 03:47:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000480)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0) [ 2446.816509][T28415] CPU: 0 PID: 28415 Comm: syz-executor.2 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2446.825571][T28415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2446.835630][T28415] Call Trace: [ 2446.838929][T28415] dump_stack+0x172/0x1f0 [ 2446.843276][T28415] dump_header+0x10f/0xb6c [ 2446.847710][T28415] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2446.853523][T28415] ? ___ratelimit+0x60/0x595 [ 2446.858128][T28415] ? do_raw_spin_unlock+0x57/0x270 [ 2446.863248][T28415] oom_kill_process.cold+0x10/0x15 [ 2446.868376][T28415] out_of_memory+0x79a/0x1280 [ 2446.873068][T28415] ? lock_downgrade+0x880/0x880 [ 2446.877926][T28415] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2446.884176][T28415] ? oom_killer_disable+0x280/0x280 [ 2446.889375][T28415] ? find_held_lock+0x35/0x130 [ 2446.894155][T28415] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2446.899707][T28415] ? memcg_event_wake+0x230/0x230 [ 2446.904745][T28415] ? do_raw_spin_unlock+0x57/0x270 [ 2446.909870][T28415] ? _raw_spin_unlock+0x2d/0x50 [ 2446.914730][T28415] try_charge+0x118d/0x1790 [ 2446.919248][T28415] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2446.924799][T28415] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2446.931057][T28415] ? kasan_check_read+0x11/0x20 [ 2446.935925][T28415] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2446.941481][T28415] mem_cgroup_try_charge+0x24d/0x5e0 [ 2446.946784][T28415] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2446.952425][T28415] shmem_getpage_gfp+0x69e/0x2500 [ 2446.957477][T28415] ? shmem_unuse_inode.constprop.0+0xfd0/0xfd0 [ 2446.963728][T28415] ? __set_page_dirty_no_writeback+0x1ea/0x370 [ 2446.969974][T28415] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2446.976237][T28415] ? balance_dirty_pages_ratelimited+0x168/0x1f60 [ 2446.982664][T28415] ? do_writepages+0x2a0/0x2a0 [ 2446.987437][T28415] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2446.993772][T28415] ? iov_iter_fault_in_readable+0x22c/0x450 [ 2446.999685][T28415] shmem_write_begin+0x105/0x1e0 [ 2447.004730][T28415] generic_perform_write+0x231/0x530 [ 2447.010049][T28415] ? page_endio+0x780/0x780 [ 2447.014560][T28415] ? current_time+0x140/0x140 [ 2447.019249][T28415] ? lock_acquire+0x16f/0x3f0 [ 2447.023942][T28415] __generic_file_write_iter+0x25e/0x630 [ 2447.029604][T28415] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2447.035340][T28415] generic_file_write_iter+0x360/0x610 [ 2447.040810][T28415] ? __generic_file_write_iter+0x630/0x630 [ 2447.046712][T28415] ? aa_path_link+0x460/0x460 [ 2447.051400][T28415] ? find_held_lock+0x35/0x130 [ 2447.056171][T28415] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2447.062420][T28415] ? iov_iter_init+0xea/0x220 [ 2447.068151][T28415] new_sync_write+0x4c7/0x760 [ 2447.072845][T28415] ? default_llseek+0x2e0/0x2e0 [ 2447.077735][T28415] __vfs_write+0xe4/0x110 [ 2447.082075][T28415] vfs_write+0x20c/0x580 [ 2447.086330][T28415] ksys_write+0xea/0x1f0 [ 2447.090625][T28415] ? __ia32_sys_read+0xb0/0xb0 [ 2447.095394][T28415] ? do_syscall_64+0x26/0x610 [ 2447.100080][T28415] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2447.106150][T28415] ? do_syscall_64+0x26/0x610 [ 2447.110838][T28415] __x64_sys_write+0x73/0xb0 03:47:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000480)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0) [ 2447.115522][T28415] do_syscall_64+0x103/0x610 [ 2447.120122][T28415] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2447.126027][T28415] RIP: 0033:0x458079 [ 2447.129924][T28415] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2447.149536][T28415] RSP: 002b:00007fe639a7bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2447.157951][T28415] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458079 03:47:11 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='ip_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0x0, 0x0, 0x2000) [ 2447.165938][T28415] RDX: 00000000ffffff76 RSI: 0000000020000000 RDI: 0000000000000003 [ 2447.173935][T28415] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2447.181926][T28415] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe639a7c6d4 [ 2447.189906][T28415] R13: 00000000004c75ab R14: 00000000004dd208 R15: 00000000ffffffff [ 2447.594090][T28415] memory: usage 307200kB, limit 307200kB, failcnt 3365 [ 2447.605889][T28415] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2447.616695][T28415] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2447.623705][T28415] Memory cgroup stats for /syz2: cache:16564KB rss:238632KB rss_huge:212992KB shmem:6392KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:6548KB active_anon:238624KB inactive_file:0KB active_file:0KB unevictable:10088KB [ 2447.648085][T28415] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20890,uid=0 [ 2447.665254][T28415] Memory cgroup out of memory: Killed process 20890 (syz-executor.2) total-vm:72580kB, anon-rss:2208kB, file-rss:35848kB, shmem-rss:0kB [ 2447.683309][ T1044] oom_reaper: reaped process 20890 (syz-executor.2), now anon-rss:0kB, file-rss:34888kB, shmem-rss:0kB [ 2447.709519][T28415] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2447.720948][T28415] CPU: 1 PID: 28415 Comm: syz-executor.2 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2447.729965][T28415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2447.740012][T28415] Call Trace: [ 2447.743302][T28415] dump_stack+0x172/0x1f0 [ 2447.747637][T28415] dump_header+0x10f/0xb6c [ 2447.752055][T28415] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2447.757864][T28415] ? ___ratelimit+0x60/0x595 [ 2447.762455][T28415] ? do_raw_spin_unlock+0x57/0x270 [ 2447.767568][T28415] oom_kill_process.cold+0x10/0x15 [ 2447.772678][T28415] out_of_memory+0x79a/0x1280 [ 2447.777473][T28415] ? lock_downgrade+0x880/0x880 [ 2447.783259][T28415] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2447.789505][T28415] ? oom_killer_disable+0x280/0x280 [ 2447.794698][T28415] ? find_held_lock+0x35/0x130 [ 2447.799473][T28415] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2447.805014][T28415] ? memcg_event_wake+0x230/0x230 [ 2447.810045][T28415] ? do_raw_spin_unlock+0x57/0x270 [ 2447.815156][T28415] ? _raw_spin_unlock+0x2d/0x50 [ 2447.820032][T28415] try_charge+0x118d/0x1790 [ 2447.824552][T28415] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2447.830098][T28415] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2447.836430][T28415] ? kasan_check_read+0x11/0x20 [ 2447.841287][T28415] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2447.846834][T28415] mem_cgroup_try_charge+0x24d/0x5e0 [ 2447.852126][T28415] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2447.857759][T28415] shmem_getpage_gfp+0x69e/0x2500 [ 2447.862800][T28415] ? shmem_unuse_inode.constprop.0+0xfd0/0xfd0 [ 2447.868951][T28415] ? __set_page_dirty_no_writeback+0x1ea/0x370 [ 2447.875100][T28415] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2447.881337][T28415] ? balance_dirty_pages_ratelimited+0x168/0x1f60 [ 2447.887744][T28415] ? do_writepages+0x2a0/0x2a0 [ 2447.892507][T28415] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2447.898746][T28415] ? iov_iter_fault_in_readable+0x22c/0x450 [ 2447.904644][T28415] shmem_write_begin+0x105/0x1e0 [ 2447.909589][T28415] generic_perform_write+0x231/0x530 [ 2447.914890][T28415] ? page_endio+0x780/0x780 [ 2447.919395][T28415] ? current_time+0x140/0x140 [ 2447.924085][T28415] ? lock_acquire+0x16f/0x3f0 [ 2447.928768][T28415] __generic_file_write_iter+0x25e/0x630 [ 2447.934398][T28415] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2447.940126][T28415] generic_file_write_iter+0x360/0x610 [ 2447.945591][T28415] ? __generic_file_write_iter+0x630/0x630 [ 2447.951403][T28415] ? aa_path_link+0x460/0x460 [ 2447.956078][T28415] ? find_held_lock+0x35/0x130 [ 2447.960839][T28415] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2447.967082][T28415] ? iov_iter_init+0xea/0x220 [ 2447.971767][T28415] new_sync_write+0x4c7/0x760 [ 2447.976451][T28415] ? default_llseek+0x2e0/0x2e0 [ 2447.981329][T28415] __vfs_write+0xe4/0x110 [ 2447.985663][T28415] vfs_write+0x20c/0x580 [ 2447.989916][T28415] ksys_write+0xea/0x1f0 [ 2447.994163][T28415] ? __ia32_sys_read+0xb0/0xb0 [ 2447.998935][T28415] ? do_syscall_64+0x26/0x610 [ 2448.003609][T28415] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2448.009673][T28415] ? do_syscall_64+0x26/0x610 [ 2448.014358][T28415] __x64_sys_write+0x73/0xb0 [ 2448.018961][T28415] do_syscall_64+0x103/0x610 [ 2448.023558][T28415] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2448.029450][T28415] RIP: 0033:0x458079 [ 2448.033347][T28415] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2448.052946][T28415] RSP: 002b:00007fe639a7bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2448.061359][T28415] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458079 [ 2448.069331][T28415] RDX: 00000000ffffff76 RSI: 0000000020000000 RDI: 0000000000000003 [ 2448.077299][T28415] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2448.085268][T28415] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe639a7c6d4 [ 2448.093232][T28415] R13: 00000000004c75ab R14: 00000000004dd208 R15: 00000000ffffffff [ 2448.111620][T28415] memory: usage 307132kB, limit 307200kB, failcnt 3379 [ 2448.123295][T28415] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2448.139641][T28415] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2448.149175][T28415] Memory cgroup stats for /syz2: cache:18676KB rss:236420KB rss_huge:210944KB shmem:8504KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:8640KB active_anon:236484KB inactive_file:0KB active_file:0KB unevictable:10088KB [ 2448.184599][T28415] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=22506,uid=0 [ 2448.210568][T28415] Memory cgroup out of memory: Killed process 22506 (syz-executor.2) total-vm:72580kB, anon-rss:2212kB, file-rss:35864kB, shmem-rss:0kB [ 2448.265459][T28414] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2448.294362][T28414] CPU: 1 PID: 28414 Comm: syz-executor.2 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2448.303425][T28414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2448.313493][T28414] Call Trace: [ 2448.316780][T28414] dump_stack+0x172/0x1f0 [ 2448.321098][T28414] dump_header+0x10f/0xb6c [ 2448.325508][T28414] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2448.331295][T28414] ? ___ratelimit+0x60/0x595 [ 2448.335889][T28414] ? do_raw_spin_unlock+0x57/0x270 [ 2448.340992][T28414] oom_kill_process.cold+0x10/0x15 [ 2448.346088][T28414] out_of_memory+0x79a/0x1280 [ 2448.350784][T28414] ? oom_killer_disable+0x280/0x280 [ 2448.355959][T28414] ? find_held_lock+0x35/0x130 [ 2448.360709][T28414] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2448.366230][T28414] ? memcg_event_wake+0x230/0x230 [ 2448.371235][T28414] ? do_raw_spin_unlock+0x57/0x270 [ 2448.376328][T28414] ? _raw_spin_unlock+0x2d/0x50 [ 2448.381158][T28414] try_charge+0xd4d/0x1790 [ 2448.385558][T28414] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2448.391077][T28414] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2448.396603][T28414] ? find_held_lock+0x35/0x130 [ 2448.401343][T28414] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2448.406880][T28414] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2448.412408][T28414] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2448.417583][T28414] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2448.423110][T28414] __memcg_kmem_charge+0x136/0x300 [ 2448.428449][T28414] __alloc_pages_nodemask+0x437/0x7e0 [ 2448.433804][T28414] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2448.440045][T28414] ? __alloc_pages_slowpath+0x2900/0x2900 [ 2448.445746][T28414] ? copy_process.part.0+0x1d35/0x79d0 [ 2448.451191][T28414] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2448.456493][T28414] ? trace_hardirqs_on+0x67/0x230 [ 2448.461582][T28414] ? kasan_check_read+0x11/0x20 [ 2448.466415][T28414] copy_process.part.0+0x3e0/0x79d0 [ 2448.471603][T28414] ? __lockdep_free_key_range+0x120/0x120 [ 2448.477327][T28414] ? kvm_sched_clock_read+0x9/0x20 [ 2448.482433][T28414] ? psi_memstall_leave+0x12e/0x180 [ 2448.487612][T28414] ? find_held_lock+0x35/0x130 [ 2448.492351][T28414] ? psi_memstall_leave+0x12e/0x180 [ 2448.497538][T28414] ? __cleanup_sighand+0x60/0x60 [ 2448.502477][T28414] ? perf_trace_lock+0xeb/0x510 [ 2448.507346][T28414] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2448.513569][T28414] ? debug_smp_processor_id+0x3c/0x280 [ 2448.519096][T28414] ? __lockdep_free_key_range+0x120/0x120 [ 2448.524819][T28414] _do_fork+0x257/0xfd0 [ 2448.528966][T28414] ? fork_idle+0x1d0/0x1d0 [ 2448.533369][T28414] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 2448.539416][T28414] ? lock_downgrade+0x880/0x880 [ 2448.544248][T28414] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2448.550495][T28414] ? blkcg_exit_queue+0x30/0x30 [ 2448.555334][T28414] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2448.560780][T28414] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2448.566218][T28414] ? do_syscall_64+0x26/0x610 [ 2448.571051][T28414] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2448.577097][T28414] ? do_syscall_64+0x26/0x610 [ 2448.581770][T28414] __x64_sys_clone+0xbf/0x150 [ 2448.586444][T28414] do_syscall_64+0x103/0x610 [ 2448.591024][T28414] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2448.596893][T28414] RIP: 0033:0x45aa49 [ 2448.600765][T28414] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2448.620351][T28414] RSP: 002b:00007ffe30a40208 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2448.628747][T28414] RAX: ffffffffffffffda RBX: 00007fe639a19700 RCX: 000000000045aa49 [ 2448.636702][T28414] RDX: 00007fe639a199d0 RSI: 00007fe639a18db0 RDI: 00000000003d0f00 [ 2448.644654][T28414] RBP: 00007ffe30a40410 R08: 00007fe639a19700 R09: 00007fe639a19700 [ 2448.652806][T28414] R10: 00007fe639a199d0 R11: 0000000000000202 R12: 0000000000000000 [ 2448.660931][T28414] R13: 00007ffe30a402bf R14: 00007fe639a199c0 R15: 000000000073c0ec [ 2448.671885][T28414] memory: usage 307080kB, limit 307200kB, failcnt 3415 [ 2448.679214][T28414] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2448.686759][T28414] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2448.693731][T28414] Memory cgroup stats for /syz2: cache:21052KB rss:234352KB rss_huge:208896KB shmem:10880KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:11020KB active_anon:234320KB inactive_file:0KB active_file:0KB unevictable:10088KB [ 2448.717024][T28414] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20912,uid=0 [ 2448.732443][T28414] Memory cgroup out of memory: Killed process 20912 (syz-executor.2) total-vm:72580kB, anon-rss:2208kB, file-rss:35836kB, shmem-rss:0kB [ 2448.749447][ T1044] oom_reaper: reaped process 20912 (syz-executor.2), now anon-rss:0kB, file-rss:34876kB, shmem-rss:0kB [ 2448.770295][T28415] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2448.782820][T28415] CPU: 1 PID: 28415 Comm: syz-executor.2 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2448.791868][T28415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2448.801918][T28415] Call Trace: [ 2448.805209][T28415] dump_stack+0x172/0x1f0 [ 2448.809543][T28415] dump_header+0x10f/0xb6c [ 2448.813960][T28415] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2448.819771][T28415] ? ___ratelimit+0x60/0x595 [ 2448.824379][T28415] ? do_raw_spin_unlock+0x57/0x270 [ 2448.829500][T28415] oom_kill_process.cold+0x10/0x15 [ 2448.834612][T28415] out_of_memory+0x79a/0x1280 [ 2448.839298][T28415] ? oom_killer_disable+0x280/0x280 [ 2448.844496][T28415] ? find_held_lock+0x35/0x130 [ 2448.849280][T28415] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2448.854825][T28415] ? memcg_event_wake+0x230/0x230 [ 2448.859867][T28415] ? do_raw_spin_unlock+0x57/0x270 [ 2448.864984][T28415] ? _raw_spin_unlock+0x2d/0x50 [ 2448.869845][T28415] try_charge+0x118d/0x1790 [ 2448.874360][T28415] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2448.879908][T28415] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2448.886158][T28415] ? kasan_check_read+0x11/0x20 [ 2448.891023][T28415] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2448.896576][T28415] mem_cgroup_try_charge+0x24d/0x5e0 [ 2448.901875][T28415] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2448.907510][T28415] shmem_getpage_gfp+0x69e/0x2500 [ 2448.912554][T28415] ? shmem_unuse_inode.constprop.0+0xfd0/0xfd0 [ 2448.918708][T28415] ? __set_page_dirty_no_writeback+0x1ea/0x370 [ 2448.924866][T28415] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2448.931103][T28415] ? balance_dirty_pages_ratelimited+0x168/0x1f60 [ 2448.937513][T28415] ? do_writepages+0x2a0/0x2a0 [ 2448.942282][T28415] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2448.948515][T28415] ? iov_iter_fault_in_readable+0x22c/0x450 [ 2448.954408][T28415] shmem_write_begin+0x105/0x1e0 [ 2448.959363][T28415] generic_perform_write+0x231/0x530 [ 2448.964652][T28415] ? page_endio+0x780/0x780 [ 2448.969136][T28415] ? current_time+0x140/0x140 [ 2448.973795][T28415] ? lock_acquire+0x16f/0x3f0 [ 2448.978484][T28415] __generic_file_write_iter+0x25e/0x630 [ 2448.984199][T28415] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2448.989902][T28415] generic_file_write_iter+0x360/0x610 [ 2448.995367][T28415] ? __generic_file_write_iter+0x630/0x630 [ 2449.001176][T28415] ? aa_path_link+0x460/0x460 [ 2449.005850][T28415] ? find_held_lock+0x35/0x130 [ 2449.010596][T28415] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2449.016832][T28415] ? iov_iter_init+0xea/0x220 [ 2449.021502][T28415] new_sync_write+0x4c7/0x760 [ 2449.026173][T28415] ? default_llseek+0x2e0/0x2e0 [ 2449.031108][T28415] __vfs_write+0xe4/0x110 [ 2449.035460][T28415] vfs_write+0x20c/0x580 [ 2449.039795][T28415] ksys_write+0xea/0x1f0 [ 2449.044050][T28415] ? __ia32_sys_read+0xb0/0xb0 [ 2449.048800][T28415] ? do_syscall_64+0x26/0x610 [ 2449.053470][T28415] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2449.059531][T28415] ? do_syscall_64+0x26/0x610 [ 2449.064205][T28415] __x64_sys_write+0x73/0xb0 [ 2449.068801][T28415] do_syscall_64+0x103/0x610 [ 2449.073838][T28415] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2449.079727][T28415] RIP: 0033:0x458079 [ 2449.083643][T28415] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2449.103238][T28415] RSP: 002b:00007fe639a7bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2449.111647][T28415] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458079 [ 2449.119610][T28415] RDX: 00000000ffffff76 RSI: 0000000020000000 RDI: 0000000000000003 [ 2449.127573][T28415] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2449.135532][T28415] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe639a7c6d4 [ 2449.143504][T28415] R13: 00000000004c75ab R14: 00000000004dd208 R15: 00000000ffffffff [ 2449.161119][T28415] memory: usage 304636kB, limit 307200kB, failcnt 3464 [ 2449.168073][T28415] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2449.175659][T28415] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2449.182510][T28415] Memory cgroup stats for /syz2: cache:21136KB rss:232200KB rss_huge:206848KB shmem:11108KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:11052KB active_anon:232152KB inactive_file:0KB active_file:0KB unevictable:10088KB [ 2449.205757][T28415] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20942,uid=0 03:47:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000180)=@profile={'stack ', 'trusted.overlay.impure\x00'}, 0x1d) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, 0x0, 0x10000) dup3(r1, r0, 0x0) 03:47:13 executing program 2: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={0x0}) 03:47:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000180)=@profile={'stack ', 'trusted.overlay.impure\x00'}, 0x1d) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, 0x0, 0x10000) dup3(r1, r0, 0x0) 03:47:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000480)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0) 03:47:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000480)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0) 03:47:13 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='ip_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0x0, 0x0, 0x2000) [ 2449.221239][T28415] Memory cgroup out of memory: Killed process 20942 (syz-executor.2) total-vm:72580kB, anon-rss:2208kB, file-rss:35836kB, shmem-rss:0kB [ 2449.238181][ T1044] oom_reaper: reaped process 20942 (syz-executor.2), now anon-rss:0kB, file-rss:34876kB, shmem-rss:0kB 03:47:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000180)=@profile={'stack ', 'trusted.overlay.impure\x00'}, 0x1d) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, 0x0, 0x10000) dup3(r1, r0, 0x0) 03:47:13 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) splice(r2, 0x0, r0, 0x0, 0x20000008, 0x0) 03:47:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000180)=@profile={'stack ', 'trusted.overlay.impure\x00'}, 0x1d) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, 0x0, 0x10000) dup3(r1, r0, 0x0) 03:47:13 executing program 5: r0 = epoll_create1(0x0) r1 = socket(0xd, 0x803, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x8, 0xc0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f00000001c0)={0x3, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000200)={{0x3f, 0x632c}, 0x1, 0x7ba3, 0x9, {0x1, 0x1}, 0x7fff, 0x80}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000780)={0x10}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x0) 03:47:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0xfffffcda}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 03:47:13 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x1100000000000000, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'n*0Ek\x88k\xc2\x16[A\xfei\x00', 'yam0\x00', 'yam0\x00', 'lo\x00', @link_local, [], @link_local, [], 0xb0, 0xb0, 0xe0, [@time={'time\x00', 0x18, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19e75ea096f07a9}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1e8) 03:47:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x2a, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [], 0x7ff}]}}) [ 2449.970229][T28483] xt_time: unknown flags 0xa8 03:47:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x2a, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [], 0x7ff}]}}) 03:47:14 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@empty=[0x2b], @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}}}}}}, 0x0) 03:47:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000480)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0) 03:47:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x7f) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) recvmmsg(r1, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 03:47:14 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="340000000000250000003dfdc2fb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:47:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x2a, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [], 0x7ff}]}}) 03:47:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x2a, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [], 0x7ff}]}}) 03:47:14 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@empty=[0x2b], @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}}}}}}, 0x0) 03:47:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x2a, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [], 0x7ff}]}}) 03:47:14 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) 03:47:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x2a, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [], 0x7ff}]}}) 03:47:14 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@empty=[0x2b], @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}}}}}}, 0x0) 03:47:14 executing program 2: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0801200303010000b3020000f20e00000301000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dbfb85be419635c9cc786de500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025fe5fbb4d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000683b350235ba837a000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x496) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, 0x0, 0x60d93187db0eea97, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0) sendmsg$key(r3, 0x0, 0x40800) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x0, 0x0) ptrace(0x10, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000003c0)) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty, 0x4}}, 0x0, 0x7, 0x4, 0x0, 0xb1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r0, 0x0, 0x0, 0x4003ff) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8001) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, 0x0, &(0x7f0000000200)) 03:47:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x2a, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [], 0x7ff}]}}) 03:47:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x4000000004, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x3, 0x0, 0x0, 0x3f00000000000000]}, 0x2c) 03:47:15 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@empty=[0x2b], @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}}}}}}, 0x0) 03:47:15 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="340000000000250000003dfdc2fb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:47:15 executing program 2: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0801200303010000b3020000f20e00000301000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dbfb85be419635c9cc786de500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025fe5fbb4d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000683b350235ba837a000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x496) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, 0x0, 0x60d93187db0eea97, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0) sendmsg$key(r3, 0x0, 0x40800) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x0, 0x0) ptrace(0x10, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000003c0)) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty, 0x4}}, 0x0, 0x7, 0x4, 0x0, 0xb1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r0, 0x0, 0x0, 0x4003ff) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8001) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, 0x0, &(0x7f0000000200)) 03:47:15 executing program 4: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000100)={0xb}, 0xb) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000002, 0x0) 03:47:15 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="340000000000250000003dfdc2fb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:47:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x4000000004, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x3, 0x0, 0x0, 0x3f00000000000000]}, 0x2c) 03:47:15 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x12) write$P9_RSTATu(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="c670"], 0x2) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:47:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r1, &(0x7f0000000100), 0x1c) 03:47:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x4000000004, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x3, 0x0, 0x0, 0x3f00000000000000]}, 0x2c) 03:47:15 executing program 2: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0801200303010000b3020000f20e00000301000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dbfb85be419635c9cc786de500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025fe5fbb4d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000683b350235ba837a000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x496) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, 0x0, 0x60d93187db0eea97, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0) sendmsg$key(r3, 0x0, 0x40800) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x0, 0x0) ptrace(0x10, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000003c0)) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty, 0x4}}, 0x0, 0x7, 0x4, 0x0, 0xb1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r0, 0x0, 0x0, 0x4003ff) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8001) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, 0x0, &(0x7f0000000200)) 03:47:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/raw6\x00') setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xff) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0xfffffcda}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 03:47:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x4000000004, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x3, 0x0, 0x0, 0x3f00000000000000]}, 0x2c) 03:47:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r1, &(0x7f0000000100), 0x1c) 03:47:16 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="340000000000250000003dfdc2fb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:47:16 executing program 2: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0801200303010000b3020000f20e00000301000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dbfb85be419635c9cc786de500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025fe5fbb4d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000683b350235ba837a000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x496) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, 0x0, 0x60d93187db0eea97, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0x2, [@tunl6_policy]}}}]}, 0x34}}, 0x0) sendmsg$key(r3, 0x0, 0x40800) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x0, 0x0) ptrace(0x10, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000003c0)) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty, 0x4}}, 0x0, 0x7, 0x4, 0x0, 0xb1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r0, 0x0, 0x0, 0x4003ff) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8001) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, 0x0, &(0x7f0000000200)) 03:47:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/raw6\x00') setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xff) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0xfffffcda}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 2452.172379][ C0] net_ratelimit: 26 callbacks suppressed [ 2452.172388][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2452.183939][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2452.189790][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2452.195665][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2452.201527][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2452.207369][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2452.213266][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2452.219093][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2452.225033][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2452.230818][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:16 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="340000000000250000003dfdc2fb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:47:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r1, &(0x7f0000000100), 0x1c) 03:47:16 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 03:47:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/raw6\x00') setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xff) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0xfffffcda}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 03:47:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r1, &(0x7f0000000100), 0x1c) 03:47:16 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x105000, 0x800}, 0x18) 03:47:16 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x105000, 0x800}, 0x18) 03:47:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000080)=0xfead) 03:47:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/raw6\x00') setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xff) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0xfffffcda}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 03:47:16 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="340000000000250000003dfdc2fb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:47:16 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) prctl$PR_SET_PTRACER(0x59616d61, r0) 03:47:16 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x105000, 0x800}, 0x18) 03:47:17 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="340000000000250000003dfdc2fb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:47:17 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000340)={'team_slave_1\x00'}) 03:47:17 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), r1, 0x0, 0x1, 0x4}}, 0x20) 03:47:17 executing program 1: syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) chdir(0x0) symlink(0x0, &(0x7f0000000540)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20000, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="3c75052af72c30c0dc931eb8fc1349b910c4472ba8eaf66c33db6e5cbafe665cc45eb2584a36527b7561125df5f80e2270faacd34a851392a8cb71f0adb5f9a60637eca9ccddc59bc8b3ce4a99c200ed4739c5fc5327cf6404270d7d5acf06fc9ac83514d3a390409e6240b2cbe7bb3cc8bc625d32ec6ec07290843ca67a84396f2b2f41bc5adbc0a8c737127076a01c984f84b192aa1926b48c4b96191facad731c21e4010000005bb37474796d208840b8a616de355ec150e2ade3d0d7c0357aa702b4b52e4d00cd41"], 0x0, 0x0, 0x5010, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x7, 0x0) link(&(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = getpid() process_vm_writev(r3, &(0x7f0000001680), 0xf37, &(0x7f0000000180)=[{&(0x7f0000000440)=""/193}, {&(0x7f0000000680)=""/4096, 0x2cc}, {&(0x7f0000001900)=""/144}], 0x0, 0x0) r4 = dup(r2) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000005, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x7fff) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendfile(r4, r5, 0x0, 0x8000dffffffe) openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) 03:47:17 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x105000, 0x800}, 0x18) 03:47:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=@srh, 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 03:47:17 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x400000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) sched_setaffinity(0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) 03:47:17 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x3, r0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) setpriority(0x0, r0, 0x10000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0xa75d, 0x48000) futimesat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={{0x77359400}}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1001, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x1}) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000780)=@v2={0x2000000, [{0xe24}, {0x2}]}, 0x14, 0x0) getpriority(0x3, r0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='./file0\x00') sendmsg(0xffffffffffffffff, 0x0, 0x800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='security.capability\xf6', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0)) 03:47:17 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 03:47:17 executing program 2: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000100)='./file0\x00', 0x40) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1\x00']) chdir(0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') stat(0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x103) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r1, 0x0) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) [ 2454.066044][T28693] syz-executor.0 invoked oom-killer: gfp_mask=0x40cd0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 03:47:18 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0xfffffffd, 0x2, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x2) dup3(r1, r0, 0x0) [ 2454.120664][T28693] CPU: 0 PID: 28693 Comm: syz-executor.0 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2454.129729][T28693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2454.139790][T28693] Call Trace: [ 2454.143086][T28693] dump_stack+0x172/0x1f0 [ 2454.147442][T28693] dump_header+0x10f/0xb6c [ 2454.151867][T28693] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2454.157681][T28693] ? ___ratelimit+0x60/0x595 [ 2454.162277][T28693] ? do_raw_spin_unlock+0x57/0x270 03:47:18 executing program 3: getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=',|', 0x2}], 0x1}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001180)="b10b938636ea69df7b5a9984bb1bc72ef58d96e56e11df900a707f4946b1637e2096c584b9a1b4e017163fbdb35160a56c11dfbe74df97d36d19ad6a91c6fb4ad19581b8cf707131830f7a22b1b263c9da0e443c5e969ed6a0d3bc508bf75c3147447379f585759ceba0de5cda46291dc1b8f106a83e1cde43a862d95413ce2616b261ed9f79913ae781b3b843ea1b4429a750b8ccb1952a7b863d0bada9f61df6609fe368eaf47c0ce9e46a22b0d75b063deeaa94285d0c43353046e0a308296a76b0b0145f8af9aa0ed0e18bc50509eaef21c8e03842a97df3a462ea3f9d5f83bf1d4d2875f0d5b24e941483f863cd2ea7c769bd3e594fb173dd873c7d9a3fd20939ad1d5867881ed77a078007b4972aba36cae02004373a", 0x119}], 0x1}, 0x8000) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="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", 0x2d5}], 0x1}, 0x0) [ 2454.167416][T28693] oom_kill_process.cold+0x10/0x15 [ 2454.172535][T28693] out_of_memory+0x79a/0x1280 [ 2454.177225][T28693] ? lock_downgrade+0x880/0x880 [ 2454.182080][T28693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2454.188324][T28693] ? oom_killer_disable+0x280/0x280 [ 2454.193528][T28693] ? find_held_lock+0x35/0x130 [ 2454.198308][T28693] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2454.203859][T28693] ? memcg_event_wake+0x230/0x230 [ 2454.208905][T28693] ? do_raw_spin_unlock+0x57/0x270 [ 2454.214029][T28693] ? _raw_spin_unlock+0x2d/0x50 [ 2454.218895][T28693] try_charge+0x118d/0x1790 [ 2454.223455][T28693] ? should_fail+0x1de/0x852 [ 2454.228065][T28693] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2454.233626][T28693] ? rcu_read_lock_sched_held+0x110/0x130 [ 2454.239353][T28693] ? __alloc_pages_nodemask+0x599/0x7e0 [ 2454.244934][T28693] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2454.250490][T28693] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2454.255707][T28693] cache_grow_begin+0x5c0/0x860 [ 2454.260566][T28693] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2454.266810][T28693] ? __cpuset_node_allowed+0x136/0x540 [ 2454.272282][T28693] fallback_alloc+0x1fd/0x2d0 [ 2454.276974][T28693] ____cache_alloc_node+0x1be/0x1e0 [ 2454.282175][T28693] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2454.288431][T28693] kmem_cache_alloc+0x1e8/0x6f0 [ 2454.293313][T28693] ? group_pin_kill+0x1c0/0x1c0 [ 2454.298168][T28693] alloc_inode+0xb8/0x190 [ 2454.302506][T28693] new_inode_pseudo+0x19/0xf0 [ 2454.307191][T28693] __ns_get_path.isra.0+0x13c/0x7b0 [ 2454.312421][T28693] ? group_pin_kill+0x1c0/0x1c0 [ 2454.317278][T28693] ns_get_path_cb+0x42/0x90 [ 2454.321797][T28693] ns_get_path+0x81/0xb0 [ 2454.326048][T28693] ? ns_get_path_cb+0x90/0x90 [ 2454.330736][T28693] ? mntput+0x74/0xa0 [ 2454.334732][T28693] perf_fill_ns_link_info.isra.0+0x89/0x200 [ 2454.340629][T28693] ? arch_local_irq_restore+0x60/0x60 [ 2454.346008][T28693] ? lock_downgrade+0x880/0x880 [ 2454.350861][T28693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2454.357113][T28693] perf_event_namespaces.part.0+0x126/0x1c0 [ 2454.363005][T28693] ? perf_event_task+0x1f0/0x1f0 [ 2454.367926][T28693] ? perf_iterate_sb+0x12c/0xa10 [ 2454.372865][T28693] perf_event_namespaces+0x40/0x50 [ 2454.377958][T28693] perf_event_fork+0x25/0x30 [ 2454.382533][T28693] copy_process.part.0+0x533a/0x79d0 [ 2454.387800][T28693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2454.394022][T28693] ? debug_smp_processor_id+0x3c/0x280 [ 2454.399461][T28693] ? perf_trace_lock+0xeb/0x510 [ 2454.404290][T28693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2454.410507][T28693] ? debug_smp_processor_id+0x3c/0x280 [ 2454.415948][T28693] ? __lockdep_free_key_range+0x120/0x120 [ 2454.421661][T28693] ? __cleanup_sighand+0x60/0x60 [ 2454.426580][T28693] ? lock_downgrade+0x880/0x880 [ 2454.431423][T28693] _do_fork+0x257/0xfd0 [ 2454.435562][T28693] ? fork_idle+0x1d0/0x1d0 [ 2454.439966][T28693] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2454.445409][T28693] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2454.450851][T28693] ? do_syscall_64+0x26/0x610 [ 2454.455511][T28693] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2454.461558][T28693] ? do_syscall_64+0x26/0x610 [ 2454.466229][T28693] __x64_sys_clone+0xbf/0x150 [ 2454.470889][T28693] do_syscall_64+0x103/0x610 [ 2454.475463][T28693] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2454.481337][T28693] RIP: 0033:0x458079 [ 2454.485220][T28693] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2454.504800][T28693] RSP: 002b:00007fa888d53c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2454.513188][T28693] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458079 [ 2454.521142][T28693] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000002102001ffc [ 2454.529091][T28693] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 2454.537039][T28693] R10: 0000000020000640 R11: 0000000000000246 R12: 00007fa888d546d4 [ 2454.544991][T28693] R13: 00000000004be379 R14: 00000000004ceac0 R15: 00000000ffffffff 03:47:18 executing program 3: getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=',|', 0x2}], 0x1}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001180)="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", 0x119}], 0x1}, 0x8000) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="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", 0x2d5}], 0x1}, 0x0) 03:47:18 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x3ffffffb, 0x0) bind$unix(r0, 0x0, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) utime(0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) bind$inet6(r2, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f00000001c0), 0x4) r4 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r4, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r2, r4, 0x0, 0x8000fffffffe) 03:47:18 executing program 5: getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) 03:47:18 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x3, r0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) setpriority(0x0, r0, 0x10000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x1) r1 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) keyctl$assume_authority(0x10, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1001, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x1}) write$selinux_attr(r1, &(0x7f00000000c0)='system_u:object_r:tpm_device_t:s0\x00', 0x22) socket$inet6_udp(0xa, 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='security.capability\xf6', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0)) 03:47:18 executing program 3: getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=',|', 0x2}], 0x1}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001180)="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", 0x119}], 0x1}, 0x8000) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="d09a0e63c9476288b671afdbd53a5994e137381f62021d1951b627b8dda57a5d17d744648c81c5703ed8146ab1b0171f89091b1dd3238d03dbb686df460963245dedf2973ee555af99499e44ad420dbf65fd46fbc99a1274429e2d5783751815828ec8cb3553110cca66460215353d19f6d8bbd8fb264eddea60b18e16c31aa5e200000491634ac2fd10e2cd30bcd7fede24263a7fff16e53ea293f3551b7147c33a44ea437fb1515c3e8d4f162fdebf8ebe11ae6fcd9372c8d8f19556ae091fe94215ae9434da412f6fa4cb6561e5f78ff9707844ee5d573fb294437722d9a06dfa61748c32c73d759933a8dd344c947d3efdbe90d0eb049df5fbb0c19f6785264b619c530d97395d44b04f7e2a280d658c7871ad373b792678c49227999651ef3b2ee1bc2b8f3035db376e8e09aa3837233c8713065a8ad131d24f6c42a3220d0e07c3d3e95d59a5dd10c09716b5f874ecf53aadfa5050ff40f2c3c4a629b6445e5836100afff5a8977583653b40ca316f8f11416e5c1bd5499636ddae25fc4970b37209cf5c0bf8e432160c258d14223baa52798e09858645773dd97e68a95310da713cff077b06000000d4f145e9199c126a7f235e5674a3c7f5c7129ac7c1a3319590249b6d34ef6c3d8b94c6fc7cdcbddb053243053f7bc1f230d3bc7dfc4359e33992d0a3946b914a093287a76ac4a249b5b86cc75476466e409553355fefab75e9268a8751ffc9481fcff1f49c475699595b315e2147ee038b7291600c6b1cf7c8f24d587b9464a67e5ccec17820e711b98f4f7d5053642068a3fff704c3fe26ba862b53e2622d6e8b4a4c815fb2ea90ef63e141209dd292fdf886ee3e64b90f47ce22661c7a21f7bc10df0248079b7be17284eb54e5ab5bde9c6857b3cb184586049e7741b2d8b5b1a19e99e1834a25959155720c1c0ef84d7b3c42e1ba282847d476cef0228b1422aba08e5f3c1cd279bbd1c5303c2e9c16a0da4f88f770fca118b09e92b51a33970e32ade003000000", 0x2d5}], 0x1}, 0x0) [ 2454.888097][ T26] kauditd_printk_skb: 282 callbacks suppressed [ 2454.888110][ T26] audit: type=1804 audit(2000000838.765:1409): pid=28716 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="bus" dev="sda1" ino=17203 res=1 03:47:18 executing program 3: getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=',|', 0x2}], 0x1}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001180)="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", 0x119}], 0x1}, 0x8000) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="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", 0x2d5}], 0x1}, 0x0) 03:47:19 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x3, r0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) setpriority(0x0, r0, 0x10000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x1) r1 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) keyctl$assume_authority(0x10, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1001, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x1}) write$selinux_attr(r1, &(0x7f00000000c0)='system_u:object_r:tpm_device_t:s0\x00', 0x22) socket$inet6_udp(0xa, 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='security.capability\xf6', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0)) [ 2455.101873][ T26] audit: type=1804 audit(2000000838.985:1410): pid=28718 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="bus" dev="sda1" ino=17203 res=1 [ 2455.174381][ T26] audit: type=1804 audit(2000000838.985:1411): pid=28706 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="bus" dev="sda1" ino=17203 res=1 [ 2455.261559][ T26] audit: type=1804 audit(2000000839.055:1412): pid=28718 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="bus" dev="sda1" ino=17203 res=1 [ 2455.370690][T28693] memory: usage 307200kB, limit 307200kB, failcnt 4262 [ 2455.378214][T28693] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2455.386321][ T26] audit: type=1804 audit(2000000839.055:1413): pid=28716 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="bus" dev="sda1" ino=17203 res=1 [ 2455.393921][T28693] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2455.425044][T28693] Memory cgroup stats for /syz0: cache:19200KB rss:237988KB rss_huge:217088KB shmem:4KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:238080KB inactive_file:0KB active_file:0KB unevictable:19148KB [ 2455.459529][ T26] audit: type=1804 audit(2000000839.055:1414): pid=28718 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="bus" dev="sda1" ino=17203 res=1 [ 2455.488168][T28693] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18328,uid=0 [ 2455.510708][ T26] audit: type=1804 audit(2000000839.055:1415): pid=28718 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="bus" dev="sda1" ino=17203 res=1 [ 2455.539430][T28693] Memory cgroup out of memory: Killed process 18328 (syz-executor.0) total-vm:72448kB, anon-rss:4248kB, file-rss:34944kB, shmem-rss:0kB [ 2455.567275][ T1044] oom_reaper: reaped process 18328 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2455.590939][T28692] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2455.634792][T28692] CPU: 0 PID: 28692 Comm: syz-executor.0 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2455.643845][T28692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2455.653892][T28692] Call Trace: [ 2455.657184][T28692] dump_stack+0x172/0x1f0 [ 2455.661514][T28692] dump_header+0x10f/0xb6c [ 2455.665960][T28692] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2455.671761][T28692] ? ___ratelimit+0x60/0x595 [ 2455.676347][T28692] ? do_raw_spin_unlock+0x57/0x270 [ 2455.681458][T28692] oom_kill_process.cold+0x10/0x15 [ 2455.686565][T28692] out_of_memory+0x79a/0x1280 [ 2455.691250][T28692] ? oom_killer_disable+0x280/0x280 [ 2455.696454][T28692] ? find_held_lock+0x35/0x130 [ 2455.701226][T28692] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2455.706772][T28692] ? memcg_event_wake+0x230/0x230 [ 2455.711798][T28692] ? do_raw_spin_unlock+0x57/0x270 [ 2455.716909][T28692] ? _raw_spin_unlock+0x2d/0x50 [ 2455.721760][T28692] try_charge+0xd4d/0x1790 [ 2455.726186][T28692] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2455.731734][T28692] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2455.737975][T28692] ? kasan_check_read+0x11/0x20 [ 2455.742825][T28692] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2455.748369][T28692] mem_cgroup_try_charge+0x24d/0x5e0 [ 2455.753655][T28692] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2455.759310][T28692] __handle_mm_fault+0x1e1f/0x3ec0 [ 2455.764426][T28692] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2455.769970][T28692] ? find_held_lock+0x35/0x130 [ 2455.774733][T28692] ? handle_mm_fault+0x322/0xb30 [ 2455.779677][T28692] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2455.787237][T28692] ? kasan_check_read+0x11/0x20 [ 2455.792573][T28692] handle_mm_fault+0x43f/0xb30 [ 2455.797340][T28692] __do_page_fault+0x5ef/0xda0 [ 2455.802111][T28692] do_page_fault+0x71/0x581 [ 2455.806611][T28692] ? page_fault+0x8/0x30 [ 2455.810891][T28692] page_fault+0x1e/0x30 [ 2455.815041][T28692] RIP: 0033:0x40fa8f [ 2455.818932][T28692] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 2455.838613][T28692] RSP: 002b:00007ffe20f5e5e0 EFLAGS: 00010206 [ 2455.844671][T28692] RAX: 00007fa888d13000 RBX: 0000000000020000 RCX: 00000000004580ca [ 2455.852633][T28692] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 2455.860601][T28692] RBP: 00007ffe20f5e6c0 R08: ffffffffffffffff R09: 0000000000000000 [ 2455.868568][T28692] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe20f5e7a0 [ 2455.876532][T28692] R13: 00007fa888d33700 R14: 0000000000000003 R15: 000000000073bfac [ 2455.893832][T28692] memory: usage 302824kB, limit 307200kB, failcnt 4262 [ 2455.918128][T28692] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2455.945069][T28692] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2455.952422][T28692] Memory cgroup stats for /syz0: cache:19200KB rss:233904KB rss_huge:212992KB shmem:4KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:233884KB inactive_file:0KB active_file:0KB unevictable:19148KB [ 2455.976413][T28692] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18374,uid=0 [ 2456.000884][T28692] Memory cgroup out of memory: Killed process 18374 (syz-executor.0) total-vm:72448kB, anon-rss:4248kB, file-rss:34816kB, shmem-rss:0kB 03:47:19 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x3, r0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) setpriority(0x0, r0, 0x10000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0xa75d, 0x48000) futimesat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={{0x77359400}}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1001, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x1}) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000780)=@v2={0x2000000, [{0xe24}, {0x2}]}, 0x14, 0x0) getpriority(0x3, r0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='./file0\x00') sendmsg(0xffffffffffffffff, 0x0, 0x800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='security.capability\xf6', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0)) 03:47:19 executing program 5: getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) 03:47:19 executing program 2: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000100)='./file0\x00', 0x40) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1\x00']) chdir(0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') stat(0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x103) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r1, 0x0) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) 03:47:19 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x3, r0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) setpriority(0x0, r0, 0x10000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x1) r1 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) keyctl$assume_authority(0x10, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1001, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x1}) write$selinux_attr(r1, &(0x7f00000000c0)='system_u:object_r:tpm_device_t:s0\x00', 0x22) socket$inet6_udp(0xa, 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='security.capability\xf6', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0)) 03:47:19 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x3, r0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) setpriority(0x0, r0, 0x10000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x1) r1 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) keyctl$assume_authority(0x10, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1001, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x1}) write$selinux_attr(r1, &(0x7f00000000c0)='system_u:object_r:tpm_device_t:s0\x00', 0x22) socket$inet6_udp(0xa, 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='security.capability\xf6', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0)) 03:47:19 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x3ffffffb, 0x0) bind$unix(r0, 0x0, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) utime(0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) bind$inet6(r2, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f00000001c0), 0x4) r4 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r4, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r2, r4, 0x0, 0x8000fffffffe) 03:47:20 executing program 5: getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) [ 2456.281848][ T26] audit: type=1804 audit(2000000840.165:1416): pid=28774 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="bus" dev="sda1" ino=17429 res=1 [ 2456.430279][ T26] audit: type=1804 audit(2000000840.165:1417): pid=28774 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="bus" dev="sda1" ino=17429 res=1 03:47:20 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x3, r0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) setpriority(0x0, r0, 0x10000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x1) r1 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) keyctl$assume_authority(0x10, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1001, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x1}) write$selinux_attr(r1, &(0x7f00000000c0)='system_u:object_r:tpm_device_t:s0\x00', 0x22) socket$inet6_udp(0xa, 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='security.capability\xf6', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0)) 03:47:20 executing program 5: getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) 03:47:20 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x3, r0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) setpriority(0x0, r0, 0x10000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0xa75d, 0x48000) futimesat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={{0x77359400}}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1001, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x1}) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000780)=@v2={0x2000000, [{0xe24}, {0x2}]}, 0x14, 0x0) getpriority(0x3, r0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='./file0\x00') sendmsg(0xffffffffffffffff, 0x0, 0x800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='security.capability\xf6', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0)) 03:47:20 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x3, r0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) setpriority(0x0, r0, 0x10000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x1) r1 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) keyctl$assume_authority(0x10, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1001, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x1}) write$selinux_attr(r1, &(0x7f00000000c0)='system_u:object_r:tpm_device_t:s0\x00', 0x22) socket$inet6_udp(0xa, 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='security.capability\xf6', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0)) [ 2456.571166][ T26] audit: type=1804 audit(2000000840.165:1418): pid=28774 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="bus" dev="sda1" ino=17429 res=1 03:47:20 executing program 2: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000100)='./file0\x00', 0x40) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1\x00']) chdir(0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') stat(0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x103) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r1, 0x0) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) 03:47:20 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x3, r0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) setpriority(0x0, r0, 0x10000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0xa75d, 0x48000) futimesat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={{0x77359400}}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1001, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x1}) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000780)=@v2={0x2000000, [{0xe24}, {0x2}]}, 0x14, 0x0) getpriority(0x3, r0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='./file0\x00') sendmsg(0xffffffffffffffff, 0x0, 0x800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='security.capability\xf6', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0)) 03:47:20 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x3, r0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) setpriority(0x0, r0, 0x10000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x1) r1 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) keyctl$assume_authority(0x10, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1001, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x1}) write$selinux_attr(r1, &(0x7f00000000c0)='system_u:object_r:tpm_device_t:s0\x00', 0x22) socket$inet6_udp(0xa, 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='security.capability\xf6', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0)) 03:47:21 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x3, r0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) setpriority(0x0, r0, 0x10000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0xa75d, 0x48000) futimesat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={{0x77359400}}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1001, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x1}) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000780)=@v2={0x2000000, [{0xe24}, {0x2}]}, 0x14, 0x0) getpriority(0x3, r0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='./file0\x00') sendmsg(0xffffffffffffffff, 0x0, 0x800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='security.capability\xf6', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0)) 03:47:21 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x3, r0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) setpriority(0x0, r0, 0x10000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0xa75d, 0x48000) futimesat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={{0x77359400}}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1001, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x1}) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000780)=@v2={0x2000000, [{0xe24}, {0x2}]}, 0x14, 0x0) getpriority(0x3, r0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='./file0\x00') sendmsg(0xffffffffffffffff, 0x0, 0x800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='security.capability\xf6', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0)) 03:47:21 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x3ffffffb, 0x0) bind$unix(r0, 0x0, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) utime(0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) bind$inet6(r2, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f00000001c0), 0x4) r4 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r4, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r2, r4, 0x0, 0x8000fffffffe) 03:47:21 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x3, r0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) setpriority(0x0, r0, 0x10000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0xa75d, 0x48000) futimesat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={{0x77359400}}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1001, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x1}) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000780)=@v2={0x2000000, [{0xe24}, {0x2}]}, 0x14, 0x0) getpriority(0x3, r0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='./file0\x00') sendmsg(0xffffffffffffffff, 0x0, 0x800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='security.capability\xf6', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0)) 03:47:21 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x3, r0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) setpriority(0x0, r0, 0x10000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0xa75d, 0x48000) futimesat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={{0x77359400}}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1001, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x1}) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000780)=@v2={0x2000000, [{0xe24}, {0x2}]}, 0x14, 0x0) getpriority(0x3, r0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='./file0\x00') sendmsg(0xffffffffffffffff, 0x0, 0x800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='security.capability\xf6', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0)) 03:47:21 executing program 2: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000100)='./file0\x00', 0x40) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1\x00']) chdir(0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') stat(0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x103) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r1, 0x0) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) 03:47:21 executing program 3: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000100)='./file0\x00', 0x40) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1\x00']) chdir(0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') stat(0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x103) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r1, 0x0) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) 03:47:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x4}}}, @IFLA_BROADCAST={0xc, 0x10, @local}]}, 0x40}}, 0x0) 03:47:21 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x3, r0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) setpriority(0x0, r0, 0x10000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0xa75d, 0x48000) futimesat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={{0x77359400}}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1001, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x1}) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000780)=@v2={0x2000000, [{0xe24}, {0x2}]}, 0x14, 0x0) getpriority(0x3, r0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='./file0\x00') sendmsg(0xffffffffffffffff, 0x0, 0x800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='security.capability\xf6', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0)) [ 2457.723509][T28849] netlink: 'syz-executor.0': attribute type 16 has an invalid length. 03:47:21 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 03:47:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) 03:47:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f00000008c0)="130000001000ffdde200f49ff60f050000230a009d000000119dc53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db75411543e1226408e88cac1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e5de7e4f28bca763acd06f40ad03226af55e3129849ae3c726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025722c962d916c000000000000003400000000000000d5ba641663ac6847", 0xc4) 03:47:22 executing program 5: r0 = socket$packet(0x11, 0x100000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x4, 0x4) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="32cae4783d32"}, 0x14) sendto$inet6(r0, &(0x7f0000000180)="050300000300000000000000c52c", 0xe, 0x0, 0x0, 0x0) 03:47:22 executing program 3: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000100)='./file0\x00', 0x40) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1\x00']) chdir(0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') stat(0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x103) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r1, 0x0) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) 03:47:22 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x3ffffffb, 0x0) bind$unix(r0, 0x0, 0x0) listen(r1, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) utime(0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) bind$inet6(r2, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f00000001c0), 0x4) r4 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r4, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r2, r4, 0x0, 0x8000fffffffe) 03:47:22 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x3, r0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) setpriority(0x0, r0, 0x10000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0xa75d, 0x48000) futimesat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={{0x77359400}}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1001, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x1}) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000780)=@v2={0x2000000, [{0xe24}, {0x2}]}, 0x14, 0x0) getpriority(0x3, r0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='./file0\x00') sendmsg(0xffffffffffffffff, 0x0, 0x800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='security.capability\xf6', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0)) 03:47:22 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "934341c138c7f1bf"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x7, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) recvfrom$inet(r0, 0x0, 0xbc, 0x0, 0x0, 0x3a2) 03:47:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f00000008c0)="130000001000ffdde200f49ff60f050000230a009d000000119dc53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db75411543e1226408e88cac1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e5de7e4f28bca763acd06f40ad03226af55e3129849ae3c726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025722c962d916c000000000000003400000000000000d5ba641663ac6847", 0xc4) [ 2458.312706][T28873] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2458.369873][T28873] CPU: 1 PID: 28873 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2458.378942][T28873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2458.389010][T28873] Call Trace: [ 2458.392331][T28873] dump_stack+0x172/0x1f0 [ 2458.396690][T28873] dump_header+0x10f/0xb6c [ 2458.401131][T28873] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2458.406951][T28873] ? ___ratelimit+0x60/0x595 [ 2458.411558][T28873] ? do_raw_spin_unlock+0x57/0x270 [ 2458.416691][T28873] oom_kill_process.cold+0x10/0x15 [ 2458.421819][T28873] out_of_memory+0x79a/0x1280 [ 2458.426511][T28873] ? lock_downgrade+0x880/0x880 [ 2458.431376][T28873] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2458.437631][T28873] ? oom_killer_disable+0x280/0x280 [ 2458.442841][T28873] ? find_held_lock+0x35/0x130 [ 2458.447628][T28873] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2458.453186][T28873] ? memcg_event_wake+0x230/0x230 [ 2458.458227][T28873] ? do_raw_spin_unlock+0x57/0x270 [ 2458.463331][T28873] ? _raw_spin_unlock+0x2d/0x50 [ 2458.468167][T28873] try_charge+0x118d/0x1790 [ 2458.472687][T28873] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2458.478218][T28873] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2458.484442][T28873] ? kasan_check_read+0x11/0x20 [ 2458.489278][T28873] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2458.494807][T28873] mem_cgroup_try_charge+0x24d/0x5e0 [ 2458.500080][T28873] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2458.505705][T28873] wp_page_copy+0x408/0x1740 [ 2458.510279][T28873] ? find_held_lock+0x35/0x130 [ 2458.515036][T28873] ? pmd_pfn+0x1d0/0x1d0 [ 2458.519365][T28873] ? lock_downgrade+0x880/0x880 [ 2458.524200][T28873] ? __pte_alloc_kernel+0x220/0x220 [ 2458.529382][T28873] ? kasan_check_read+0x11/0x20 [ 2458.534309][T28873] ? do_raw_spin_unlock+0x57/0x270 [ 2458.539408][T28873] do_wp_page+0x5d8/0x16c0 [ 2458.543894][T28873] ? do_raw_spin_lock+0x12a/0x2e0 [ 2458.548900][T28873] ? rwlock_bug.part.0+0x90/0x90 [ 2458.553823][T28873] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2458.559188][T28873] ? add_mm_counter_fast.part.0+0x40/0x40 [ 2458.564903][T28873] __handle_mm_fault+0x22e8/0x3ec0 [ 2458.569999][T28873] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2458.575563][T28873] ? find_held_lock+0x35/0x130 [ 2458.580485][T28873] ? handle_mm_fault+0x322/0xb30 [ 2458.585412][T28873] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2458.591704][T28873] ? kasan_check_read+0x11/0x20 [ 2458.596542][T28873] handle_mm_fault+0x43f/0xb30 [ 2458.601393][T28873] __do_page_fault+0x5ef/0xda0 [ 2458.606149][T28873] do_page_fault+0x71/0x581 [ 2458.610639][T28873] ? page_fault+0x8/0x30 [ 2458.614950][T28873] page_fault+0x1e/0x30 [ 2458.619183][T28873] RIP: 0033:0x40d2e8 [ 2458.623084][T28873] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf e2 d5 4b 00 31 c0 e8 43 46 ff ff 31 ff e8 8c 42 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 7e 31 64 00 [ 2458.642766][T28873] RSP: 002b:00007fff5bc3c5f0 EFLAGS: 00010246 [ 2458.648821][T28873] RAX: 0000000081760279 RBX: 0000000076edc0ac RCX: 0000001b2d120000 [ 2458.649149][ C0] net_ratelimit: 26 callbacks suppressed [ 2458.649157][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2458.656777][T28873] RDX: 0000000000000000 RSI: 0000000000000279 RDI: ffffffff81760279 [ 2458.656790][T28873] RBP: 0000000000000000 R08: 0000000081760279 R09: 000000008176027d [ 2458.662556][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2458.668098][T28873] R10: 00007fff5bc3c780 R11: 0000000000000246 R12: 000000000073bf88 [ 2458.668110][T28873] R13: 0000000080000000 R14: 00007fa95330a008 R15: 0000000000000000 [ 2458.676231][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2458.684042][T28873] ? trace_hardirqs_off_caller+0x19/0x220 03:47:22 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000180), 0x0) timerfd_create(0x0, 0x0) [ 2458.717493][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2458.723448][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2458.729314][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2458.735181][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2458.741059][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2458.746927][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2458.752772][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:22 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000180), 0x0) timerfd_create(0x0, 0x0) 03:47:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f00000008c0)="130000001000ffdde200f49ff60f050000230a009d000000119dc53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db75411543e1226408e88cac1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e5de7e4f28bca763acd06f40ad03226af55e3129849ae3c726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025722c962d916c000000000000003400000000000000d5ba641663ac6847", 0xc4) [ 2458.894000][T28873] memory: usage 307200kB, limit 307200kB, failcnt 8410 [ 2458.910237][T28873] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2458.918853][T28873] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:47:22 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000180), 0x0) timerfd_create(0x0, 0x0) 03:47:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f00000008c0)="130000001000ffdde200f49ff60f050000230a009d000000119dc53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db75411543e1226408e88cac1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e5de7e4f28bca763acd06f40ad03226af55e3129849ae3c726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025722c962d916c000000000000003400000000000000d5ba641663ac6847", 0xc4) [ 2458.936931][T28873] Memory cgroup stats for /syz1: cache:11044KB rss:241684KB rss_huge:219136KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:241676KB inactive_file:0KB active_file:0KB unevictable:11008KB [ 2459.039104][T28873] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18491,uid=0 03:47:22 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000180), 0x0) timerfd_create(0x0, 0x0) [ 2459.081500][T28873] Memory cgroup out of memory: Killed process 18491 (syz-executor.1) total-vm:72580kB, anon-rss:4256kB, file-rss:34816kB, shmem-rss:0kB 03:47:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 03:47:23 executing program 3: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000100)='./file0\x00', 0x40) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1\x00']) chdir(0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') stat(0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x103) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r1, 0x0) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) 03:47:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x11) 03:47:23 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./control\x00', 0x8) inotify_add_watch(r0, &(0x7f0000000040)='./control\x00', 0x20000000) 03:47:23 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(0x0, &(0x7f0000000140)='.//ile0\x00') syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x100, 0x0, 0x0, [], [], [], 0x2, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000800), 0x4) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) write(r1, &(0x7f0000000400)="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", 0x200) lsetxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file1\x00', &(0x7f00000003c0)='trusted.overlay.redirect\x00', &(0x7f0000000600)='./bus\x00', 0x6, 0x1) sendfile(r1, r2, 0x0, 0x10000) 03:47:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0xc0000101]}) 03:47:23 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffd, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000002c0)={0x1, "a46453ca354c2fdd8a662bacc1db2ef8b28b0af8865febdbdaa7dfaf20d4fba5"}) 03:47:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000001980)={0x14, 0x13, 0x2, {0x80, 0x0, 0x4}}, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/116, 0x74}], 0x1, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000140)='attr/prev\x00') keyctl$search(0xa, 0x0, &(0x7f00000002c0)='pkcs7_test\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0) 03:47:23 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./control\x00', 0x8) inotify_add_watch(r0, &(0x7f0000000040)='./control\x00', 0x20000000) 03:47:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x887aa35ef3fa213b, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x98) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 03:47:23 executing program 5: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x202, 0x0) recvfrom(r0, &(0x7f0000000440)=""/104, 0x68, 0x40000142, &(0x7f0000000680)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0x3, 0x2, 0x2, 0x1}}, 0x80) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000800)='/dev/rtc0\x00', 0x10000002, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) fcntl$lock(r1, 0x0, 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000000640)={r3, r4+30000000}) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$security_evm(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "c2024814a18aa24da324558dc0eef388e4463b08"}, 0x15, 0x1) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000700)={0x0, 0x2, 0x0, 0x100200}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x5) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000200)) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@loopback, @in6=@mcast1, 0x4e23, 0x2805, 0x4e22, 0x6, 0xa, 0x20, 0x0, 0x89, r5, r6}, {0xffffffffffffffff, 0x7fff, 0x123c, 0xffffffffffffffff, 0x7, 0xcb, 0xfff, 0x80000001}, {0x2, 0x101, 0x7b4a, 0x20}, 0x1, 0x6e6bb9, 0x2, 0x0, 0x1, 0x2}, {{@in=@remote, 0x4d4, 0xff}, 0x0, @in=@local, 0x3505, 0x3, 0x1, 0x0, 0x9, 0x4}}, 0xe8) setfsuid(r6) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$unix(r2, &(0x7f0000000380)="bd50171c5d87ab54088ccc755d26515fde87f05989a49d03df902166f50e1efd5872935d9401fd8c5626476c9234bc411de5e616635de040b8793e0a59c85715ace070d032e292c3e91662786aa0af0005edcdf82a6018d9e7852e7b7af9502526271033685a0d8019c9e8cd6c92914947f75c306296534d40f709c7c97bdc30e0cc197fe8be76672623206f34986fc7ad26f74fdce7108a65cd0b289c7fa3739556b80b1fb00dee6d3c89687c", 0xad, 0x4, 0x0, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000004c0)={0x4, 0x0, [{0x8000000e, 0x0, 0x5, 0x8, 0x2205, 0x100, 0x2}, {0x1, 0x400, 0x6, 0x5, 0x1, 0x2c5a, 0x8}, {0xc0000001, 0x3, 0x6, 0x10000, 0x81, 0x6, 0x7}, {0x80000019, 0x6e, 0x7, 0x800, 0x80, 0x6, 0xdc}]}) 03:47:23 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./control\x00', 0x8) inotify_add_watch(r0, &(0x7f0000000040)='./control\x00', 0x20000000) 03:47:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0xc0000101]}) 03:47:24 executing program 5: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x202, 0x0) recvfrom(r0, &(0x7f0000000440)=""/104, 0x68, 0x40000142, &(0x7f0000000680)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0x3, 0x2, 0x2, 0x1}}, 0x80) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000800)='/dev/rtc0\x00', 0x10000002, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) fcntl$lock(r1, 0x0, 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000000640)={r3, r4+30000000}) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$security_evm(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "c2024814a18aa24da324558dc0eef388e4463b08"}, 0x15, 0x1) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000700)={0x0, 0x2, 0x0, 0x100200}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x5) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000200)) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@loopback, @in6=@mcast1, 0x4e23, 0x2805, 0x4e22, 0x6, 0xa, 0x20, 0x0, 0x89, r5, r6}, {0xffffffffffffffff, 0x7fff, 0x123c, 0xffffffffffffffff, 0x7, 0xcb, 0xfff, 0x80000001}, {0x2, 0x101, 0x7b4a, 0x20}, 0x1, 0x6e6bb9, 0x2, 0x0, 0x1, 0x2}, {{@in=@remote, 0x4d4, 0xff}, 0x0, @in=@local, 0x3505, 0x3, 0x1, 0x0, 0x9, 0x4}}, 0xe8) setfsuid(r6) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$unix(r2, &(0x7f0000000380)="bd50171c5d87ab54088ccc755d26515fde87f05989a49d03df902166f50e1efd5872935d9401fd8c5626476c9234bc411de5e616635de040b8793e0a59c85715ace070d032e292c3e91662786aa0af0005edcdf82a6018d9e7852e7b7af9502526271033685a0d8019c9e8cd6c92914947f75c306296534d40f709c7c97bdc30e0cc197fe8be76672623206f34986fc7ad26f74fdce7108a65cd0b289c7fa3739556b80b1fb00dee6d3c89687c", 0xad, 0x4, 0x0, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000004c0)={0x4, 0x0, [{0x8000000e, 0x0, 0x5, 0x8, 0x2205, 0x100, 0x2}, {0x1, 0x400, 0x6, 0x5, 0x1, 0x2c5a, 0x8}, {0xc0000001, 0x3, 0x6, 0x10000, 0x81, 0x6, 0x7}, {0x80000019, 0x6e, 0x7, 0x800, 0x80, 0x6, 0xdc}]}) [ 2460.141095][T12092] rpcbind: RPC call returned error 22 03:47:24 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./control\x00', 0x8) inotify_add_watch(r0, &(0x7f0000000040)='./control\x00', 0x20000000) 03:47:24 executing program 3: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x202, 0x0) recvfrom(r0, &(0x7f0000000440)=""/104, 0x68, 0x40000142, &(0x7f0000000680)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0x3, 0x2, 0x2, 0x1}}, 0x80) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000800)='/dev/rtc0\x00', 0x10000002, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) fcntl$lock(r1, 0x0, 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000000640)={r3, r4+30000000}) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$security_evm(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "c2024814a18aa24da324558dc0eef388e4463b08"}, 0x15, 0x1) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000700)={0x0, 0x2, 0x0, 0x100200}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x5) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000200)) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@loopback, @in6=@mcast1, 0x4e23, 0x2805, 0x4e22, 0x6, 0xa, 0x20, 0x0, 0x89, r5, r6}, {0xffffffffffffffff, 0x7fff, 0x123c, 0xffffffffffffffff, 0x7, 0xcb, 0xfff, 0x80000001}, {0x2, 0x101, 0x7b4a, 0x20}, 0x1, 0x6e6bb9, 0x2, 0x0, 0x1, 0x2}, {{@in=@remote, 0x4d4, 0xff}, 0x0, @in=@local, 0x3505, 0x3, 0x1, 0x0, 0x9, 0x4}}, 0xe8) setfsuid(r6) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$unix(r2, &(0x7f0000000380)="bd50171c5d87ab54088ccc755d26515fde87f05989a49d03df902166f50e1efd5872935d9401fd8c5626476c9234bc411de5e616635de040b8793e0a59c85715ace070d032e292c3e91662786aa0af0005edcdf82a6018d9e7852e7b7af9502526271033685a0d8019c9e8cd6c92914947f75c306296534d40f709c7c97bdc30e0cc197fe8be76672623206f34986fc7ad26f74fdce7108a65cd0b289c7fa3739556b80b1fb00dee6d3c89687c", 0xad, 0x4, 0x0, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000004c0)={0x4, 0x0, [{0x8000000e, 0x0, 0x5, 0x8, 0x2205, 0x100, 0x2}, {0x1, 0x400, 0x6, 0x5, 0x1, 0x2c5a, 0x8}, {0xc0000001, 0x3, 0x6, 0x10000, 0x81, 0x6, 0x7}, {0x80000019, 0x6e, 0x7, 0x800, 0x80, 0x6, 0xdc}]}) [ 2460.478363][T12092] rpcbind: RPC call returned error 22 [ 2460.481155][T28948] FS-Cache: Duplicate cookie detected [ 2460.490289][T28948] FS-Cache: O-cookie c=00000000c2d7a49b [p=00000000c96158cf fl=212 nc=0 na=0] [ 2460.499331][T28948] FS-Cache: O-cookie d= (null) n= (null) [ 2460.506673][T28948] FS-Cache: O-key=[10] '02000200000002000000' [ 2460.513274][T28948] FS-Cache: N-cookie c=00000000e5cfe02f [p=00000000c96158cf fl=2 nc=0 na=1] [ 2460.522197][T28948] FS-Cache: N-cookie d=0000000068a28143 n=00000000f40cbeee [ 2460.529581][T28948] FS-Cache: N-key=[10] '02000200000002000000' [ 2460.549646][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 2460.549658][ T26] audit: type=1804 audit(2000000844.438:1436): pid=28958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=17367 res=1 [ 2460.576715][T30123] rpcbind: RPC call returned error 22 [ 2460.608625][ T26] audit: type=1804 audit(2000000844.438:1437): pid=28956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=17367 res=1 03:47:24 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(0x0, &(0x7f0000000140)='.//ile0\x00') syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x100, 0x0, 0x0, [], [], [], 0x2, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000800), 0x4) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) write(r1, &(0x7f0000000400)="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", 0x200) lsetxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file1\x00', &(0x7f00000003c0)='trusted.overlay.redirect\x00', &(0x7f0000000600)='./bus\x00', 0x6, 0x1) sendfile(r1, r2, 0x0, 0x10000) 03:47:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0xc0000101]}) 03:47:24 executing program 2: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x202, 0x0) recvfrom(r0, &(0x7f0000000440)=""/104, 0x68, 0x40000142, &(0x7f0000000680)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0x3, 0x2, 0x2, 0x1}}, 0x80) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000800)='/dev/rtc0\x00', 0x10000002, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) fcntl$lock(r1, 0x0, 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000000640)={r3, r4+30000000}) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$security_evm(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "c2024814a18aa24da324558dc0eef388e4463b08"}, 0x15, 0x1) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000700)={0x0, 0x2, 0x0, 0x100200}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x5) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000200)) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@loopback, @in6=@mcast1, 0x4e23, 0x2805, 0x4e22, 0x6, 0xa, 0x20, 0x0, 0x89, r5, r6}, {0xffffffffffffffff, 0x7fff, 0x123c, 0xffffffffffffffff, 0x7, 0xcb, 0xfff, 0x80000001}, {0x2, 0x101, 0x7b4a, 0x20}, 0x1, 0x6e6bb9, 0x2, 0x0, 0x1, 0x2}, {{@in=@remote, 0x4d4, 0xff}, 0x0, @in=@local, 0x3505, 0x3, 0x1, 0x0, 0x9, 0x4}}, 0xe8) setfsuid(r6) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$unix(r2, &(0x7f0000000380)="bd50171c5d87ab54088ccc755d26515fde87f05989a49d03df902166f50e1efd5872935d9401fd8c5626476c9234bc411de5e616635de040b8793e0a59c85715ace070d032e292c3e91662786aa0af0005edcdf82a6018d9e7852e7b7af9502526271033685a0d8019c9e8cd6c92914947f75c306296534d40f709c7c97bdc30e0cc197fe8be76672623206f34986fc7ad26f74fdce7108a65cd0b289c7fa3739556b80b1fb00dee6d3c89687c", 0xad, 0x4, 0x0, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000004c0)={0x4, 0x0, [{0x8000000e, 0x0, 0x5, 0x8, 0x2205, 0x100, 0x2}, {0x1, 0x400, 0x6, 0x5, 0x1, 0x2c5a, 0x8}, {0xc0000001, 0x3, 0x6, 0x10000, 0x81, 0x6, 0x7}, {0x80000019, 0x6e, 0x7, 0x800, 0x80, 0x6, 0xdc}]}) 03:47:24 executing program 5: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x202, 0x0) recvfrom(r0, &(0x7f0000000440)=""/104, 0x68, 0x40000142, &(0x7f0000000680)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0x3, 0x2, 0x2, 0x1}}, 0x80) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000800)='/dev/rtc0\x00', 0x10000002, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) fcntl$lock(r1, 0x0, 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000000640)={r3, r4+30000000}) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$security_evm(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "c2024814a18aa24da324558dc0eef388e4463b08"}, 0x15, 0x1) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000700)={0x0, 0x2, 0x0, 0x100200}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x5) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000200)) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@loopback, @in6=@mcast1, 0x4e23, 0x2805, 0x4e22, 0x6, 0xa, 0x20, 0x0, 0x89, r5, r6}, {0xffffffffffffffff, 0x7fff, 0x123c, 0xffffffffffffffff, 0x7, 0xcb, 0xfff, 0x80000001}, {0x2, 0x101, 0x7b4a, 0x20}, 0x1, 0x6e6bb9, 0x2, 0x0, 0x1, 0x2}, {{@in=@remote, 0x4d4, 0xff}, 0x0, @in=@local, 0x3505, 0x3, 0x1, 0x0, 0x9, 0x4}}, 0xe8) setfsuid(r6) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$unix(r2, &(0x7f0000000380)="bd50171c5d87ab54088ccc755d26515fde87f05989a49d03df902166f50e1efd5872935d9401fd8c5626476c9234bc411de5e616635de040b8793e0a59c85715ace070d032e292c3e91662786aa0af0005edcdf82a6018d9e7852e7b7af9502526271033685a0d8019c9e8cd6c92914947f75c306296534d40f709c7c97bdc30e0cc197fe8be76672623206f34986fc7ad26f74fdce7108a65cd0b289c7fa3739556b80b1fb00dee6d3c89687c", 0xad, 0x4, 0x0, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000004c0)={0x4, 0x0, [{0x8000000e, 0x0, 0x5, 0x8, 0x2205, 0x100, 0x2}, {0x1, 0x400, 0x6, 0x5, 0x1, 0x2c5a, 0x8}, {0xc0000001, 0x3, 0x6, 0x10000, 0x81, 0x6, 0x7}, {0x80000019, 0x6e, 0x7, 0x800, 0x80, 0x6, 0xdc}]}) 03:47:24 executing program 3: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x202, 0x0) recvfrom(r0, &(0x7f0000000440)=""/104, 0x68, 0x40000142, &(0x7f0000000680)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0x3, 0x2, 0x2, 0x1}}, 0x80) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000800)='/dev/rtc0\x00', 0x10000002, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) fcntl$lock(r1, 0x0, 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000000640)={r3, r4+30000000}) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$security_evm(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "c2024814a18aa24da324558dc0eef388e4463b08"}, 0x15, 0x1) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000700)={0x0, 0x2, 0x0, 0x100200}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x5) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000200)) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@loopback, @in6=@mcast1, 0x4e23, 0x2805, 0x4e22, 0x6, 0xa, 0x20, 0x0, 0x89, r5, r6}, {0xffffffffffffffff, 0x7fff, 0x123c, 0xffffffffffffffff, 0x7, 0xcb, 0xfff, 0x80000001}, {0x2, 0x101, 0x7b4a, 0x20}, 0x1, 0x6e6bb9, 0x2, 0x0, 0x1, 0x2}, {{@in=@remote, 0x4d4, 0xff}, 0x0, @in=@local, 0x3505, 0x3, 0x1, 0x0, 0x9, 0x4}}, 0xe8) setfsuid(r6) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$unix(r2, &(0x7f0000000380)="bd50171c5d87ab54088ccc755d26515fde87f05989a49d03df902166f50e1efd5872935d9401fd8c5626476c9234bc411de5e616635de040b8793e0a59c85715ace070d032e292c3e91662786aa0af0005edcdf82a6018d9e7852e7b7af9502526271033685a0d8019c9e8cd6c92914947f75c306296534d40f709c7c97bdc30e0cc197fe8be76672623206f34986fc7ad26f74fdce7108a65cd0b289c7fa3739556b80b1fb00dee6d3c89687c", 0xad, 0x4, 0x0, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000004c0)={0x4, 0x0, [{0x8000000e, 0x0, 0x5, 0x8, 0x2205, 0x100, 0x2}, {0x1, 0x400, 0x6, 0x5, 0x1, 0x2c5a, 0x8}, {0xc0000001, 0x3, 0x6, 0x10000, 0x81, 0x6, 0x7}, {0x80000019, 0x6e, 0x7, 0x800, 0x80, 0x6, 0xdc}]}) 03:47:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x887aa35ef3fa213b, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x98) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 2460.781618][ T26] audit: type=1800 audit(2000000844.668:1438): pid=28968 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17253 res=0 [ 2460.883376][T28965] FS-Cache: Duplicate cookie detected [ 2460.885928][ T26] audit: type=1804 audit(2000000844.688:1439): pid=28968 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=17253 res=1 [ 2460.891998][T28965] FS-Cache: O-cookie c=0000000067d8e290 [p=00000000c96158cf fl=222 nc=0 na=1] [ 2460.918309][T28965] FS-Cache: O-cookie d=0000000068a28143 n=00000000270caad1 [ 2460.925650][T28965] FS-Cache: O-key=[10] '02000200000002000000' 03:47:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0xc0000101]}) [ 2460.931937][T28965] FS-Cache: N-cookie c=000000008c8a9c5f [p=00000000c96158cf fl=2 nc=0 na=1] [ 2460.940688][T28965] FS-Cache: N-cookie d=0000000068a28143 n=0000000005035db3 [ 2460.947981][T28965] FS-Cache: N-key=[10] '02000200000002000000' [ 2460.956364][T17023] rpcbind: RPC call returned error 22 [ 2461.016288][T12092] rpcbind: RPC call returned error 22 03:47:25 executing program 3: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x202, 0x0) recvfrom(r0, &(0x7f0000000440)=""/104, 0x68, 0x40000142, &(0x7f0000000680)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0x3, 0x2, 0x2, 0x1}}, 0x80) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000800)='/dev/rtc0\x00', 0x10000002, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) fcntl$lock(r1, 0x0, 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000000640)={r3, r4+30000000}) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$security_evm(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "c2024814a18aa24da324558dc0eef388e4463b08"}, 0x15, 0x1) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000700)={0x0, 0x2, 0x0, 0x100200}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x5) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000200)) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@loopback, @in6=@mcast1, 0x4e23, 0x2805, 0x4e22, 0x6, 0xa, 0x20, 0x0, 0x89, r5, r6}, {0xffffffffffffffff, 0x7fff, 0x123c, 0xffffffffffffffff, 0x7, 0xcb, 0xfff, 0x80000001}, {0x2, 0x101, 0x7b4a, 0x20}, 0x1, 0x6e6bb9, 0x2, 0x0, 0x1, 0x2}, {{@in=@remote, 0x4d4, 0xff}, 0x0, @in=@local, 0x3505, 0x3, 0x1, 0x0, 0x9, 0x4}}, 0xe8) setfsuid(r6) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$unix(r2, &(0x7f0000000380)="bd50171c5d87ab54088ccc755d26515fde87f05989a49d03df902166f50e1efd5872935d9401fd8c5626476c9234bc411de5e616635de040b8793e0a59c85715ace070d032e292c3e91662786aa0af0005edcdf82a6018d9e7852e7b7af9502526271033685a0d8019c9e8cd6c92914947f75c306296534d40f709c7c97bdc30e0cc197fe8be76672623206f34986fc7ad26f74fdce7108a65cd0b289c7fa3739556b80b1fb00dee6d3c89687c", 0xad, 0x4, 0x0, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000004c0)={0x4, 0x0, [{0x8000000e, 0x0, 0x5, 0x8, 0x2205, 0x100, 0x2}, {0x1, 0x400, 0x6, 0x5, 0x1, 0x2c5a, 0x8}, {0xc0000001, 0x3, 0x6, 0x10000, 0x81, 0x6, 0x7}, {0x80000019, 0x6e, 0x7, 0x800, 0x80, 0x6, 0xdc}]}) 03:47:25 executing program 4: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(0x0, &(0x7f0000000140)='.//ile0\x00') syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x100, 0x0, 0x0, [], [], [], 0x2, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000800), 0x4) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) write(r1, &(0x7f0000000400)="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", 0x200) lsetxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file1\x00', &(0x7f00000003c0)='trusted.overlay.redirect\x00', &(0x7f0000000600)='./bus\x00', 0x6, 0x1) sendfile(r1, r2, 0x0, 0x10000) [ 2461.273912][ T8160] rpcbind: RPC call returned error 22 [ 2461.415106][ T26] audit: type=1800 audit(2000000845.298:1440): pid=28990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17226 res=0 [ 2461.426298][T28963] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2461.548529][ T26] audit: type=1804 audit(2000000845.328:1441): pid=28990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir369632446/syzkaller.0zRSPB/1213/file0" dev="sda1" ino=17226 res=1 [ 2461.573928][T17023] rpcbind: RPC call returned error 22 [ 2461.588422][T28963] CPU: 0 PID: 28963 Comm: syz-executor.5 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2461.597478][T28963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2461.607541][T28963] Call Trace: [ 2461.610846][T28963] dump_stack+0x172/0x1f0 [ 2461.616741][T28963] dump_header+0x10f/0xb6c [ 2461.621196][T28963] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2461.627015][T28963] ? ___ratelimit+0x60/0x595 [ 2461.631617][T28963] ? do_raw_spin_unlock+0x57/0x270 [ 2461.636737][T28963] oom_kill_process.cold+0x10/0x15 [ 2461.641869][T28963] out_of_memory+0x79a/0x1280 [ 2461.646557][T28963] ? lock_downgrade+0x880/0x880 [ 2461.651501][T28963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2461.657753][T28963] ? oom_killer_disable+0x280/0x280 [ 2461.662971][T28963] ? find_held_lock+0x35/0x130 [ 2461.667746][T28963] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2461.673311][T28963] ? memcg_event_wake+0x230/0x230 [ 2461.678324][T28963] ? do_raw_spin_unlock+0x57/0x270 [ 2461.683429][T28963] ? _raw_spin_unlock+0x2d/0x50 [ 2461.688265][T28963] try_charge+0x118d/0x1790 [ 2461.693713][T28963] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2461.699242][T28963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2461.705641][T28963] ? kasan_check_read+0x11/0x20 [ 2461.710479][T28963] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2461.716011][T28963] mem_cgroup_try_charge+0x24d/0x5e0 [ 2461.721283][T28963] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2461.726912][T28963] wp_page_copy+0x408/0x1740 [ 2461.731486][T28963] ? find_held_lock+0x35/0x130 [ 2461.736246][T28963] ? pmd_pfn+0x1d0/0x1d0 [ 2461.740473][T28963] ? lock_downgrade+0x880/0x880 [ 2461.745306][T28963] ? swp_swapcount+0x540/0x540 [ 2461.750057][T28963] ? kasan_check_read+0x11/0x20 [ 2461.754975][T28963] ? do_raw_spin_unlock+0x57/0x270 [ 2461.760070][T28963] do_wp_page+0x5d8/0x16c0 [ 2461.764474][T28963] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2461.769841][T28963] __handle_mm_fault+0x22e8/0x3ec0 [ 2461.774971][T28963] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2461.780499][T28963] ? find_held_lock+0x35/0x130 [ 2461.785975][T28963] ? handle_mm_fault+0x322/0xb30 [ 2461.790907][T28963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2461.797131][T28963] ? kasan_check_read+0x11/0x20 [ 2461.801966][T28963] handle_mm_fault+0x43f/0xb30 [ 2461.806718][T28963] __do_page_fault+0x5ef/0xda0 [ 2461.811566][T28963] do_page_fault+0x71/0x581 [ 2461.816052][T28963] ? page_fault+0x8/0x30 [ 2461.820281][T28963] page_fault+0x1e/0x30 [ 2461.825000][T28963] RIP: 0033:0x40af46 [ 2461.828878][T28963] Code: e8 7f 66 ff ff 0f 1f 80 00 00 00 00 80 3d d1 50 53 00 00 75 06 80 7b 20 00 74 2e 8b 05 c7 50 53 00 c6 43 21 00 8d 70 ff 85 f6 <89> 35 b8 50 53 00 78 55 48 8b 44 24 08 64 48 33 04 25 28 00 00 00 [ 2461.848562][T28963] RSP: 002b:00007ffc1614bf60 EFLAGS: 00010246 [ 2461.854803][T28963] RAX: 0000000000000001 RBX: 000000000073bf00 RCX: 0000001b2de20000 [ 2461.862765][T28963] RDX: 0000001b2ce20000 RSI: 0000000000000000 RDI: 00000000837d3f8e [ 2461.870718][T28963] RBP: 000000000073bf00 R08: ffffffff812886f1 R09: 00000000aaa7130b [ 2461.878679][T28963] R10: 00007ffc1614c050 R11: 0000000000000246 R12: 0000000000258f2a [ 2461.886630][T28963] R13: 0000000000258efd R14: 00000000000003e8 R15: 000000000073bf0c [ 2461.894592][T28963] ? fpu__copy+0x201/0x770 03:47:25 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(0x0, &(0x7f0000000140)='.//ile0\x00') syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x100, 0x0, 0x0, [], [], [], 0x2, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000800), 0x4) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) write(r1, &(0x7f0000000400)="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", 0x200) lsetxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file1\x00', &(0x7f00000003c0)='trusted.overlay.redirect\x00', &(0x7f0000000600)='./bus\x00', 0x6, 0x1) sendfile(r1, r2, 0x0, 0x10000) [ 2461.977747][T28963] memory: usage 307200kB, limit 307200kB, failcnt 6400 [ 2461.991641][T28963] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2462.034152][T28963] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2462.041477][ T26] audit: type=1800 audit(2000000845.928:1442): pid=28999 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17227 res=0 03:47:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x887aa35ef3fa213b, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x98) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 03:47:25 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x1) ioctl$KVM_SET_CPUID(r0, 0x551f, 0x0) 03:47:25 executing program 2: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x202, 0x0) recvfrom(r0, &(0x7f0000000440)=""/104, 0x68, 0x40000142, &(0x7f0000000680)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0x3, 0x2, 0x2, 0x1}}, 0x80) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000800)='/dev/rtc0\x00', 0x10000002, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) fcntl$lock(r1, 0x0, 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000000640)={r3, r4+30000000}) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$security_evm(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "c2024814a18aa24da324558dc0eef388e4463b08"}, 0x15, 0x1) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000700)={0x0, 0x2, 0x0, 0x100200}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x5) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000200)) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@loopback, @in6=@mcast1, 0x4e23, 0x2805, 0x4e22, 0x6, 0xa, 0x20, 0x0, 0x89, r5, r6}, {0xffffffffffffffff, 0x7fff, 0x123c, 0xffffffffffffffff, 0x7, 0xcb, 0xfff, 0x80000001}, {0x2, 0x101, 0x7b4a, 0x20}, 0x1, 0x6e6bb9, 0x2, 0x0, 0x1, 0x2}, {{@in=@remote, 0x4d4, 0xff}, 0x0, @in=@local, 0x3505, 0x3, 0x1, 0x0, 0x9, 0x4}}, 0xe8) setfsuid(r6) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$unix(r2, &(0x7f0000000380)="bd50171c5d87ab54088ccc755d26515fde87f05989a49d03df902166f50e1efd5872935d9401fd8c5626476c9234bc411de5e616635de040b8793e0a59c85715ace070d032e292c3e91662786aa0af0005edcdf82a6018d9e7852e7b7af9502526271033685a0d8019c9e8cd6c92914947f75c306296534d40f709c7c97bdc30e0cc197fe8be76672623206f34986fc7ad26f74fdce7108a65cd0b289c7fa3739556b80b1fb00dee6d3c89687c", 0xad, 0x4, 0x0, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000004c0)={0x4, 0x0, [{0x8000000e, 0x0, 0x5, 0x8, 0x2205, 0x100, 0x2}, {0x1, 0x400, 0x6, 0x5, 0x1, 0x2c5a, 0x8}, {0xc0000001, 0x3, 0x6, 0x10000, 0x81, 0x6, 0x7}, {0x80000019, 0x6e, 0x7, 0x800, 0x80, 0x6, 0xdc}]}) [ 2462.065794][T28963] Memory cgroup stats for /syz5: cache:0KB rss:247868KB rss_huge:223232KB shmem:56KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:247916KB inactive_file:4KB active_file:0KB unevictable:4KB [ 2462.107053][T28963] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20851,uid=0 [ 2462.140302][T28963] Memory cgroup out of memory: Killed process 20851 (syz-executor.5) total-vm:72580kB, anon-rss:2212kB, file-rss:35856kB, shmem-rss:0kB [ 2462.170988][ T26] audit: type=1804 audit(2000000845.928:1443): pid=28999 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=17227 res=1 [ 2462.245682][T28991] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 2462.269045][T28991] CPU: 0 PID: 28991 Comm: syz-executor.5 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2462.278090][T28991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2462.288148][T28991] Call Trace: [ 2462.291449][T28991] dump_stack+0x172/0x1f0 [ 2462.295794][T28991] dump_header+0x10f/0xb6c [ 2462.300222][T28991] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2462.306038][T28991] ? ___ratelimit+0x60/0x595 [ 2462.310639][T28991] ? do_raw_spin_unlock+0x57/0x270 [ 2462.315768][T28991] oom_kill_process.cold+0x10/0x15 [ 2462.320888][T28991] out_of_memory+0x79a/0x1280 [ 2462.325579][T28991] ? oom_killer_disable+0x280/0x280 [ 2462.330784][T28991] ? find_held_lock+0x35/0x130 [ 2462.335568][T28991] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2462.341119][T28991] ? memcg_event_wake+0x230/0x230 [ 2462.346161][T28991] ? do_raw_spin_unlock+0x57/0x270 [ 2462.351284][T28991] ? _raw_spin_unlock+0x2d/0x50 [ 2462.356147][T28991] try_charge+0xd4d/0x1790 [ 2462.360582][T28991] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2462.366134][T28991] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2462.371686][T28991] ? find_held_lock+0x35/0x130 [ 2462.376472][T28991] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2462.382037][T28991] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2462.387589][T28991] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2462.392800][T28991] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2462.398361][T28991] __memcg_kmem_charge+0x136/0x300 [ 2462.403485][T28991] __alloc_pages_nodemask+0x437/0x7e0 [ 2462.408865][T28991] ? find_held_lock+0x35/0x130 [ 2462.413643][T28991] ? __alloc_pages_slowpath+0x2900/0x2900 [ 2462.419371][T28991] ? kvm_sched_clock_read+0x9/0x20 [ 2462.424493][T28991] ? find_held_lock+0x35/0x130 [ 2462.429263][T28991] ? is_dynamic_key+0x1c0/0x1c0 [ 2462.434117][T28991] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2462.440367][T28991] alloc_pages_current+0x107/0x210 [ 2462.445492][T28991] pte_alloc_one+0x1b/0x1a0 [ 2462.450004][T28991] __handle_mm_fault+0x3491/0x3ec0 [ 2462.455127][T28991] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2462.460676][T28991] ? find_held_lock+0x35/0x130 [ 2462.465460][T28991] ? handle_mm_fault+0x322/0xb30 [ 2462.470418][T28991] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2462.476666][T28991] ? kasan_check_read+0x11/0x20 [ 2462.481542][T28991] handle_mm_fault+0x43f/0xb30 [ 2462.486322][T28991] __do_page_fault+0x5ef/0xda0 [ 2462.491107][T28991] do_page_fault+0x71/0x581 [ 2462.495618][T28991] ? page_fault+0x8/0x30 [ 2462.499872][T28991] page_fault+0x1e/0x30 [ 2462.504029][T28991] RIP: 0033:0x458079 [ 2462.507937][T28991] Code: Bad RIP value. [ 2462.512004][T28991] RSP: 002b:00007f9efbb7ec78 EFLAGS: 00010246 [ 2462.518070][T28991] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000458079 [ 2462.526043][T28991] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2462.534019][T28991] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 03:47:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000011180), 0x343, 0x10022, &(0x7f00000000c0)) [ 2462.541995][T28991] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9efbb7f6d4 [ 2462.559719][T28991] R13: 00000000004be379 R14: 00000000004ceac0 R15: 00000000ffffffff 03:47:26 executing program 4: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(0x0, &(0x7f0000000140)='.//ile0\x00') syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x100, 0x0, 0x0, [], [], [], 0x2, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000800), 0x4) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) write(r1, &(0x7f0000000400)="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", 0x200) lsetxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file1\x00', &(0x7f00000003c0)='trusted.overlay.redirect\x00', &(0x7f0000000600)='./bus\x00', 0x6, 0x1) sendfile(r1, r2, 0x0, 0x10000) 03:47:26 executing program 5: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x202, 0x0) recvfrom(r0, &(0x7f0000000440)=""/104, 0x68, 0x40000142, &(0x7f0000000680)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0x3, 0x2, 0x2, 0x1}}, 0x80) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000800)='/dev/rtc0\x00', 0x10000002, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) fcntl$lock(r1, 0x0, 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000000640)={r3, r4+30000000}) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$security_evm(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "c2024814a18aa24da324558dc0eef388e4463b08"}, 0x15, 0x1) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000700)={0x0, 0x2, 0x0, 0x100200}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x5) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000200)) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@loopback, @in6=@mcast1, 0x4e23, 0x2805, 0x4e22, 0x6, 0xa, 0x20, 0x0, 0x89, r5, r6}, {0xffffffffffffffff, 0x7fff, 0x123c, 0xffffffffffffffff, 0x7, 0xcb, 0xfff, 0x80000001}, {0x2, 0x101, 0x7b4a, 0x20}, 0x1, 0x6e6bb9, 0x2, 0x0, 0x1, 0x2}, {{@in=@remote, 0x4d4, 0xff}, 0x0, @in=@local, 0x3505, 0x3, 0x1, 0x0, 0x9, 0x4}}, 0xe8) setfsuid(r6) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$unix(r2, &(0x7f0000000380)="bd50171c5d87ab54088ccc755d26515fde87f05989a49d03df902166f50e1efd5872935d9401fd8c5626476c9234bc411de5e616635de040b8793e0a59c85715ace070d032e292c3e91662786aa0af0005edcdf82a6018d9e7852e7b7af9502526271033685a0d8019c9e8cd6c92914947f75c306296534d40f709c7c97bdc30e0cc197fe8be76672623206f34986fc7ad26f74fdce7108a65cd0b289c7fa3739556b80b1fb00dee6d3c89687c", 0xad, 0x4, 0x0, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000004c0)={0x4, 0x0, [{0x8000000e, 0x0, 0x5, 0x8, 0x2205, 0x100, 0x2}, {0x1, 0x400, 0x6, 0x5, 0x1, 0x2c5a, 0x8}, {0xc0000001, 0x3, 0x6, 0x10000, 0x81, 0x6, 0x7}, {0x80000019, 0x6e, 0x7, 0x800, 0x80, 0x6, 0xdc}]}) 03:47:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000011180), 0x343, 0x10022, &(0x7f00000000c0)) [ 2462.692079][T28991] memory: usage 304912kB, limit 307200kB, failcnt 6400 [ 2462.708271][T28991] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2462.719255][T17023] rpcbind: RPC call returned error 22 [ 2462.721972][T28991] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:47:26 executing program 2: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x202, 0x0) recvfrom(r0, &(0x7f0000000440)=""/104, 0x68, 0x40000142, &(0x7f0000000680)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0x3, 0x2, 0x2, 0x1}}, 0x80) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000800)='/dev/rtc0\x00', 0x10000002, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) fcntl$lock(r1, 0x0, 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000000640)={r3, r4+30000000}) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') setxattr$security_evm(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "c2024814a18aa24da324558dc0eef388e4463b08"}, 0x15, 0x1) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000700)={0x0, 0x2, 0x0, 0x100200}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x5) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000200)) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@loopback, @in6=@mcast1, 0x4e23, 0x2805, 0x4e22, 0x6, 0xa, 0x20, 0x0, 0x89, r5, r6}, {0xffffffffffffffff, 0x7fff, 0x123c, 0xffffffffffffffff, 0x7, 0xcb, 0xfff, 0x80000001}, {0x2, 0x101, 0x7b4a, 0x20}, 0x1, 0x6e6bb9, 0x2, 0x0, 0x1, 0x2}, {{@in=@remote, 0x4d4, 0xff}, 0x0, @in=@local, 0x3505, 0x3, 0x1, 0x0, 0x9, 0x4}}, 0xe8) setfsuid(r6) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$unix(r2, &(0x7f0000000380)="bd50171c5d87ab54088ccc755d26515fde87f05989a49d03df902166f50e1efd5872935d9401fd8c5626476c9234bc411de5e616635de040b8793e0a59c85715ace070d032e292c3e91662786aa0af0005edcdf82a6018d9e7852e7b7af9502526271033685a0d8019c9e8cd6c92914947f75c306296534d40f709c7c97bdc30e0cc197fe8be76672623206f34986fc7ad26f74fdce7108a65cd0b289c7fa3739556b80b1fb00dee6d3c89687c", 0xad, 0x4, 0x0, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000004c0)={0x4, 0x0, [{0x8000000e, 0x0, 0x5, 0x8, 0x2205, 0x100, 0x2}, {0x1, 0x400, 0x6, 0x5, 0x1, 0x2c5a, 0x8}, {0xc0000001, 0x3, 0x6, 0x10000, 0x81, 0x6, 0x7}, {0x80000019, 0x6e, 0x7, 0x800, 0x80, 0x6, 0xdc}]}) [ 2462.766948][T28991] Memory cgroup stats for /syz5: cache:0KB rss:245752KB rss_huge:221184KB shmem:56KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:245796KB inactive_file:4KB active_file:0KB unevictable:4KB [ 2462.771871][ T26] audit: type=1800 audit(2000000846.659:1444): pid=29015 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17305 res=0 03:47:26 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(0x0, &(0x7f0000000140)='.//ile0\x00') syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x100, 0x0, 0x0, [], [], [], 0x2, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000800), 0x4) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) write(r1, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) lsetxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file1\x00', &(0x7f00000003c0)='trusted.overlay.redirect\x00', &(0x7f0000000600)='./bus\x00', 0x6, 0x1) sendfile(r1, r2, 0x0, 0x10000) 03:47:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000011180), 0x343, 0x10022, &(0x7f00000000c0)) [ 2462.894339][T28991] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21004,uid=0 [ 2462.917896][T28991] Memory cgroup out of memory: Killed process 21004 (syz-executor.5) total-vm:72580kB, anon-rss:2212kB, file-rss:35856kB, shmem-rss:0kB [ 2462.954883][ T26] audit: type=1804 audit(2000000846.699:1445): pid=29015 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir369632446/syzkaller.0zRSPB/1214/file0" dev="sda1" ino=17305 res=1 03:47:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000011180), 0x343, 0x10022, &(0x7f00000000c0)) [ 2463.068555][T17023] rpcbind: RPC call returned error 22 03:47:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x887aa35ef3fa213b, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0x98) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 03:47:27 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1300, &(0x7f0000000080), 0xffffffffffffff1f) [ 2463.304102][ T1156] rpcbind: RPC call returned error 22 03:47:27 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0xffffffffffff4081, 0x8) 03:47:27 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x3, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0xffffffbf}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000003c0)) 03:47:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCGETA(r0, 0x5456, 0x0) 03:47:27 executing program 4: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(0x0, &(0x7f0000000140)='.//ile0\x00') syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x100, 0x0, 0x0, [], [], [], 0x2, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000800), 0x4) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) write(r1, &(0x7f0000000400)="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", 0x200) lsetxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file1\x00', &(0x7f00000003c0)='trusted.overlay.redirect\x00', &(0x7f0000000600)='./bus\x00', 0x6, 0x1) sendfile(r1, r2, 0x0, 0x10000) 03:47:27 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\xfb\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}, 0x45c) 03:47:27 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0049d13d339c3a83b57716ee817c892fe57dda6e3ac07858a088ca4db18e363c2dea8bdb6c532aaab9b6ba0630f11c15b164a12d3e48f3fd00"}, 0x60) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f0000000200)=""/177, 0x70c2c9) 03:47:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="240000002d0007031dfffd946f610500070000001d00000000000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:47:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000480)={'hsr0\x00', {0x2, 0x0, @empty}}) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, 0x0) truncate(&(0x7f0000000440)='./bus\x00', 0x2000200) sendmsg(0xffffffffffffffff, 0x0, 0x4000000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) fchdir(r1) socket(0x5, 0x6, 0x70) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) sendfile(r2, r2, 0x0, 0x808100000000) 03:47:27 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xc4, 0x4) r2 = syz_open_dev$dspn(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$int_in(r0, 0x800000c0045005, 0x0) getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@mcast2, 0x62, r3}) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000000c0)=r1) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000040)={0x8875, 0x0, 0x8000, 0x7}) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180)) fcntl$dupfd(r1, 0x3, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf7fffffffffffffd, 0x2012, r2, 0x0) unshare(0x40000000) [ 2463.995444][T29063] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2464.102609][T29065] IPVS: ftp: loaded support on port[0] = 21 03:47:28 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000200)={0x0, 0x0, 0x8, 0xfffffffffffffff9}) 03:47:28 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) kcmp(r1, r1, 0x7, 0xffffffffffffffff, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000014) open$dir(&(0x7f0000000200)='./file0\x00', 0x27e, 0x0) 03:47:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0xc}, 0xfffffccc) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0xff2b}]) 03:47:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="240000002d0007031dfffd946f610500070000001d00000000000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2464.700247][T29065] IPVS: ftp: loaded support on port[0] = 21 03:47:28 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xc4, 0x4) r2 = syz_open_dev$dspn(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$int_in(r0, 0x800000c0045005, 0x0) getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@mcast2, 0x62, r3}) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000000c0)=r1) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000040)={0x8875, 0x0, 0x8000, 0x7}) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180)) fcntl$dupfd(r1, 0x3, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf7fffffffffffffd, 0x2012, r2, 0x0) unshare(0x40000000) [ 2464.784301][T29076] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2464.799609][T29076] CPU: 1 PID: 29076 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2464.808662][T29076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2464.818725][T29076] Call Trace: [ 2464.822037][T29076] dump_stack+0x172/0x1f0 [ 2464.826389][T29076] dump_header+0x10f/0xb6c [ 2464.830824][T29076] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2464.836643][T29076] ? ___ratelimit+0x60/0x595 [ 2464.841240][T29076] ? do_raw_spin_unlock+0x57/0x270 [ 2464.846367][T29076] oom_kill_process.cold+0x10/0x15 [ 2464.851498][T29076] out_of_memory+0x79a/0x1280 [ 2464.856281][T29076] ? lock_downgrade+0x880/0x880 [ 2464.861145][T29076] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2464.865529][T29088] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2464.867389][T29076] ? oom_killer_disable+0x280/0x280 [ 2464.867405][T29076] ? find_held_lock+0x35/0x130 [ 2464.867430][T29076] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2464.867446][T29076] ? memcg_event_wake+0x230/0x230 [ 2464.867471][T29076] ? do_raw_spin_unlock+0x57/0x270 [ 2464.867498][T29076] ? _raw_spin_unlock+0x2d/0x50 [ 2464.867528][T29076] try_charge+0x118d/0x1790 [ 2464.886109][ C0] net_ratelimit: 31 callbacks suppressed [ 2464.886117][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2464.886640][T29076] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2464.892367][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2464.897247][T29076] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2464.897264][T29076] ? find_held_lock+0x35/0x130 [ 2464.897279][T29076] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2464.897309][T29076] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2464.902558][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2464.907223][T29076] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2464.907243][T29076] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2464.907263][T29076] __memcg_kmem_charge+0x136/0x300 [ 2464.907286][T29076] __alloc_pages_nodemask+0x437/0x7e0 [ 2464.911860][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2464.917379][T29076] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2464.917399][T29076] ? __alloc_pages_slowpath+0x2900/0x2900 [ 2464.917418][T29076] ? copy_process.part.0+0x1d35/0x79d0 [ 2464.966623][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2464.972086][T29076] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2464.972106][T29076] ? trace_hardirqs_on+0x67/0x230 [ 2464.972120][T29076] ? kasan_check_read+0x11/0x20 [ 2464.972143][T29076] copy_process.part.0+0x3e0/0x79d0 [ 2464.977398][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2464.982587][T29076] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2464.982606][T29076] ? debug_smp_processor_id+0x3c/0x280 [ 2464.982624][T29076] ? perf_trace_lock+0xeb/0x510 [ 2464.982642][T29076] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2464.988840][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2464.994562][T29076] ? debug_smp_processor_id+0x3c/0x280 [ 2464.994582][T29076] ? __lockdep_free_key_range+0x120/0x120 [ 2464.994602][T29076] ? __might_fault+0x12b/0x1e0 03:47:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="240000002d0007031dfffd946f610500070000001d00000000000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:47:29 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xc4, 0x4) r2 = syz_open_dev$dspn(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$int_in(r0, 0x800000c0045005, 0x0) getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@mcast2, 0x62, r3}) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000000c0)=r1) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000040)={0x8875, 0x0, 0x8000, 0x7}) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180)) fcntl$dupfd(r1, 0x3, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf7fffffffffffffd, 0x2012, r2, 0x0) unshare(0x40000000) [ 2464.994628][T29076] ? __cleanup_sighand+0x60/0x60 [ 2465.000552][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2465.005763][T29076] ? lock_downgrade+0x880/0x880 [ 2465.005796][T29076] _do_fork+0x257/0xfd0 [ 2465.005818][T29076] ? fork_idle+0x1d0/0x1d0 [ 2465.012418][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2465.016785][T29076] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2465.016801][T29076] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2465.016817][T29076] ? do_syscall_64+0x26/0x610 [ 2465.016837][T29076] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2465.022073][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2465.026671][T29076] ? do_syscall_64+0x26/0x610 [ 2465.026693][T29076] __x64_sys_clone+0xbf/0x150 [ 2465.026714][T29076] do_syscall_64+0x103/0x610 [ 2465.026735][T29076] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2465.026748][T29076] RIP: 0033:0x458079 [ 2465.026764][T29076] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2465.026778][T29076] RSP: 002b:00007fa9512e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2465.050783][T29090] IPVS: ftp: loaded support on port[0] = 21 [ 2465.054145][T29076] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458079 [ 2465.054155][T29076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020040200 [ 2465.054164][T29076] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2465.054174][T29076] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa9512e86d4 [ 2465.054183][T29076] R13: 00000000004be379 R14: 00000000004ceac0 R15: 00000000ffffffff [ 2465.114001][T29076] memory: usage 307072kB, limit 307200kB, failcnt 8440 [ 2465.270877][T29076] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2465.278603][T29076] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2465.298882][T29093] IPVS: ftp: loaded support on port[0] = 21 [ 2465.639813][T29076] Memory cgroup stats for /syz1: cache:11044KB rss:241684KB rss_huge:219136KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:241736KB inactive_file:4KB active_file:0KB unevictable:11008KB 03:47:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000480)={'hsr0\x00', {0x2, 0x0, @empty}}) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, 0x0) truncate(&(0x7f0000000440)='./bus\x00', 0x2000200) sendmsg(0xffffffffffffffff, 0x0, 0x4000000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) fchdir(r1) socket(0x5, 0x6, 0x70) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) sendfile(r2, r2, 0x0, 0x808100000000) [ 2465.736899][T29076] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18369,uid=0 03:47:29 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xc4, 0x4) r2 = syz_open_dev$dspn(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$int_in(r0, 0x800000c0045005, 0x0) getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@mcast2, 0x62, r3}) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000000c0)=r1) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000040)={0x8875, 0x0, 0x8000, 0x7}) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180)) fcntl$dupfd(r1, 0x3, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf7fffffffffffffd, 0x2012, r2, 0x0) unshare(0x40000000) 03:47:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)=ANY=[]) 03:47:29 executing program 1: ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x404}) r0 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags=0x2}) [ 2465.786905][T29076] Memory cgroup out of memory: Killed process 18369 (syz-executor.1) total-vm:72448kB, anon-rss:4248kB, file-rss:34816kB, shmem-rss:0kB [ 2465.808847][ T1044] oom_reaper: reaped process 18369 (syz-executor.1), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB 03:47:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="240000002d0007031dfffd946f610500070000001d00000000000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:47:29 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xc4, 0x4) r2 = syz_open_dev$dspn(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$int_in(r0, 0x800000c0045005, 0x0) getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@mcast2, 0x62, r3}) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000000c0)=r1) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000040)={0x8875, 0x0, 0x8000, 0x7}) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180)) fcntl$dupfd(r1, 0x3, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf7fffffffffffffd, 0x2012, r2, 0x0) unshare(0x40000000) [ 2466.012442][T29110] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2466.071476][T29106] IPVS: ftp: loaded support on port[0] = 21 03:47:30 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x6f1a, 0xfb, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0xd}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r1, r0, 0xd}, 0x10) [ 2466.128905][T29109] IPVS: ftp: loaded support on port[0] = 21 03:47:30 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x101000, 0x0) write$vhci(r1, &(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, "967f555817dfe31c5354757f06fae601ec95ae10967df4749409f06969669f13bf7c353593e33e77a403cab04b6c6adf5bb5e8391ce77acab280da4294099073688f3661"}, 0x45) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback, 0x800000000000000}, 0x1c) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000400), 0xc) writev(r0, &(0x7f0000000000), 0x0) r3 = getpid() rt_tgsigqueueinfo(0x0, r3, 0x16, 0x0) ptrace(0x10, 0x0) wait4(r3, 0x0, 0x2, 0x0) wait4(0x0, 0x0, 0x40000003, 0x0) 03:47:30 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x82200, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = syz_open_dev$cec(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0x0) execve(0x0, &(0x7f0000000340), &(0x7f0000000280)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001a40)='attr/exec\x00') ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000000), 0x10000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0386106, 0x0) 03:47:30 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x3, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 03:47:30 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xc4, 0x4) r2 = syz_open_dev$dspn(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$int_in(r0, 0x800000c0045005, 0x0) getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@mcast2, 0x62, r3}) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000000c0)=r1) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000040)={0x8875, 0x0, 0x8000, 0x7}) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180)) fcntl$dupfd(r1, 0x3, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf7fffffffffffffd, 0x2012, r2, 0x0) unshare(0x40000000) 03:47:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 03:47:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000480)={'hsr0\x00', {0x2, 0x0, @empty}}) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, 0x0) truncate(&(0x7f0000000440)='./bus\x00', 0x2000200) sendmsg(0xffffffffffffffff, 0x0, 0x4000000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) fchdir(r1) socket(0x5, 0x6, 0x70) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) sendfile(r2, r2, 0x0, 0x808100000000) 03:47:30 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x82200, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = syz_open_dev$cec(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0x0) execve(0x0, &(0x7f0000000340), &(0x7f0000000280)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001a40)='attr/exec\x00') ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000000), 0x10000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0386106, 0x0) 03:47:30 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xc4, 0x4) r2 = syz_open_dev$dspn(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$int_in(r0, 0x800000c0045005, 0x0) getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@mcast2, 0x62, r3}) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000000c0)=r1) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000040)={0x8875, 0x0, 0x8000, 0x7}) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180)) fcntl$dupfd(r1, 0x3, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf7fffffffffffffd, 0x2012, r2, 0x0) unshare(0x40000000) 03:47:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) [ 2467.001400][T29134] IPVS: ftp: loaded support on port[0] = 21 03:47:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) [ 2467.334205][T29146] IPVS: ftp: loaded support on port[0] = 21 03:47:31 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x82200, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = syz_open_dev$cec(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0x0) execve(0x0, &(0x7f0000000340), &(0x7f0000000280)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001a40)='attr/exec\x00') ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000000), 0x10000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0386106, 0x0) 03:47:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 03:47:31 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x82200, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = syz_open_dev$cec(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0x0) execve(0x0, &(0x7f0000000340), &(0x7f0000000280)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001a40)='attr/exec\x00') ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000000), 0x10000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0386106, 0x0) 03:47:31 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x82200, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = syz_open_dev$cec(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0x0) execve(0x0, &(0x7f0000000340), &(0x7f0000000280)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001a40)='attr/exec\x00') ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000000), 0x10000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0386106, 0x0) 03:47:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001400008912, &(0x7f0000000180)="0adc1f123c123f3188b070") syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x80fe, 0x7, 0x0, 0x300], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x3b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000400)) accept$ax25(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 03:47:31 executing program 4: lstat(0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000140)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 03:47:31 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x82200, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = syz_open_dev$cec(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0x0) execve(0x0, &(0x7f0000000340), &(0x7f0000000280)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001a40)='attr/exec\x00') ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000000), 0x10000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0386106, 0x0) 03:47:31 executing program 5: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) socket(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r1, 0x5) flock(r2, 0x0) r3 = gettid() syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(r5, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) tkill(r3, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) acct(&(0x7f0000000380)='./file0\x00') setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, 0x0, 0x0) 03:47:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000480)={'hsr0\x00', {0x2, 0x0, @empty}}) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, 0x0) truncate(&(0x7f0000000440)='./bus\x00', 0x2000200) sendmsg(0xffffffffffffffff, 0x0, 0x4000000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) fchdir(r1) socket(0x5, 0x6, 0x70) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) sendfile(r2, r2, 0x0, 0x808100000000) 03:47:31 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x82200, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = syz_open_dev$cec(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0x0) execve(0x0, &(0x7f0000000340), &(0x7f0000000280)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001a40)='attr/exec\x00') ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000000), 0x10000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0386106, 0x0) 03:47:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00002000d5010400000000fffffffbffffeffb0000000000000000000000000000400000000000000000"], 0x2a) [ 2468.260921][T29168] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 03:47:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 2468.340521][T29168] CPU: 0 PID: 29168 Comm: syz-executor.5 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2468.349582][T29168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2468.359647][T29168] Call Trace: [ 2468.362956][T29168] dump_stack+0x172/0x1f0 [ 2468.367300][T29168] dump_header+0x10f/0xb6c [ 2468.371734][T29168] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2468.377552][T29168] ? ___ratelimit+0x60/0x595 [ 2468.382154][T29168] ? do_raw_spin_unlock+0x57/0x270 [ 2468.387289][T29168] oom_kill_process.cold+0x10/0x15 [ 2468.392408][T29168] out_of_memory+0x79a/0x1280 [ 2468.397099][T29168] ? lock_downgrade+0x880/0x880 [ 2468.401955][T29168] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2468.408216][T29168] ? oom_killer_disable+0x280/0x280 [ 2468.413418][T29168] ? find_held_lock+0x35/0x130 [ 2468.418223][T29168] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2468.423782][T29168] ? memcg_event_wake+0x230/0x230 [ 2468.428851][T29168] ? do_raw_spin_unlock+0x57/0x270 [ 2468.433975][T29168] ? _raw_spin_unlock+0x2d/0x50 [ 2468.438880][T29168] try_charge+0x118d/0x1790 [ 2468.443403][T29168] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2468.448957][T29168] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2468.454511][T29168] ? find_held_lock+0x35/0x130 [ 2468.459293][T29168] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2468.464861][T29168] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2468.470413][T29168] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2468.475621][T29168] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2468.481175][T29168] __memcg_kmem_charge+0x136/0x300 [ 2468.486310][T29168] __alloc_pages_nodemask+0x437/0x7e0 [ 2468.491692][T29168] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2468.498037][T29168] ? __alloc_pages_slowpath+0x2900/0x2900 [ 2468.503769][T29168] ? copy_process.part.0+0x1d35/0x79d0 [ 2468.509240][T29168] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2468.514532][T29168] ? trace_hardirqs_on+0x67/0x230 [ 2468.519564][T29168] ? kasan_check_read+0x11/0x20 [ 2468.524436][T29168] copy_process.part.0+0x3e0/0x79d0 [ 2468.529732][T29168] ? __lockdep_free_key_range+0x120/0x120 [ 2468.535461][T29168] ? kvm_sched_clock_read+0x9/0x20 [ 2468.540583][T29168] ? psi_memstall_leave+0x12e/0x180 [ 2468.548572][T29168] ? find_held_lock+0x35/0x130 [ 2468.556221][T29168] ? psi_memstall_leave+0x12e/0x180 [ 2468.561448][T29168] ? __cleanup_sighand+0x60/0x60 [ 2468.566396][T29168] ? perf_trace_lock+0xeb/0x510 [ 2468.571253][T29168] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2468.577503][T29168] ? debug_smp_processor_id+0x3c/0x280 [ 2468.582963][T29168] ? __lockdep_free_key_range+0x120/0x120 [ 2468.588702][T29168] _do_fork+0x257/0xfd0 [ 2468.592875][T29168] ? fork_idle+0x1d0/0x1d0 [ 2468.597307][T29168] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 2468.603379][T29168] ? lock_downgrade+0x880/0x880 [ 2468.608321][T29168] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2468.614569][T29168] ? blkcg_exit_queue+0x30/0x30 [ 2468.619437][T29168] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2468.624906][T29168] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2468.630461][T29168] ? do_syscall_64+0x26/0x610 [ 2468.635143][T29168] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2468.641228][T29168] ? do_syscall_64+0x26/0x610 [ 2468.645919][T29168] __x64_sys_clone+0xbf/0x150 [ 2468.650605][T29168] do_syscall_64+0x103/0x610 [ 2468.655257][T29168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2468.661153][T29168] RIP: 0033:0x45aa49 [ 2468.665055][T29168] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 03:47:32 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) [ 2468.684654][T29168] RSP: 002b:00007ffc1614be58 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2468.693050][T29168] RAX: ffffffffffffffda RBX: 00007f9efbb3d700 RCX: 000000000045aa49 [ 2468.701005][T29168] RDX: 00007f9efbb3d9d0 RSI: 00007f9efbb3cdb0 RDI: 00000000003d0f00 [ 2468.708970][T29168] RBP: 00007ffc1614c060 R08: 00007f9efbb3d700 R09: 00007f9efbb3d700 [ 2468.716923][T29168] R10: 00007f9efbb3d9d0 R11: 0000000000000202 R12: 0000000000000000 [ 2468.724877][T29168] R13: 00007ffc1614bf0f R14: 00007f9efbb3d9c0 R15: 000000000073c04c 03:47:32 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x6) 03:47:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x11, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x2}}]}, 0x40}}, 0x0) 03:47:32 executing program 4: lstat(0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000140)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x500, 0x8080fffffffe) [ 2468.966431][T29168] memory: usage 307184kB, limit 307200kB, failcnt 6423 [ 2468.974218][T29168] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2468.982508][T29168] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2468.996242][T29168] Memory cgroup stats for /syz5: cache:0KB rss:247904KB rss_huge:223232KB shmem:56KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:247936KB inactive_file:0KB active_file:0KB unevictable:4KB 03:47:32 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x8}, 0x2c) syz_open_procfs(0x0, &(0x7f0000000040)='net/packm%\xf6') bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000040)}, 0x10) 03:47:32 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002000)=[{{0x0, 0xffffffffffffffb0, &(0x7f0000001b40), 0x0, &(0x7f0000002f00)=""/4096, 0x1000}}], 0xaf, 0x12022, &(0x7f00000020c0)={0x0, 0x1c9c380}) 03:47:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x20000000805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r1, &(0x7f0000000000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) close(r1) [ 2469.064095][T29168] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=3634,uid=0 [ 2469.154037][T29168] Memory cgroup out of memory: Killed process 3634 (syz-executor.5) total-vm:72580kB, anon-rss:2224kB, file-rss:35864kB, shmem-rss:0kB 03:47:33 executing program 5: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) socket(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r1, 0x5) flock(r2, 0x0) r3 = gettid() syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(r5, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) tkill(r3, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) acct(&(0x7f0000000380)='./file0\x00') setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, 0x0, 0x0) 03:47:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4, 0x4}}, 0x26) 03:47:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 03:47:33 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x605, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 03:47:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x20000000805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r1, &(0x7f0000000000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) close(r1) 03:47:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4, 0x4}}, 0x26) 03:47:33 executing program 2: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) socket(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r1, 0x5) flock(r2, 0x0) r3 = gettid() syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(r5, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) tkill(r3, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) acct(&(0x7f0000000380)='./file0\x00') setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, 0x0, 0x0) 03:47:33 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x605, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 03:47:33 executing program 4: lstat(0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000140)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 03:47:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4, 0x4}}, 0x26) 03:47:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x20000000805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r1, &(0x7f0000000000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) close(r1) 03:47:33 executing program 5: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) socket(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r1, 0x5) flock(r2, 0x0) r3 = gettid() syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(r5, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) tkill(r3, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) acct(&(0x7f0000000380)='./file0\x00') setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, 0x0, 0x0) 03:47:33 executing program 2: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) socket(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r1, 0x5) flock(r2, 0x0) r3 = gettid() syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(r5, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) tkill(r3, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) acct(&(0x7f0000000380)='./file0\x00') setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, 0x0, 0x0) 03:47:33 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x605, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 03:47:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4, 0x4}}, 0x26) 03:47:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x20000000805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r1, &(0x7f0000000000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) close(r1) 03:47:33 executing program 2: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) socket(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r1, 0x5) flock(r2, 0x0) r3 = gettid() syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(r5, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) tkill(r3, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) acct(&(0x7f0000000380)='./file0\x00') setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, 0x0, 0x0) 03:47:34 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x605, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 03:47:34 executing program 5: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) socket(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r1, 0x5) flock(r2, 0x0) r3 = gettid() syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(r5, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) tkill(r3, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) acct(&(0x7f0000000380)='./file0\x00') setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, 0x0, 0x0) 03:47:34 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) socket(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r1, 0x5) flock(r2, 0x0) r3 = gettid() syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(r5, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) tkill(r3, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) acct(&(0x7f0000000380)='./file0\x00') setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, 0x0, 0x0) 03:47:34 executing program 4: lstat(0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000140)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 03:47:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x20000000805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r1, &(0x7f0000000000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) close(r1) 03:47:34 executing program 0: open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") setxattr$security_capability(&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)='security.capability\x00', &(0x7f0000000200)=@v2={0x2000000, [{0xe24}]}, 0x14, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000003c0)='\x00'], &(0x7f0000000ac0)) 03:47:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a"], 0x1) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r0, 0x0) mmap(&(0x7f0000a0c000/0x2000)=nil, 0x1180, 0x1000006, 0x2012, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 03:47:34 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) socket(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r1, 0x5) flock(r2, 0x0) r3 = gettid() syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(r5, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) tkill(r3, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) acct(&(0x7f0000000380)='./file0\x00') setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, 0x0, 0x0) 03:47:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) getpid() bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000020000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x7000000, 0x4c00, 0x5400, 0x0, 0xf4010000}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 03:47:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet(0x10, 0x2, 0xc) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010407051dfffd946fa2830020201e0009000100041d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 03:47:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x20000000805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r1, &(0x7f0000000000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) close(r1) 03:47:34 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) socket(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r1, 0x5) flock(r2, 0x0) r3 = gettid() syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(r5, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) tkill(r3, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) acct(&(0x7f0000000380)='./file0\x00') setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, 0x0, 0x0) [ 2471.100027][T29288] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2471.123401][ C0] net_ratelimit: 26 callbacks suppressed [ 2471.123494][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2471.135591][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2471.142305][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2471.148455][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:35 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0xfffffffffffffe01}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000001, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) 03:47:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a"], 0x1) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r0, 0x0) mmap(&(0x7f0000a0c000/0x2000)=nil, 0x1180, 0x1000006, 0x2012, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 03:47:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x20000000805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r1, &(0x7f0000000000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) close(r1) [ 2471.202860][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2471.208726][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2471.214608][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2471.220406][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2471.226288][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2471.232069][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a"], 0x1) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r0, 0x0) mmap(&(0x7f0000a0c000/0x2000)=nil, 0x1180, 0x1000006, 0x2012, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 03:47:35 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r0) 03:47:35 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0xfffffffffffffe01}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000001, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) 03:47:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") unshare(0x400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f00000002c0), 0x4) 03:47:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) getpid() bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000020000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x7000000, 0x4c00, 0x5400, 0x0, 0xf4010000}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 03:47:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) getpid() bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000020000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x7000000, 0x4c00, 0x5400, 0x0, 0xf4010000}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 03:47:35 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0xfffffffffffffe01}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000001, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) 03:47:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a"], 0x1) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r0, 0x0) mmap(&(0x7f0000a0c000/0x2000)=nil, 0x1180, 0x1000006, 0x2012, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 03:47:35 executing program 0: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) 03:47:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200107fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRES32=0x0], 0x4) sendto$inet(r0, &(0x7f0000000f40)="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", 0x411, 0x0, 0x0, 0x0) 03:47:36 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0xfffffffffffffe01}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000001, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) 03:47:36 executing program 0: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) 03:47:36 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) clock_gettime(0x0, &(0x7f0000003140)) recvmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x400027f, 0x0, &(0x7f0000003180)) write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf, 0x1f, 0x1, 0x7}, 0xf) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000840), 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={0x0, @dev, @multicast2}, &(0x7f00000007c0)=0xc) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={0x0, @broadcast}, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) syslog(0x0, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000000)) setfsuid(0x0) sendto$inet(r1, &(0x7f0000000240)="1b", 0x1, 0x8000, 0x0, 0x0) close(r1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x4, @mcast2, 0xfff}}, 0x100000001, 0x3, 0x800, 0x4}, &(0x7f0000000180)=0x98) r2 = getpid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000001c0)=r2) 03:47:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000400)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)={'nat\x00'}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f0000000780)='/dev/loop#\x00', 0x1, 0x105080) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) add_key(&(0x7f0000000440)='pkcs7_test\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, &(0x7f0000000580)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) poll(&(0x7f0000000000), 0x1, 0x2) geteuid() r3 = memfd_create(&(0x7f00000000c0)='/dev/loop#\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000640)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) 03:47:36 executing program 0: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) 03:47:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) getpid() bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000020000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x7000000, 0x4c00, 0x5400, 0x0, 0xf4010000}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 03:47:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000400)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)={'nat\x00'}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f0000000780)='/dev/loop#\x00', 0x1, 0x105080) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) add_key(&(0x7f0000000440)='pkcs7_test\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, &(0x7f0000000580)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) poll(&(0x7f0000000000), 0x1, 0x2) geteuid() r3 = memfd_create(&(0x7f00000000c0)='/dev/loop#\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000640)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) 03:47:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) getpid() bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000020000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x7000000, 0x4c00, 0x5400, 0x0, 0xf4010000}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 03:47:36 executing program 0: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) 03:47:36 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xfef3, 0x0, 0x0, 0xffffff77) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0x1, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000006c0)=0xe8) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)) getpgid(0x0) gettid() r4 = msgget(0x3, 0x80) msgctl$MSG_STAT(r4, 0xb, &(0x7f00000004c0)=""/175) shmctl$IPC_SET(r2, 0x1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x100000000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000040)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r3}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x400, 0x2}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2000, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x648f, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x0, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) r6 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, r6, &(0x7f0000000440), 0x0, r6) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, {0x3, 0x0, 0x4, 0x9, 0x2, 0x4}}, 0x8) io_setup(0x8000000000003f, &(0x7f00000001c0)) syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0)='IPVS\x00') memfd_create(&(0x7f0000000380)='IPVS\x00', 0x2) socket$inet(0x2, 0x400000005, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000340)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="04002dbd7000ffdbdf250004000000080001004e21b684973f5a0baf37bb96a6812efa10275fd82388e03af8d70554aa85189ba57d154c4e75efca284e2ef218742723c4975df1a1c3b2bfb17a9433876e668c865c19438c0add1cee9b687b"], 0x1}, 0x1, 0x0, 0x0, 0x4c080}, 0x40004) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="20f9af65ff4c86328408c63fe19c61bf", 0x10) 03:47:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000400)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)={'nat\x00'}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f0000000780)='/dev/loop#\x00', 0x1, 0x105080) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) add_key(&(0x7f0000000440)='pkcs7_test\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, &(0x7f0000000580)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) poll(&(0x7f0000000000), 0x1, 0x2) geteuid() r3 = memfd_create(&(0x7f00000000c0)='/dev/loop#\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000640)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) 03:47:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=@setlink={0x30, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IF_NETNSID={0x8}, @IFLA_NET_NS_PID={0x8}]}, 0x30}}, 0x0) 03:47:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000400)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)={'nat\x00'}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f0000000780)='/dev/loop#\x00', 0x1, 0x105080) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) add_key(&(0x7f0000000440)='pkcs7_test\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, &(0x7f0000000580)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) poll(&(0x7f0000000000), 0x1, 0x2) geteuid() r3 = memfd_create(&(0x7f00000000c0)='/dev/loop#\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000640)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) 03:47:37 executing program 2: getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r0 = syz_open_dev$media(0x0, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r4 = dup2(r3, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000001100)=@assoc_value={0x0, 0x1}, &(0x7f0000001140)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f00000011c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000005c0)=0xe8) accept$packet(r0, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000880)=0x14) accept$packet(r2, &(0x7f0000001440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001480)=0x14) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000b000/0x3000)=nil) r5 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x80) recvfrom(r5, &(0x7f0000000100)=""/4096, 0x1000, 0x12122, 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, 0x0) 03:47:37 executing program 3: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r2, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) dup2(r3, r0) 03:47:37 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xfef3, 0x0, 0x0, 0xffffff77) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0x1, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000006c0)=0xe8) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)) getpgid(0x0) gettid() r4 = msgget(0x3, 0x80) msgctl$MSG_STAT(r4, 0xb, &(0x7f00000004c0)=""/175) shmctl$IPC_SET(r2, 0x1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x100000000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000040)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r3}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x400, 0x2}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2000, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x648f, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x0, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) r6 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, r6, &(0x7f0000000440), 0x0, r6) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, {0x3, 0x0, 0x4, 0x9, 0x2, 0x4}}, 0x8) io_setup(0x8000000000003f, &(0x7f00000001c0)) syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0)='IPVS\x00') memfd_create(&(0x7f0000000380)='IPVS\x00', 0x2) socket$inet(0x2, 0x400000005, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000340)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="04002dbd7000ffdbdf250004000000080001004e21b684973f5a0baf37bb96a6812efa10275fd82388e03af8d70554aa85189ba57d154c4e75efca284e2ef218742723c4975df1a1c3b2bfb17a9433876e668c865c19438c0add1cee9b687b"], 0x1}, 0x1, 0x0, 0x0, 0x4c080}, 0x40004) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="20f9af65ff4c86328408c63fe19c61bf", 0x10) 03:47:37 executing program 1: r0 = semget$private(0x0, 0x400000207, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/4096) 03:47:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) getpid() bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000020000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x7000000, 0x4c00, 0x5400, 0x0, 0xf4010000}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 03:47:37 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000), 0x4) 03:47:37 executing program 2: getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r0 = syz_open_dev$media(0x0, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r4 = dup2(r3, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000001100)=@assoc_value={0x0, 0x1}, &(0x7f0000001140)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f00000011c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000005c0)=0xe8) accept$packet(r0, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000880)=0x14) accept$packet(r2, &(0x7f0000001440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001480)=0x14) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000b000/0x3000)=nil) r5 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x80) recvfrom(r5, &(0x7f0000000100)=""/4096, 0x1000, 0x12122, 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, 0x0) 03:47:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) getpid() bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000020000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x7000000, 0x4c00, 0x5400, 0x0, 0xf4010000}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 03:47:37 executing program 1: r0 = semget$private(0x0, 0x400000207, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/4096) 03:47:37 executing program 3: getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r0 = syz_open_dev$media(0x0, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r4 = dup2(r3, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000001100)=@assoc_value={0x0, 0x1}, &(0x7f0000001140)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f00000011c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000005c0)=0xe8) accept$packet(r0, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000880)=0x14) accept$packet(r2, &(0x7f0000001440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001480)=0x14) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000b000/0x3000)=nil) r5 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x80) recvfrom(r5, &(0x7f0000000100)=""/4096, 0x1000, 0x12122, 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, 0x0) 03:47:37 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xfef3, 0x0, 0x0, 0xffffff77) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0x1, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000006c0)=0xe8) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)) getpgid(0x0) gettid() r4 = msgget(0x3, 0x80) msgctl$MSG_STAT(r4, 0xb, &(0x7f00000004c0)=""/175) shmctl$IPC_SET(r2, 0x1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x100000000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000040)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r3}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x400, 0x2}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2000, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x648f, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x0, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) r6 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, r6, &(0x7f0000000440), 0x0, r6) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, {0x3, 0x0, 0x4, 0x9, 0x2, 0x4}}, 0x8) io_setup(0x8000000000003f, &(0x7f00000001c0)) syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0)='IPVS\x00') memfd_create(&(0x7f0000000380)='IPVS\x00', 0x2) socket$inet(0x2, 0x400000005, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000340)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="04002dbd7000ffdbdf250004000000080001004e21b684973f5a0baf37bb96a6812efa10275fd82388e03af8d70554aa85189ba57d154c4e75efca284e2ef218742723c4975df1a1c3b2bfb17a9433876e668c865c19438c0add1cee9b687b"], 0x1}, 0x1, 0x0, 0x0, 0x4c080}, 0x40004) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="20f9af65ff4c86328408c63fe19c61bf", 0x10) 03:47:38 executing program 1: r0 = semget$private(0x0, 0x400000207, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/4096) 03:47:38 executing program 2: getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r0 = syz_open_dev$media(0x0, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r4 = dup2(r3, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000001100)=@assoc_value={0x0, 0x1}, &(0x7f0000001140)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f00000011c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000005c0)=0xe8) accept$packet(r0, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000880)=0x14) accept$packet(r2, &(0x7f0000001440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001480)=0x14) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000b000/0x3000)=nil) r5 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x80) recvfrom(r5, &(0x7f0000000100)=""/4096, 0x1000, 0x12122, 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, 0x0) 03:47:38 executing program 1: r0 = semget$private(0x0, 0x400000207, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/4096) 03:47:38 executing program 3: getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r0 = syz_open_dev$media(0x0, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r4 = dup2(r3, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000001100)=@assoc_value={0x0, 0x1}, &(0x7f0000001140)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f00000011c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000005c0)=0xe8) accept$packet(r0, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000880)=0x14) accept$packet(r2, &(0x7f0000001440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001480)=0x14) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000b000/0x3000)=nil) r5 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x80) recvfrom(r5, &(0x7f0000000100)=""/4096, 0x1000, 0x12122, 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, 0x0) 03:47:38 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xfef3, 0x0, 0x0, 0xffffff77) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0x1, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000006c0)=0xe8) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)) getpgid(0x0) gettid() r4 = msgget(0x3, 0x80) msgctl$MSG_STAT(r4, 0xb, &(0x7f00000004c0)=""/175) shmctl$IPC_SET(r2, 0x1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x100000000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000040)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r3}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x400, 0x2}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2000, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x648f, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x0, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) r6 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, r6, &(0x7f0000000440), 0x0, r6) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, {0x3, 0x0, 0x4, 0x9, 0x2, 0x4}}, 0x8) io_setup(0x8000000000003f, &(0x7f00000001c0)) syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0)='IPVS\x00') memfd_create(&(0x7f0000000380)='IPVS\x00', 0x2) socket$inet(0x2, 0x400000005, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000340)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="04002dbd7000ffdbdf250004000000080001004e21b684973f5a0baf37bb96a6812efa10275fd82388e03af8d70554aa85189ba57d154c4e75efca284e2ef218742723c4975df1a1c3b2bfb17a9433876e668c865c19438c0add1cee9b687b"], 0x1}, 0x1, 0x0, 0x0, 0x4c080}, 0x40004) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="20f9af65ff4c86328408c63fe19c61bf", 0x10) 03:47:38 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x3}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = eventfd(0x7ff) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000001c0)={0x3, 0x7, "75c2f774f8b527"}) syz_open_dev$dri(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) connect$caif(r1, &(0x7f0000000200), 0x18) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000280)=""/154) fallocate(r2, 0x5, 0x45, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) chmod(&(0x7f0000000180)='./file0\x00', 0x6) request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='nodev^\xd5\x00', 0xfffffffffffffffe) preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000400)=""/243, 0xf3}], 0x1, 0x0) close(r5) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x0, r5}) socket$rds(0x15, 0x5, 0x0) 03:47:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f0000000000)='wlan0\x00\xd3\xeb\'\xe4\xd5Ts\b\x8c\xba \x1cs\n\xcc]\xfb\xe9i]\xb9\xfc\xae\xd03\x00\x00\x00\x00\x00\x02\x00\b\xb4\x8f\x03\x00\x00\xf6L\x00\x00\xd5\x98\xba\xc4n\xd4\xf3(eq]\x812\xc3\x8e\x88\x00\x00\x00\x00\x00\xff\xff\xe8\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') 03:47:38 executing program 2: getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r0 = syz_open_dev$media(0x0, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r4 = dup2(r3, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000001100)=@assoc_value={0x0, 0x1}, &(0x7f0000001140)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f00000011c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000005c0)=0xe8) accept$packet(r0, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000880)=0x14) accept$packet(r2, &(0x7f0000001440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001480)=0x14) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000b000/0x3000)=nil) r5 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x80) recvfrom(r5, &(0x7f0000000100)=""/4096, 0x1000, 0x12122, 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, 0x0) 03:47:38 executing program 3: getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r0 = syz_open_dev$media(0x0, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r4 = dup2(r3, r2) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000001100)=@assoc_value={0x0, 0x1}, &(0x7f0000001140)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f00000011c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000005c0)=0xe8) accept$packet(r0, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000880)=0x14) accept$packet(r2, &(0x7f0000001440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001480)=0x14) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000b000/0x3000)=nil) r5 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x80) recvfrom(r5, &(0x7f0000000100)=""/4096, 0x1000, 0x12122, 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, 0x0) 03:47:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000080)=@ethtool_coalesce={0xe}}) 03:47:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f0000000000)='wlan0\x00\xd3\xeb\'\xe4\xd5Ts\b\x8c\xba \x1cs\n\xcc]\xfb\xe9i]\xb9\xfc\xae\xd03\x00\x00\x00\x00\x00\x02\x00\b\xb4\x8f\x03\x00\x00\xf6L\x00\x00\xd5\x98\xba\xc4n\xd4\xf3(eq]\x812\xc3\x8e\x88\x00\x00\x00\x00\x00\xff\xff\xe8\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') 03:47:39 executing program 4: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000340)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x3, 0x800000000000a) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x1c0, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, 0x0, &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, '\x03\x00sf0\x00\x00\x10\x00', 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast, [], @broadcast, [], 0xd0, 0xd0, 0x100, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1, 0x0, @loopback, 0x0, @empty, [], @dev}}}]}}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}]}, 0x238) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200001c0, 0x0, 0x0, 0x200001f0, 0x20000220], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000000), &(0x7f00000000c0)=0x30) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 03:47:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f0000000000)='wlan0\x00\xd3\xeb\'\xe4\xd5Ts\b\x8c\xba \x1cs\n\xcc]\xfb\xe9i]\xb9\xfc\xae\xd03\x00\x00\x00\x00\x00\x02\x00\b\xb4\x8f\x03\x00\x00\xf6L\x00\x00\xd5\x98\xba\xc4n\xd4\xf3(eq]\x812\xc3\x8e\x88\x00\x00\x00\x00\x00\xff\xff\xe8\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') 03:47:39 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000200)={0x2, "28f2a296a5ed6a295f9469d5a26b16151e03d39c808be21d2d0d20591a111379"}) 03:47:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 03:47:39 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x3}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = eventfd(0x7ff) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000001c0)={0x3, 0x7, "75c2f774f8b527"}) syz_open_dev$dri(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) connect$caif(r1, &(0x7f0000000200), 0x18) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000280)=""/154) fallocate(r2, 0x5, 0x45, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) chmod(&(0x7f0000000180)='./file0\x00', 0x6) request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='nodev^\xd5\x00', 0xfffffffffffffffe) preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000400)=""/243, 0xf3}], 0x1, 0x0) close(r5) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x0, r5}) socket$rds(0x15, 0x5, 0x0) 03:47:39 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x50, &(0x7f0000000140)}, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") move_pages(0x0, 0x22d, &(0x7f0000000080)=[&(0x7f0000000000/0x3000)=nil], &(0x7f0000000bc0)=[0x1], &(0x7f0000000280), 0x0) 03:47:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@setlink={0x34, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_MAC]}]}]}, 0x34}}, 0x0) 03:47:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f0000000000)='wlan0\x00\xd3\xeb\'\xe4\xd5Ts\b\x8c\xba \x1cs\n\xcc]\xfb\xe9i]\xb9\xfc\xae\xd03\x00\x00\x00\x00\x00\x02\x00\b\xb4\x8f\x03\x00\x00\xf6L\x00\x00\xd5\x98\xba\xc4n\xd4\xf3(eq]\x812\xc3\x8e\x88\x00\x00\x00\x00\x00\xff\xff\xe8\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') 03:47:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, r3) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x1, 0x1) chdir(&(0x7f0000000340)='./file0\x00') ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000680)=ANY=[@ANYBLOB="0100dc00a1e00915523755a7a722c06087d4298eae88a722ee35db87f7f62b66bd0a8dbaaa5f247f16c3dcf4b43a085cbcb5010000006556b3163defcd9ae2e06ca9b4f837465745a705808d17cd072985d2407195e18ba8d52db4775cbded74a3b124e583a5226f46159802d0f5c67b7a26491d55e5d0ce19945dcf9e9e33674ed103d8074097d4e451a1c6eda96df31ce136f9385e5f73d55a40a4e16d7bc15a5be75cfc1e2610b822492ce7ce67d6925f2cd7087caa64a9987480c0f2d1e9d4a88afa5919c2e0be17c3202f804114e58963a77a64cfeef49dc32cd2"]) symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x6, 0x0, 0xe, r1}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x53, 0x2, 0x0, 0x9, 0x5, 0xaf4}, 0x20) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0x2}) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000240), 0x2, r5, 0x10, 0x0, @ib={0x1b, 0x4, 0x5, {"24387ca5ac39be5403ca557cf952a3c8"}, 0x9, 0xee, 0x70}}}, 0xa0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000780)) fchdir(r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff8}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0xfffffffffffffffe) 03:47:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 03:47:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000c80)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000d00)={r0}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, 0x0, &(0x7f0000000c00)) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000c40)={0x0, 0x81, 0x1}, 0x8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) getresuid(&(0x7f0000000380), &(0x7f00000003c0), 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000d40), 0x8) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000500)={{{@in, @in6=@empty}}, {{@in=@initdev}}}, 0x0) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) getgroups(0x5, &(0x7f0000000700)=[0xee00, 0x0, 0xee01, 0xee01, 0xee00]) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) fstat(r1, &(0x7f0000000800)) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000280)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r2 = dup(r1) readv(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) read(r2, &(0x7f0000001900)=""/4096, 0xfec5) ftruncate(0xffffffffffffffff, 0x8007d) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000d80)=""/161) 03:47:39 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) lstat(0x0, 0x0) mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0xffffffffffffff7b, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x30}}, 0x0) 03:47:39 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x3}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = eventfd(0x7ff) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000001c0)={0x3, 0x7, "75c2f774f8b527"}) syz_open_dev$dri(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) connect$caif(r1, &(0x7f0000000200), 0x18) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000280)=""/154) fallocate(r2, 0x5, 0x45, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) chmod(&(0x7f0000000180)='./file0\x00', 0x6) request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='nodev^\xd5\x00', 0xfffffffffffffffe) preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000400)=""/243, 0xf3}], 0x1, 0x0) close(r5) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x0, r5}) socket$rds(0x15, 0x5, 0x0) [ 2475.505650][T29439] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 03:47:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, r3) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x1, 0x1) chdir(&(0x7f0000000340)='./file0\x00') ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000680)=ANY=[@ANYBLOB="0100dc00a1e00915523755a7a722c06087d4298eae88a722ee35db87f7f62b66bd0a8dbaaa5f247f16c3dcf4b43a085cbcb5010000006556b3163defcd9ae2e06ca9b4f837465745a705808d17cd072985d2407195e18ba8d52db4775cbded74a3b124e583a5226f46159802d0f5c67b7a26491d55e5d0ce19945dcf9e9e33674ed103d8074097d4e451a1c6eda96df31ce136f9385e5f73d55a40a4e16d7bc15a5be75cfc1e2610b822492ce7ce67d6925f2cd7087caa64a9987480c0f2d1e9d4a88afa5919c2e0be17c3202f804114e58963a77a64cfeef49dc32cd2"]) symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x6, 0x0, 0xe, r1}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x53, 0x2, 0x0, 0x9, 0x5, 0xaf4}, 0x20) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0x2}) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000240), 0x2, r5, 0x10, 0x0, @ib={0x1b, 0x4, 0x5, {"24387ca5ac39be5403ca557cf952a3c8"}, 0x9, 0xee, 0x70}}}, 0xa0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000780)) fchdir(r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff8}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0xfffffffffffffffe) [ 2475.621976][T29450] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 03:47:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) [ 2475.666169][T29451] team0: Device lo is loopback device. Loopback devices can't be added as a team port 03:47:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, r3) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x1, 0x1) chdir(&(0x7f0000000340)='./file0\x00') ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000680)=ANY=[@ANYBLOB="0100dc00a1e00915523755a7a722c06087d4298eae88a722ee35db87f7f62b66bd0a8dbaaa5f247f16c3dcf4b43a085cbcb5010000006556b3163defcd9ae2e06ca9b4f837465745a705808d17cd072985d2407195e18ba8d52db4775cbded74a3b124e583a5226f46159802d0f5c67b7a26491d55e5d0ce19945dcf9e9e33674ed103d8074097d4e451a1c6eda96df31ce136f9385e5f73d55a40a4e16d7bc15a5be75cfc1e2610b822492ce7ce67d6925f2cd7087caa64a9987480c0f2d1e9d4a88afa5919c2e0be17c3202f804114e58963a77a64cfeef49dc32cd2"]) symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x6, 0x0, 0xe, r1}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x53, 0x2, 0x0, 0x9, 0x5, 0xaf4}, 0x20) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0x2}) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000240), 0x2, r5, 0x10, 0x0, @ib={0x1b, 0x4, 0x5, {"24387ca5ac39be5403ca557cf952a3c8"}, 0x9, 0xee, 0x70}}}, 0xa0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000780)) fchdir(r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff8}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0xfffffffffffffffe) 03:47:39 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x3}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = eventfd(0x7ff) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000001c0)={0x3, 0x7, "75c2f774f8b527"}) syz_open_dev$dri(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) connect$caif(r1, &(0x7f0000000200), 0x18) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000280)=""/154) fallocate(r2, 0x5, 0x45, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) chmod(&(0x7f0000000180)='./file0\x00', 0x6) request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='nodev^\xd5\x00', 0xfffffffffffffffe) preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000400)=""/243, 0xf3}], 0x1, 0x0) close(r5) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x0, r5}) socket$rds(0x15, 0x5, 0x0) 03:47:39 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f000000cfe4), 0x1c) sendmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, 0x0}}], 0x2, 0x0) [ 2475.782443][T29451] team0: Device lo is loopback device. Loopback devices can't be added as a team port 03:47:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, r3) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x1, 0x1) chdir(&(0x7f0000000340)='./file0\x00') ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000680)=ANY=[@ANYBLOB="0100dc00a1e00915523755a7a722c06087d4298eae88a722ee35db87f7f62b66bd0a8dbaaa5f247f16c3dcf4b43a085cbcb5010000006556b3163defcd9ae2e06ca9b4f837465745a705808d17cd072985d2407195e18ba8d52db4775cbded74a3b124e583a5226f46159802d0f5c67b7a26491d55e5d0ce19945dcf9e9e33674ed103d8074097d4e451a1c6eda96df31ce136f9385e5f73d55a40a4e16d7bc15a5be75cfc1e2610b822492ce7ce67d6925f2cd7087caa64a9987480c0f2d1e9d4a88afa5919c2e0be17c3202f804114e58963a77a64cfeef49dc32cd2"]) symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x6, 0x0, 0xe, r1}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x53, 0x2, 0x0, 0x9, 0x5, 0xaf4}, 0x20) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0x2}) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000240), 0x2, r5, 0x10, 0x0, @ib={0x1b, 0x4, 0x5, {"24387ca5ac39be5403ca557cf952a3c8"}, 0x9, 0xee, 0x70}}}, 0xa0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000780)) fchdir(r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff8}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0xfffffffffffffffe) 03:47:39 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) lstat(0x0, 0x0) mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0xffffffffffffff7b, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x30}}, 0x0) 03:47:39 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f000000cfe4), 0x1c) sendmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, 0x0}}], 0x2, 0x0) 03:47:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 03:47:39 executing program 5: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) [ 2476.044739][T29478] team0: Device lo is loopback device. Loopback devices can't be added as a team port 03:47:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, r3) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x1, 0x1) chdir(&(0x7f0000000340)='./file0\x00') ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000680)=ANY=[@ANYBLOB="0100dc00a1e00915523755a7a722c06087d4298eae88a722ee35db87f7f62b66bd0a8dbaaa5f247f16c3dcf4b43a085cbcb5010000006556b3163defcd9ae2e06ca9b4f837465745a705808d17cd072985d2407195e18ba8d52db4775cbded74a3b124e583a5226f46159802d0f5c67b7a26491d55e5d0ce19945dcf9e9e33674ed103d8074097d4e451a1c6eda96df31ce136f9385e5f73d55a40a4e16d7bc15a5be75cfc1e2610b822492ce7ce67d6925f2cd7087caa64a9987480c0f2d1e9d4a88afa5919c2e0be17c3202f804114e58963a77a64cfeef49dc32cd2"]) symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x6, 0x0, 0xe, r1}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x53, 0x2, 0x0, 0x9, 0x5, 0xaf4}, 0x20) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0x2}) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000240), 0x2, r5, 0x10, 0x0, @ib={0x1b, 0x4, 0x5, {"24387ca5ac39be5403ca557cf952a3c8"}, 0x9, 0xee, 0x70}}}, 0xa0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000780)) fchdir(r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff8}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0xfffffffffffffffe) 03:47:40 executing program 5: r0 = socket$kcm(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000440)="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", 0xfb}], 0x1}, 0x0) 03:47:40 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) lstat(0x0, 0x0) mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0xffffffffffffff7b, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x30}}, 0x0) 03:47:40 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f000000cfe4), 0x1c) sendmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, 0x0}}], 0x2, 0x0) 03:47:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, r3) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x1, 0x1) chdir(&(0x7f0000000340)='./file0\x00') ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000680)=ANY=[@ANYBLOB="0100dc00a1e00915523755a7a722c06087d4298eae88a722ee35db87f7f62b66bd0a8dbaaa5f247f16c3dcf4b43a085cbcb5010000006556b3163defcd9ae2e06ca9b4f837465745a705808d17cd072985d2407195e18ba8d52db4775cbded74a3b124e583a5226f46159802d0f5c67b7a26491d55e5d0ce19945dcf9e9e33674ed103d8074097d4e451a1c6eda96df31ce136f9385e5f73d55a40a4e16d7bc15a5be75cfc1e2610b822492ce7ce67d6925f2cd7087caa64a9987480c0f2d1e9d4a88afa5919c2e0be17c3202f804114e58963a77a64cfeef49dc32cd2"]) symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x6, 0x0, 0xe, r1}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x53, 0x2, 0x0, 0x9, 0x5, 0xaf4}, 0x20) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0x2}) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000240), 0x2, r5, 0x10, 0x0, @ib={0x1b, 0x4, 0x5, {"24387ca5ac39be5403ca557cf952a3c8"}, 0x9, 0xee, 0x70}}}, 0xa0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000780)) fchdir(r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff8}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0xfffffffffffffffe) [ 2476.321714][T29496] netlink: 215 bytes leftover after parsing attributes in process `syz-executor.5'. 03:47:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000140)) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) socket$inet(0x2, 0x7, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @remote}, 0xfffffffffffffea4) mmap$binder(&(0x7f0000123000/0x4000)=nil, 0x4000, 0x2000001, 0x10, 0xffffffffffffffff, 0x0) r1 = semget(0xffffffffffffffff, 0x2, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = syz_open_dev$dmmidi(0x0, 0x3, 0x0) geteuid() connect$bt_rfcomm(r2, &(0x7f0000000b80)={0x1f, {0x0, 0x20, 0x5, 0x117912bd}}, 0xa) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) socket(0x40000000002, 0x0, 0x67) [ 2476.373598][T29499] team0: Device lo is loopback device. Loopback devices can't be added as a team port 03:47:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, r3) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x1, 0x1) chdir(&(0x7f0000000340)='./file0\x00') ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000680)=ANY=[@ANYBLOB="0100dc00a1e00915523755a7a722c06087d4298eae88a722ee35db87f7f62b66bd0a8dbaaa5f247f16c3dcf4b43a085cbcb5010000006556b3163defcd9ae2e06ca9b4f837465745a705808d17cd072985d2407195e18ba8d52db4775cbded74a3b124e583a5226f46159802d0f5c67b7a26491d55e5d0ce19945dcf9e9e33674ed103d8074097d4e451a1c6eda96df31ce136f9385e5f73d55a40a4e16d7bc15a5be75cfc1e2610b822492ce7ce67d6925f2cd7087caa64a9987480c0f2d1e9d4a88afa5919c2e0be17c3202f804114e58963a77a64cfeef49dc32cd2"]) symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x6, 0x0, 0xe, r1}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x53, 0x2, 0x0, 0x9, 0x5, 0xaf4}, 0x20) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000540)) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0x2}) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000240), 0x2, r5, 0x10, 0x0, @ib={0x1b, 0x4, 0x5, {"24387ca5ac39be5403ca557cf952a3c8"}, 0x9, 0xee, 0x70}}}, 0xa0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000780)) fchdir(r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff8}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0xfffffffffffffffe) [ 2476.429001][T29499] net_ratelimit: 29 callbacks suppressed [ 2476.429065][T29499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 03:47:40 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f000000cfe4), 0x1c) sendmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, 0x0}}], 0x2, 0x0) [ 2476.571713][T29516] netlink: 215 bytes leftover after parsing attributes in process `syz-executor.5'. 03:47:40 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) lstat(0x0, 0x0) mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0xffffffffffffff7b, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x30}}, 0x0) 03:47:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000140)) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) socket$inet(0x2, 0x7, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @remote}, 0xfffffffffffffea4) mmap$binder(&(0x7f0000123000/0x4000)=nil, 0x4000, 0x2000001, 0x10, 0xffffffffffffffff, 0x0) r1 = semget(0xffffffffffffffff, 0x2, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = syz_open_dev$dmmidi(0x0, 0x3, 0x0) geteuid() connect$bt_rfcomm(r2, &(0x7f0000000b80)={0x1f, {0x0, 0x20, 0x5, 0x117912bd}}, 0xa) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) socket(0x40000000002, 0x0, 0x67) 03:47:40 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r2, r0, 0x0, 0x14e, 0x0}, 0x30) 03:47:40 executing program 5: r0 = socket$kcm(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000440)="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", 0xfb}], 0x1}, 0x0) 03:47:40 executing program 4: syz_emit_ethernet(0x14, &(0x7f0000000040)={@empty, @remote, [], {@generic={0x8863, "94a7038847e8"}}}, 0x0) [ 2476.802398][T29509] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2476.812798][T29524] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 2476.888744][T29528] netlink: 215 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2476.925356][T29524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2476.964064][T29509] CPU: 0 PID: 29509 Comm: syz-executor.0 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2476.973139][T29509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2476.983221][T29509] Call Trace: [ 2476.986512][T29509] dump_stack+0x172/0x1f0 [ 2476.990846][T29509] dump_header+0x10f/0xb6c [ 2476.995246][T29509] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2477.001034][T29509] ? ___ratelimit+0x60/0x595 [ 2477.005607][T29509] ? do_raw_spin_unlock+0x57/0x270 [ 2477.010702][T29509] oom_kill_process.cold+0x10/0x15 [ 2477.015796][T29509] out_of_memory+0x79a/0x1280 [ 2477.020456][T29509] ? lock_downgrade+0x880/0x880 [ 2477.025301][T29509] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2477.031531][T29509] ? oom_killer_disable+0x280/0x280 [ 2477.036712][T29509] ? find_held_lock+0x35/0x130 [ 2477.041477][T29509] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2477.047012][T29509] ? memcg_event_wake+0x230/0x230 [ 2477.052028][T29509] ? do_raw_spin_unlock+0x57/0x270 [ 2477.057127][T29509] ? _raw_spin_unlock+0x2d/0x50 [ 2477.061962][T29509] try_charge+0x118d/0x1790 [ 2477.066454][T29509] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2477.071995][T29509] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2477.077525][T29509] ? find_held_lock+0x35/0x130 [ 2477.082272][T29509] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2477.087809][T29509] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2477.093338][T29509] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2477.098521][T29509] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2477.104050][T29509] __memcg_kmem_charge+0x136/0x300 [ 2477.109168][T29509] __alloc_pages_nodemask+0x437/0x7e0 [ 2477.114524][T29509] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2477.120749][T29509] ? __alloc_pages_slowpath+0x2900/0x2900 [ 2477.126452][T29509] ? copy_process.part.0+0x1d35/0x79d0 [ 2477.131929][T29509] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2477.137215][T29509] ? trace_hardirqs_on+0x67/0x230 [ 2477.142228][T29509] copy_process.part.0+0x3e0/0x79d0 [ 2477.147409][T29509] ? __lockdep_free_key_range+0x120/0x120 [ 2477.153117][T29509] ? kvm_sched_clock_read+0x9/0x20 [ 2477.158229][T29509] ? psi_memstall_leave+0x12e/0x180 [ 2477.163412][T29509] ? find_held_lock+0x35/0x130 [ 2477.168165][T29509] ? psi_memstall_leave+0x12e/0x180 [ 2477.173374][T29509] ? __cleanup_sighand+0x60/0x60 [ 2477.178302][T29509] ? perf_trace_lock+0xeb/0x510 [ 2477.183135][T29509] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2477.189358][T29509] ? debug_smp_processor_id+0x3c/0x280 [ 2477.194800][T29509] ? __lockdep_free_key_range+0x120/0x120 [ 2477.200510][T29509] _do_fork+0x257/0xfd0 [ 2477.204669][T29509] ? fork_idle+0x1d0/0x1d0 [ 2477.209067][T29509] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 2477.215128][T29509] ? lock_downgrade+0x880/0x880 [ 2477.219960][T29509] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2477.226193][T29509] ? blkcg_exit_queue+0x30/0x30 [ 2477.231037][T29509] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2477.236488][T29509] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2477.241925][T29509] ? do_syscall_64+0x26/0x610 [ 2477.246583][T29509] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2477.252823][T29509] ? do_syscall_64+0x26/0x610 [ 2477.257512][T29509] __x64_sys_clone+0xbf/0x150 [ 2477.262174][T29509] do_syscall_64+0x103/0x610 [ 2477.266752][T29509] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2477.272625][T29509] RIP: 0033:0x45aa49 [ 2477.276505][T29509] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2477.296108][T29509] RSP: 002b:00007ffe20f5e598 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2477.304515][T29509] RAX: ffffffffffffffda RBX: 00007fa888d33700 RCX: 000000000045aa49 03:47:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000140)) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) socket$inet(0x2, 0x7, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @remote}, 0xfffffffffffffea4) mmap$binder(&(0x7f0000123000/0x4000)=nil, 0x4000, 0x2000001, 0x10, 0xffffffffffffffff, 0x0) r1 = semget(0xffffffffffffffff, 0x2, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = syz_open_dev$dmmidi(0x0, 0x3, 0x0) geteuid() connect$bt_rfcomm(r2, &(0x7f0000000b80)={0x1f, {0x0, 0x20, 0x5, 0x117912bd}}, 0xa) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) socket(0x40000000002, 0x0, 0x67) [ 2477.312474][T29509] RDX: 00007fa888d339d0 RSI: 00007fa888d32db0 RDI: 00000000003d0f00 [ 2477.320447][T29509] RBP: 00007ffe20f5e7a0 R08: 00007fa888d33700 R09: 00007fa888d33700 [ 2477.328402][T29509] R10: 00007fa888d339d0 R11: 0000000000000202 R12: 0000000000000000 [ 2477.336367][T29509] R13: 00007ffe20f5e64f R14: 00007fa888d339c0 R15: 000000000073bfac [ 2477.359847][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:47:41 executing program 4: syz_emit_ethernet(0x14, &(0x7f0000000040)={@empty, @remote, [], {@generic={0x8863, "94a7038847e8"}}}, 0x0) [ 2477.365744][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2477.371739][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2477.377570][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:41 executing program 5: r0 = socket$kcm(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000440)="fb0000002c00015bbfa9d345e7eb8d99c1ffffffffffffff43bc59198183fe204ee2d70800000006000008b6000000801d5291d76b8c67452107132daffa33021eb82169b94b598296263578b72935c922974adced71c22b987fa68c5bb731c5f64e93ea793c262f67b56acbb4bac0c4c4f9d0c4437e99c25a7d9d3ffd47893808c33b047f720f4e89978112322628c7c1fbab650cdcafa532d3524ea85b198cb49066bf549933875e91431da2f42c88d613be8f1376090e88a06412d5160d7f1b0f47d951f5f7a371a861b9390ddbad539ef278168ac8d157a656737a7ac0226d366ccec93f9f070000000000008e9234feee7baa2acd2683d489", 0xfb}], 0x1}, 0x0) [ 2477.439743][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2477.445616][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2477.451521][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2477.457344][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2477.512711][T29542] netlink: 215 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2477.554317][T29509] memory: usage 307192kB, limit 307200kB, failcnt 4305 [ 2477.591120][T29509] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2477.656742][T29509] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2477.667148][T29509] Memory cgroup stats for /syz0: cache:19200KB rss:236432KB rss_huge:215040KB shmem:4KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:236368KB inactive_file:0KB active_file:0KB unevictable:19148KB [ 2477.700550][T29509] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=29444,uid=0 [ 2477.725254][T29509] Memory cgroup out of memory: Killed process 29444 (syz-executor.0) total-vm:72448kB, anon-rss:4256kB, file-rss:35812kB, shmem-rss:0kB 03:47:41 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r2, r0, 0x0, 0x14e, 0x0}, 0x30) 03:47:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x10, 0x0, 0x0) 03:47:41 executing program 4: syz_emit_ethernet(0x14, &(0x7f0000000040)={@empty, @remote, [], {@generic={0x8863, "94a7038847e8"}}}, 0x0) 03:47:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000140)) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) socket$inet(0x2, 0x7, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @remote}, 0xfffffffffffffea4) mmap$binder(&(0x7f0000123000/0x4000)=nil, 0x4000, 0x2000001, 0x10, 0xffffffffffffffff, 0x0) r1 = semget(0xffffffffffffffff, 0x2, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = syz_open_dev$dmmidi(0x0, 0x3, 0x0) geteuid() connect$bt_rfcomm(r2, &(0x7f0000000b80)={0x1f, {0x0, 0x20, 0x5, 0x117912bd}}, 0xa) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) socket(0x40000000002, 0x0, 0x67) 03:47:41 executing program 5: r0 = socket$kcm(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000440)="fb0000002c00015bbfa9d345e7eb8d99c1ffffffffffffff43bc59198183fe204ee2d70800000006000008b6000000801d5291d76b8c67452107132daffa33021eb82169b94b598296263578b72935c922974adced71c22b987fa68c5bb731c5f64e93ea793c262f67b56acbb4bac0c4c4f9d0c4437e99c25a7d9d3ffd47893808c33b047f720f4e89978112322628c7c1fbab650cdcafa532d3524ea85b198cb49066bf549933875e91431da2f42c88d613be8f1376090e88a06412d5160d7f1b0f47d951f5f7a371a861b9390ddbad539ef278168ac8d157a656737a7ac0226d366ccec93f9f070000000000008e9234feee7baa2acd2683d489", 0xfb}], 0x1}, 0x0) 03:47:41 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6009, 0x1) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='hfs\x00', 0x0, 0x0) 03:47:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x8) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000100)='L', 0x1}], 0x1, 0x0) dup3(r2, r3, 0x0) shutdown(r1, 0x1) 03:47:41 executing program 4: syz_emit_ethernet(0x14, &(0x7f0000000040)={@empty, @remote, [], {@generic={0x8863, "94a7038847e8"}}}, 0x0) [ 2478.020619][T29555] netlink: 215 bytes leftover after parsing attributes in process `syz-executor.5'. 03:47:42 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r2, r0, 0x0, 0x14e, 0x0}, 0x30) 03:47:42 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000a8eff8)) gettid() mkdir(&(0x7f0000000300)='./file0\x00', 0x0) stat(0x0, 0x0) getegid() mount$9p_virtio(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x2800, &(0x7f00000007c0)={'trans=virtio,', {[{@cache_mmap='cache=mmap'}, {@afid={'afid', 0x3d, 0x6}}, {@access_uid={'access'}}, {@posixacl='posixacl'}, {@access_client='access=client'}]}}) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x41, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) accept4$nfc_llcp(r0, &(0x7f0000000400), &(0x7f0000000480)=0x60, 0x0) shmget(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 03:47:42 executing program 5: timerfd_create(0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x0, 0x0) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:47:42 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f00000000c0)={'veth0_to_team\x00'}) 03:47:42 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 03:47:42 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r2, r0, 0x0, 0x14e, 0x0}, 0x30) 03:47:42 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000a8eff8)) gettid() mkdir(&(0x7f0000000300)='./file0\x00', 0x0) stat(0x0, 0x0) getegid() mount$9p_virtio(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x2800, &(0x7f00000007c0)={'trans=virtio,', {[{@cache_mmap='cache=mmap'}, {@afid={'afid', 0x3d, 0x6}}, {@access_uid={'access'}}, {@posixacl='posixacl'}, {@access_client='access=client'}]}}) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x41, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) accept4$nfc_llcp(r0, &(0x7f0000000400), &(0x7f0000000480)=0x60, 0x0) shmget(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 03:47:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x8) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000100)='L', 0x1}], 0x1, 0x0) dup3(r2, r3, 0x0) shutdown(r1, 0x1) 03:47:42 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000040)) 03:47:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000340)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000140)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, &(0x7f000001c000)) munmap(&(0x7f0000551000/0x4000)=nil, 0x4000) chdir(&(0x7f0000000480)='./file0\x00') r2 = getpgrp(0x0) sched_setscheduler(r2, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) getsockname$inet6(r1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r3, &(0x7f0000000280), 0xa68c4f8f) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x80000001) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000003c0)={@rand_addr, @broadcast}, &(0x7f00000004c0)=0x8) [ 2478.471566][T29572] syz-executor.5 invoked oom-killer: gfp_mask=0x500cc2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 2478.536321][T29572] CPU: 0 PID: 29572 Comm: syz-executor.5 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2478.546021][T29572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2478.559561][T29572] Call Trace: [ 2478.562864][T29572] dump_stack+0x172/0x1f0 [ 2478.567302][T29572] dump_header+0x10f/0xb6c [ 2478.571746][T29572] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2478.577561][T29572] ? ___ratelimit+0x60/0x595 [ 2478.582156][T29572] ? do_raw_spin_unlock+0x57/0x270 [ 2478.587276][T29572] oom_kill_process.cold+0x10/0x15 [ 2478.592393][T29572] out_of_memory+0x79a/0x1280 [ 2478.597083][T29572] ? lock_downgrade+0x880/0x880 [ 2478.601936][T29572] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2478.608269][T29572] ? oom_killer_disable+0x280/0x280 [ 2478.613555][T29572] ? find_held_lock+0x35/0x130 [ 2478.618857][T29572] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2478.624410][T29572] ? memcg_event_wake+0x230/0x230 [ 2478.629453][T29572] ? do_raw_spin_unlock+0x57/0x270 [ 2478.634591][T29572] ? _raw_spin_unlock+0x2d/0x50 [ 2478.639454][T29572] try_charge+0x118d/0x1790 [ 2478.643972][T29572] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2478.649527][T29572] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2478.655086][T29572] ? find_held_lock+0x35/0x130 [ 2478.659852][T29572] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2478.665514][T29572] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2478.671065][T29572] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2478.676281][T29572] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2478.681859][T29572] __memcg_kmem_charge+0x136/0x300 [ 2478.686984][T29572] __alloc_pages_nodemask+0x437/0x7e0 [ 2478.692380][T29572] ? __alloc_pages_slowpath+0x2900/0x2900 [ 2478.698110][T29572] ? ___might_sleep+0x163/0x280 [ 2478.702973][T29572] ? copyin+0xb5/0x100 [ 2478.707077][T29572] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2478.713342][T29572] alloc_pages_current+0x107/0x210 [ 2478.718466][T29572] pipe_write+0x659/0xf30 [ 2478.722838][T29572] new_sync_write+0x4c7/0x760 [ 2478.727523][T29572] ? default_llseek+0x2e0/0x2e0 [ 2478.732389][T29572] ? common_file_perm+0x238/0x720 [ 2478.737416][T29572] ? __fget+0x381/0x550 [ 2478.741588][T29572] ? apparmor_file_permission+0x25/0x30 [ 2478.747151][T29572] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2478.753487][T29572] ? security_file_permission+0x94/0x380 [ 2478.759135][T29572] __vfs_write+0xe4/0x110 [ 2478.763480][T29572] vfs_write+0x20c/0x580 [ 2478.767741][T29572] ksys_write+0xea/0x1f0 [ 2478.771999][T29572] ? __ia32_sys_read+0xb0/0xb0 [ 2478.776774][T29572] ? do_syscall_64+0x26/0x610 [ 2478.781460][T29572] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2478.787528][T29572] ? do_syscall_64+0x26/0x610 [ 2478.792223][T29572] __x64_sys_write+0x73/0xb0 [ 2478.796822][T29572] do_syscall_64+0x103/0x610 [ 2478.801424][T29572] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2478.807323][T29572] RIP: 0033:0x458079 [ 2478.811225][T29572] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:47:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x86dd, 'caif0\x00', 'veth1_to_team\x00', 'syzkaller1\x00', 'veth1_to_team\x00', @remote, [], @link_local, [], 0xe8, 0xe8, 0x118, [@ip6={'ip6\x00', 0x50, {{@dev, @ipv4={[], [], @initdev}, [], [], 0x0, 0x11, 0x9d1e}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x220) [ 2478.830842][T29572] RSP: 002b:00007f9efbb7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2478.839264][T29572] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458079 [ 2478.847245][T29572] RDX: 000000010000014c RSI: 0000000020000340 RDI: 0000000000000005 [ 2478.855227][T29572] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2478.863208][T29572] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9efbb7f6d4 [ 2478.871200][T29572] R13: 00000000004c3d9a R14: 00000000004dc6f8 R15: 00000000ffffffff 03:47:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x803, 0x300) r1 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0xbd) recvmmsg(r0, &(0x7f0000002e00), 0x386, 0x22, 0x0) [ 2478.918326][T29572] memory: usage 307200kB, limit 307200kB, failcnt 6480 [ 2478.946671][T29572] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 03:47:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x8) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000100)='L', 0x1}], 0x1, 0x0) dup3(r2, r3, 0x0) shutdown(r1, 0x1) [ 2478.985400][T29572] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2479.022129][T29572] Memory cgroup stats for /syz5: cache:0KB rss:247904KB rss_huge:223232KB shmem:56KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:247920KB inactive_file:0KB active_file:0KB unevictable:4KB 03:47:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x803, 0x300) r1 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0xbd) recvmmsg(r0, &(0x7f0000002e00), 0x386, 0x22, 0x0) [ 2479.095216][T29572] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=29569,uid=0 [ 2479.119158][T29572] Memory cgroup out of memory: Killed process 29569 (syz-executor.5) total-vm:72712kB, anon-rss:4220kB, file-rss:34816kB, shmem-rss:0kB [ 2479.184899][T29590] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2479.186030][ T1044] oom_reaper: reaped process 29569 (syz-executor.5), now anon-rss:0kB, file-rss:34708kB, shmem-rss:0kB [ 2479.210759][T29590] CPU: 0 PID: 29590 Comm: syz-executor.0 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2479.219811][T29590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2479.229912][T29590] Call Trace: [ 2479.233216][T29590] dump_stack+0x172/0x1f0 [ 2479.237561][T29590] dump_header+0x10f/0xb6c [ 2479.242092][T29590] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2479.247997][T29590] ? ___ratelimit+0x60/0x595 [ 2479.252594][T29590] ? do_raw_spin_unlock+0x57/0x270 [ 2479.257800][T29590] oom_kill_process.cold+0x10/0x15 [ 2479.263019][T29590] out_of_memory+0x79a/0x1280 [ 2479.267709][T29590] ? oom_killer_disable+0x280/0x280 [ 2479.272920][T29590] ? find_held_lock+0x35/0x130 [ 2479.277699][T29590] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2479.283257][T29590] ? memcg_event_wake+0x230/0x230 [ 2479.288323][T29590] ? do_raw_spin_unlock+0x57/0x270 [ 2479.293532][T29590] ? _raw_spin_unlock+0x2d/0x50 [ 2479.298395][T29590] try_charge+0x118d/0x1790 [ 2479.302931][T29590] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2479.308485][T29590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2479.314834][T29590] ? kasan_check_read+0x11/0x20 [ 2479.319695][T29590] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2479.325247][T29590] mem_cgroup_try_charge+0x24d/0x5e0 [ 2479.330556][T29590] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2479.336197][T29590] wp_page_copy+0x408/0x1740 [ 2479.340792][T29590] ? find_held_lock+0x35/0x130 [ 2479.345590][T29590] ? pmd_pfn+0x1d0/0x1d0 [ 2479.349860][T29590] ? lock_downgrade+0x880/0x880 [ 2479.354717][T29590] ? swp_swapcount+0x540/0x540 [ 2479.359492][T29590] ? kasan_check_read+0x11/0x20 [ 2479.364434][T29590] ? do_raw_spin_unlock+0x57/0x270 [ 2479.369554][T29590] do_wp_page+0x5d8/0x16c0 [ 2479.373982][T29590] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2479.379370][T29590] __handle_mm_fault+0x22e8/0x3ec0 [ 2479.384489][T29590] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2479.390038][T29590] ? find_held_lock+0x35/0x130 [ 2479.394802][T29590] ? handle_mm_fault+0x322/0xb30 [ 2479.399778][T29590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2479.406026][T29590] ? kasan_check_read+0x11/0x20 [ 2479.410885][T29590] handle_mm_fault+0x43f/0xb30 [ 2479.415703][T29590] __do_page_fault+0x5ef/0xda0 [ 2479.420482][T29590] do_page_fault+0x71/0x581 [ 2479.424990][T29590] ? page_fault+0x8/0x30 [ 2479.429240][T29590] page_fault+0x1e/0x30 [ 2479.433414][T29590] RIP: 0033:0x45667e [ 2479.437315][T29590] Code: 00 00 85 c0 41 89 c5 0f 85 fc 00 00 00 64 8b 04 25 d0 02 00 00 41 39 c4 0f 84 12 02 00 00 48 8b 05 c7 00 60 00 48 85 c0 74 04 <48> 83 00 04 64 8b 04 25 d0 02 00 00 64 89 04 25 d4 02 00 00 0f 31 [ 2479.457096][T29590] RSP: 002b:00007ffe20f5e820 EFLAGS: 00010206 [ 2479.463253][T29590] RAX: 0000000000a56248 RBX: 00007ffe20f5e820 RCX: 000000000045664a [ 2479.471243][T29590] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2479.479289][T29590] RBP: 00007ffe20f5e860 R08: 0000000000000001 R09: 0000000002498940 [ 2479.487285][T29590] R10: 0000000002498c10 R11: 0000000000000246 R12: 0000000000000001 [ 2479.495279][T29590] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe20f5e8b0 03:47:43 executing program 5: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x0, 0x8000, 0x8000}, &(0x7f0000000280)=0x14) r0 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000640)={'irlan0\x00', {0x2, 0x4e21}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000480)) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000001780)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x10f, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = add_key$keyring(&(0x7f00000017c0)='keyring\x00', &(0x7f0000001800)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000001840)='user\x00', &(0x7f0000001880)={'syz', 0x2}, &(0x7f00000018c0)='Y\x00', 0xfffffffffffffffe) keyctl$link(0x8, r3, r4) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000300)={0x0, "5137664187d91aebd3d0cae10e316b6b3ac196711f990cf9d1882e7adfdf5b44", 0x1, 0x1}) ioctl$void(r2, 0xc0045c79) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x24e2) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = fcntl$getown(r5, 0x9) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000680)="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", 0x1000, 0xfffffffffffffffe) request_key(&(0x7f0000001ac0)='\x89yzkal\x01\x00r\xd3', &(0x7f0000001b00)={'syz', 0x1}, &(0x7f0000000440)='Y\x00', r3) move_pages(r6, 0x2, &(0x7f00000004c0)=[&(0x7f000000f000/0x2000)=nil, &(0x7f0000009000/0x4000)=nil], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0], 0x0) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000001940)=0x5, 0x4) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:47:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x803, 0x300) r1 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0xbd) recvmmsg(r0, &(0x7f0000002e00), 0x386, 0x22, 0x0) [ 2479.585631][T29590] memory: usage 307200kB, limit 307200kB, failcnt 4347 [ 2479.606470][T29590] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2479.639846][T29590] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2479.646731][T29590] Memory cgroup stats for /syz0: cache:19200KB rss:236312KB rss_huge:215040KB shmem:4KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:236292KB inactive_file:4KB active_file:4KB unevictable:19148KB [ 2479.715333][T29590] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=29587,uid=0 [ 2479.764815][T29590] Memory cgroup out of memory: Killed process 29587 (syz-executor.0) total-vm:72844kB, anon-rss:4280kB, file-rss:35820kB, shmem-rss:0kB [ 2479.821689][ T1044] oom_reaper: reaped process 29587 (syz-executor.0), now anon-rss:0kB, file-rss:34860kB, shmem-rss:0kB [ 2479.847170][ T7555] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2479.873436][ T7555] CPU: 0 PID: 7555 Comm: syz-executor.0 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2479.882662][ T7555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2479.892724][ T7555] Call Trace: [ 2479.896034][ T7555] dump_stack+0x172/0x1f0 [ 2479.900378][ T7555] dump_header+0x10f/0xb6c [ 2479.904798][ T7555] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2479.910603][ T7555] ? ___ratelimit+0x60/0x595 [ 2479.915193][ T7555] ? do_raw_spin_unlock+0x57/0x270 [ 2479.920326][ T7555] oom_kill_process.cold+0x10/0x15 [ 2479.925440][ T7555] out_of_memory+0x79a/0x1280 [ 2479.930125][ T7555] ? oom_killer_disable+0x280/0x280 [ 2479.935320][ T7555] ? find_held_lock+0x35/0x130 [ 2479.940094][ T7555] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2479.945644][ T7555] ? memcg_event_wake+0x230/0x230 [ 2479.950677][ T7555] ? do_raw_spin_unlock+0x57/0x270 [ 2479.955790][ T7555] ? _raw_spin_unlock+0x2d/0x50 [ 2479.960642][ T7555] try_charge+0xd4d/0x1790 [ 2479.965064][ T7555] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2479.970607][ T7555] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2479.976848][ T7555] ? kasan_check_read+0x11/0x20 [ 2479.981703][ T7555] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2479.987260][ T7555] mem_cgroup_try_charge+0x24d/0x5e0 [ 2479.992550][ T7555] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2479.998186][ T7555] wp_page_copy+0x408/0x1740 [ 2480.002784][ T7555] ? find_held_lock+0x35/0x130 [ 2480.007552][ T7555] ? pmd_pfn+0x1d0/0x1d0 [ 2480.011795][ T7555] ? lock_downgrade+0x880/0x880 [ 2480.016643][ T7555] ? swp_swapcount+0x540/0x540 [ 2480.021408][ T7555] ? kasan_check_read+0x11/0x20 [ 2480.026265][ T7555] ? do_raw_spin_unlock+0x57/0x270 [ 2480.031380][ T7555] do_wp_page+0x5d8/0x16c0 [ 2480.035801][ T7555] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2480.041184][ T7555] __handle_mm_fault+0x22e8/0x3ec0 [ 2480.046313][ T7555] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2480.051861][ T7555] ? find_held_lock+0x35/0x130 [ 2480.056633][ T7555] ? handle_mm_fault+0x322/0xb30 [ 2480.061590][ T7555] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2480.067837][ T7555] ? kasan_check_read+0x11/0x20 [ 2480.072715][ T7555] handle_mm_fault+0x43f/0xb30 [ 2480.077487][ T7555] __do_page_fault+0x5ef/0xda0 [ 2480.082298][ T7555] do_page_fault+0x71/0x581 [ 2480.086803][ T7555] ? page_fault+0x8/0x30 [ 2480.091046][ T7555] page_fault+0x1e/0x30 [ 2480.095199][ T7555] RIP: 0033:0x40bee1 [ 2480.099103][ T7555] Code: 3d 93 c1 32 00 00 0f 85 0b 08 00 00 e8 a8 a6 04 00 85 c0 89 c5 0f 88 84 05 00 00 0f 84 f0 04 00 00 89 c6 bf 1f d8 4b 00 31 c0 3a 5a ff ff c7 44 24 30 00 00 00 00 e8 fd 5d ff ff 49 89 c6 48 [ 2480.118702][ T7555] RSP: 002b:00007ffe20f5e870 EFLAGS: 00010246 [ 2480.124803][ T7555] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000045664a [ 2480.132798][ T7555] RDX: 0000000000000000 RSI: 0000000000002cb1 RDI: 00000000004bd81f [ 2480.140884][ T7555] RBP: 0000000000002cb1 R08: 0000000000000001 R09: 0000000002498940 [ 2480.148865][ T7555] R10: 0000000002498c10 R11: 0000000000000246 R12: 0000000000000000 [ 2480.156846][ T7555] R13: 00007ffe20f5e8a0 R14: 0000000000000000 R15: 00007ffe20f5e8b0 [ 2480.209985][ T7555] memory: usage 302672kB, limit 307200kB, failcnt 4349 [ 2480.216968][ T7555] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2480.224866][ T7555] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2480.231825][ T7555] Memory cgroup stats for /syz0: cache:19200KB rss:232112KB rss_huge:210944KB shmem:4KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:232052KB inactive_file:0KB active_file:4KB unevictable:19148KB [ 2480.254466][ T7555] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18391,uid=0 [ 2480.270093][ T7555] Memory cgroup out of memory: Killed process 18391 (syz-executor.0) total-vm:72448kB, anon-rss:4248kB, file-rss:34816kB, shmem-rss:0kB 03:47:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000340)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000140)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, &(0x7f000001c000)) munmap(&(0x7f0000551000/0x4000)=nil, 0x4000) chdir(&(0x7f0000000480)='./file0\x00') r2 = getpgrp(0x0) sched_setscheduler(r2, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) getsockname$inet6(r1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r3, &(0x7f0000000280), 0xa68c4f8f) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x80000001) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000003c0)={@rand_addr, @broadcast}, &(0x7f00000004c0)=0x8) 03:47:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x8) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000100)='L', 0x1}], 0x1, 0x0) dup3(r2, r3, 0x0) shutdown(r1, 0x1) 03:47:44 executing program 5: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x0, 0x8000, 0x8000}, &(0x7f0000000280)=0x14) r0 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000640)={'irlan0\x00', {0x2, 0x4e21}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000480)) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000001780)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x10f, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = add_key$keyring(&(0x7f00000017c0)='keyring\x00', &(0x7f0000001800)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000001840)='user\x00', &(0x7f0000001880)={'syz', 0x2}, &(0x7f00000018c0)='Y\x00', 0xfffffffffffffffe) keyctl$link(0x8, r3, r4) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000300)={0x0, "5137664187d91aebd3d0cae10e316b6b3ac196711f990cf9d1882e7adfdf5b44", 0x1, 0x1}) ioctl$void(r2, 0xc0045c79) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x24e2) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = fcntl$getown(r5, 0x9) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000680)="e0ad183c1f605aaa7ca74516950f45a65fc9c36a08d6735995a4692f9c85f8109063a1f9163e9c2fc749953b93a9946504a0c6240d2c06ae78a19134e1d849188bff5ffff9652f1d1753961822cd6640d0d70fa5aadade06cd352f127b9f979bca96901fbcc6dc8162f7fcc4a49dc98d4523d64c8ff51d009014b0128900a6e71719ad2e9f0f280b00a40f7514a43f75628a0563eb3b9e62307a59be7d265bc55c48b5e1e7bfc79ac3a09c71b10832ee6b8a12a13769232215c282d48f8832d91beb5dbd57069a65d7c381b0ddb2877b478c175cacdbe636dc111c3c57a5d263839243d5d24f945070920afece42cff07fb5348ffac1d701315398da9e4bdb74f82ab5fbb54ecb7e8dbe72638ec2241971d8c17cca043bbe2bd97ac8b43c4b7b48d3980345f744d3fbd62ea945d03a697d27b4a67c4b650fa0292a42db61f707c26ad2aadbe1ea22d27b0b1be70e469b796f460063c07a1a69fead137d7c8d414af681f26739e0b540f92d60d32f2f20f2aa3decb26221222a1649f8b93a94b53748e7d3bc8e7c92b9b1f01c3bb3bbeb85c93d823cdf6d7f3c114f957bff3f22c8ffc6a95f2908d84aab5513212ff1dd90296cac098f46dbcae744b4de990b4b6a740d3a6950ebf8df1661027307a5c9b88fbc82b51735db270ee55017f42a8e5169c122ca776a42da23bf88d31dffc46b6a050469e6663483e804a24278240d4666a20de0ba336968eac984f675dfa0827d7df8ccd93020805eeff734a436d4650a01007430e87d59542a598f4d1fb61c18486f3b622d7c9151574a2d981fa8d99890745601b280225302b7b581abde9ac8f0b0d1738352d3624fca1e4f9c274991ab6561bd6af6c1af144322c222ed0a0d6189c9db937559a928cae5cb40c08393a3532a4f91e96bc052dda14da09856fe6cf500c33df5344ae5d1f485cc46ebe4c937e76bfc84d2d32a7263e2400ffad7a470843d30d50d79bdd1b2b9cbbc7420482973e511a9d3c6abe952a726506f40c19c2f87507c0d9029eb031aefbde266bd5b91de2235803683faf556698d1857ccac5e69d99bbc34e23daf2fe25c0d214cecc3308129d51f59b6ab75678f975908da7604dd482beabf590c294ffb8cdf3ad4ff673e07e3010eccaabb1f7d607c66aedb5a66c48f759182ff62b1a24960ee1bbfcfb29d0e9b50258dfc899e5e0d288b352e02e4d4ba2ea10290f5a30950c3a6ff9cf2111046c6dd8c43680eff0a0d756a9d7c96cf3c78c97f6e3e6bc0a311a6810dae8e4c88536e9b2035bde7383a209e905e321296022d3e9855620328a947d6eae50f704066cce03b2145b632e52cf86185668280e7a7eef0238a067bca0caa64f370cf3bda9100e1d9bd66b10cfb8b95083cc01dbe6523e65d5e9956147d2aac19092dfdac649ebe05748720e9f93bfe5d5f46cfccfffa3479318cde012bd6664224461247046ca10c728579ce557c0a0c4b1119d43850b6c0d203a594712a61fcbc5e8ded3360b1f2078a4861f0ec34436516c95225c0d44971e7229e3125469c40e84ffe649fff261d0d4e64580125033686133e939eb209d005011b094669976bcf9d3e2416e23177218748907f2fbc726fff3dfa81c218cd18000a81a6531bd5eaf99608179e255a8409134c08ae8a40e0a4d28007bac90f5677ac912251108085154db7aeea77ef2af3d97abb5a3db871c00a851c7c626ad6619847ea6258471597c3096a10de2e98670593e73dda4d1af805c05d40a15d510a04374a1c7e74fc12fa5fb2c37fb35c054b144168a24e5413cfa0ea6b05f1595058d0653783303271422fe13a447309314e8669063c4f9e04e3fabd375d8193cea2413b8db4df11bd0227df77072f13c541c4f87bde0a4c8778f04d506fd56e47a4f3cf0e6ac39c99c4477b296161c8b3cefc9bffe15875ca8cad93815b333f593a2888824fd855e0c9e9080541a1290ddb910d23b1c3558ef74a4d65ddbd575c5b47f7bd379f747ecce7b5a140784a7faee5dc0c17aa4b7b7c956ac9416eba7224d21cba4c98db31c9607d9059281d7e03e2bf2435e43bb4b65048a48e813fee99d816ad6b4dff379d97c8848b6174e4d703e467f827838d604378a97b9ed1aa0e87a196cb27d56d66a0e193fe88958b2ba3c7a84f910bfe3f39f8072682dc054d21ff2677138ebbe0afdb0bb0bb233e7d5132ea9e06b01918302005c44aefd33ef8ea5c760b8b7895e4db97f5c432a0c92dd743c974fcd022260e3cd5a08627436c7012850b08f8ec17af53c4f6f65741dff12c6eb1936899be7cf45bee40cadfa563dd24286abccff84ea0f4e1ad0daeb63295cd60f12a1819a0c9d74546bd7f06f30adf105042c157fc406d6706b94c477c3a234d69c7a48cbcff12289be8b1d42b784dfffa49e01b9590e64ebc1fca26f81ff1d2ac19c4671286605e2938884a4b568f05827ad9cd337a1caf08877e1907d220db4d3c311f5ae052a4627e667d56ff3ce321199578e29d03ffa8e4f716362bd6accba8ee6e5baaa25400421d4df4d829d5a659b6ee2370f75075b580087c3cdfe9d39940fc2c3e76871dbc8668b38a32b39d74238341fe345db2f4662635c5a990039039f3257df447ce37d7134a55b8c687f730d4ea8def32a6d13c84d41261d91ed799d782b4441d474f28a617755ca122d5977bf8c068641f8e5048ab9f2dc22c4eb68c30ab2187b04f4ee944e674df1ef452f790a7f9eb0a88827781d1142c98c8330fa76c15dbaeabac1b56e6febfe72d0f20b61d61dbdb6ae54dd40dd0c2ca86f6739df0c425a7f74753a947f746b27503cc6d54288a6c05ca966dfd1ae59379c527321037730b64cf76d73e72955a1924e7c19b599c24116442896daa885f9dafff41230bbe72cdb713d182c3b2dd95086bfeb4d3bfd30425dc722abd65895da9ff92b2f2363f0f8d96b6e88ade2170310980b89fea6bf4bf6acfacb2b541feb89b2cbd9d0607c07c07bc01ed7efe6a311a86230589d3fada9fbc99e7c3c4c73029dc100fcb38f3f33cab4c25ef95fe8775e3326f685cc4a05b91b67b0dbb3a06b880bd0b57375d873ba422abb83ac2329223256f5427797d252d0e5b71b0401b613366477f124ef5f28a06dd1c2585e0e2626c620b33f08b9e48c597912880eb8b14110ca1a6ba0f482af8353b7f997f441491d1713256ae79e877a8e971cb8fa39645996f48eb0cbea04d0d6b2855d1c267a0773e2c58ac4bb1fa8cdb5cfea6e0e6d4c3f485d5e590bad66da4d13fb944902771c8dd3df3af32c2546fcca1fd1bf15f13fdf85b4e7033022f40df622adc79ae61fbbebe299568d6c3d71b53908bead25c0169d271156a0c8fd4cfd6769a3830bd46ebfed7b23293aeb826ecd88cc5287806ccf047ce77e66f8e1c7bb55499d3618581b8fc6f788b35f989d6fab3b359ba8c25e32d53e6c3691982dfbd48b6b41abd4b9e83bd014eb3ae4973b5580f186c3e8bff8dc77be6d4e269e01505ee2398ee504fd3c905ebe0fbf4be5c6296a78aa95a5c96a313a566b967c0fbe44c7c752b30f603bbe858ba618a3626aff0351981c08140f2605d57c6dec4c2204b8f30a4f8ca638e90b57aa6335b64792e7c7c26e9d9730231b0ba73096b1e5cfe48b09f5e6b22ba9d8b99372ac7b35635544d19bf25909df72a0907e5cf6e6a6f1aea8002c3f1bc6e4ee7c3b9a4895dedb1226d5f8e3400d4da6b1ef1403b5127446f8013ce15fb831494ef717fd6b8bd44ee2f13a211a934f6458b4e2f57d74198e84b0af1ccb9f9344bf8ebc67a47068c0aa0950f4eb258036a576abadf7a6c53442681e44dfc009979ab183a7bea0554bb217ec8a640bfeeccb1197a8e3c7b15a23f38659e4a6162a998a99a09f115feefd0e1448b7e152bdb76fa7c343f950610e76efbb727598fb222f36e787ca158d3ad89b732a8dd9310f523bdc84ad55f8940fb3ea76d00bccf0706f925f686920e43f2edbdee956dd29f2b133dc6e69088af177577bcc8c841e2f4f5f7336d0ae9565a6eb34db3d2c718d1aa0cc7e806c6806f6d9f79149f147bd2757304b0098a326b0f81920a7bb90f188b66f0fd65ef4fc50bd9e6fa60b6c81c97212225ea39f456f85ecfd2f0b9652e2bc467e02f0ccc6d0751446c8966122d4b4b49365495e1a7596200bb28752a5b16a3f3f66887c95ebea4b7891cdb85abfa46ca4dc855aef8f3fab7088f6d49818fd4b31ac29aa620567ad9d36da7f39ef1075365f41b6e3080331630d1f0c6145eefa3c577847088ddb404094b24654cf430e7994f9335ca9b4e9eebc2a83501b1b62f31bc161f4b0d7433f691415969d915d862429e144089062354d49e38e71bfe131a1f815f92c5b6c3da7568c65e8876d46e703ae30cad188a612e82a9a2f0d943b0e236194d5d299ca56e34524ff759fcfd01888702b060ffd76b66f33f9595be93e1ad82fdcf9d11478421ec6b7d05946d798cd928390e0b96b5d4bf333af31f6ad689985f79b3fc5b6b28e42de181f9bc2d48cbf1fea4496f76914ce19bb5ba6320d498a49816d04ea3ec2ecee47391a418d5e65893be7891f53accc6e64c6d0ebc49687c0dee7ecc9d7edec8584792f808f2ae4831ffafd019f8f523f5c848eb4d3f2660fc392d4b7bc9dc8d8ea6f52fd017197fd7900c0773a38e1f2c6f9c3bdd75141a18974e37646dc06f7c9cbb83ecde94e8f14e3322c2425bd4f71591ed0482d779ded36886fd6d48d2f10d141209ef62a41d44cceeb5ec634292c80bda7e58a8dec3d5711a135076171b6c7b9b848fc0d07f05072fb663570f17412f5c864284c5aa1d60bba6726dec648c1c51a224a06fbabd327e19244d00a844eb25f629a34e9ff5d6d4d897c8b42b6e602a532ce40613c766cf2384f98e3aa96a0082aeb8399077b9e883f164c155a066c3ee5340a7262a214c07b305ba35d570f694679af23179b9d948be5664e708725848b1a061dbddc16f8502ad0a8dc027c104d55fb59a766c39362b26406e3fff9d802fe680c2fdf556c0a524f231819d5eb69a76d7248e1a28e3f94e8966f6bc64908b6e0715d0a0dea4aeef4f4430b67e1e92feea62cb22a1c9b6e14cdb4a7a850973b257adf5043977c481a7c195d38b967a784058214d18131a38577279615b6db323432d61c134c2495227cd4a9d38b2a4dbcd45b3fb98710fcd3124efa471fb9b820dcbcd72355ade5a89eb78a63bd202b766267e97a8e7e082d5777cb25c5fd93550672a560556813ab88e6f1e43606c79412faf6dd40375d3f0e836a66b8909b06899904e254f7631fa5714334771705010443772a56df41e82bfc943ea826d90d3003d0f6ead08f29157067248e2e0101914d8392d9769308f8b867c550ad0c65e5ae3e5e2ca830dc1f628a2207219d37f97934b9942ef740965c225b5339df209969c201062afbf35d6d30579aef8087cf6939c3d5d83764897d628bf71ccdb30ea119b3b9abfd9d6152436c8c430d3af91db417f025352104db7c5a3a3affa50d16529c0bca23a64c60eb43ed182ce3bdb7c9926a283b8cec489ce8a16468ccd1b79d5bedbcce4c446b6dda8f3d21561e134536fa3a2b14c96008ab02b35a6d4aaf36c4d944a22149d825730b407b8f926d8446a56cc9955250a0ba2d3203df94736de23385b84eb3217932cad0dcf5b86fa4cf598bc6396867466d66c12e00bcd76b68bc9bbf5c7c6abee391425bc2fc9d711e70675bc1dffb830c675c6e623e17aa75cb191f86a38f587fe03c30956d513cc68d42e4563615dec9174b3c0", 0x1000, 0xfffffffffffffffe) request_key(&(0x7f0000001ac0)='\x89yzkal\x01\x00r\xd3', &(0x7f0000001b00)={'syz', 0x1}, &(0x7f0000000440)='Y\x00', r3) move_pages(r6, 0x2, &(0x7f00000004c0)=[&(0x7f000000f000/0x2000)=nil, &(0x7f0000009000/0x4000)=nil], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0], 0x0) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000001940)=0x5, 0x4) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:47:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x803, 0x300) r1 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0xbd) recvmmsg(r0, &(0x7f0000002e00), 0x386, 0x22, 0x0) 03:47:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000340)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000140)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, &(0x7f000001c000)) munmap(&(0x7f0000551000/0x4000)=nil, 0x4000) chdir(&(0x7f0000000480)='./file0\x00') r2 = getpgrp(0x0) sched_setscheduler(r2, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) getsockname$inet6(r1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r3, &(0x7f0000000280), 0xa68c4f8f) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x80000001) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000003c0)={@rand_addr, @broadcast}, &(0x7f00000004c0)=0x8) 03:47:44 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000a8eff8)) gettid() mkdir(&(0x7f0000000300)='./file0\x00', 0x0) stat(0x0, 0x0) getegid() mount$9p_virtio(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x2800, &(0x7f00000007c0)={'trans=virtio,', {[{@cache_mmap='cache=mmap'}, {@afid={'afid', 0x3d, 0x6}}, {@access_uid={'access'}}, {@posixacl='posixacl'}, {@access_client='access=client'}]}}) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x41, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) accept4$nfc_llcp(r0, &(0x7f0000000400), &(0x7f0000000480)=0x60, 0x0) shmget(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 03:47:44 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000a8eff8)) gettid() mkdir(&(0x7f0000000300)='./file0\x00', 0x0) stat(0x0, 0x0) getegid() mount$9p_virtio(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x2800, &(0x7f00000007c0)={'trans=virtio,', {[{@cache_mmap='cache=mmap'}, {@afid={'afid', 0x3d, 0x6}}, {@access_uid={'access'}}, {@posixacl='posixacl'}, {@access_client='access=client'}]}}) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x41, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) accept4$nfc_llcp(r0, &(0x7f0000000400), &(0x7f0000000480)=0x60, 0x0) shmget(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 03:47:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000340)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000140)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, &(0x7f000001c000)) munmap(&(0x7f0000551000/0x4000)=nil, 0x4000) chdir(&(0x7f0000000480)='./file0\x00') r2 = getpgrp(0x0) sched_setscheduler(r2, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) getsockname$inet6(r1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r3, &(0x7f0000000280), 0xa68c4f8f) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x80000001) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000003c0)={@rand_addr, @broadcast}, &(0x7f00000004c0)=0x8) 03:47:44 executing program 5: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x0, 0x8000, 0x8000}, &(0x7f0000000280)=0x14) r0 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000640)={'irlan0\x00', {0x2, 0x4e21}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000480)) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000001780)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x10f, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = add_key$keyring(&(0x7f00000017c0)='keyring\x00', &(0x7f0000001800)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000001840)='user\x00', &(0x7f0000001880)={'syz', 0x2}, &(0x7f00000018c0)='Y\x00', 0xfffffffffffffffe) keyctl$link(0x8, r3, r4) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000300)={0x0, "5137664187d91aebd3d0cae10e316b6b3ac196711f990cf9d1882e7adfdf5b44", 0x1, 0x1}) ioctl$void(r2, 0xc0045c79) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x24e2) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = fcntl$getown(r5, 0x9) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000680)="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", 0x1000, 0xfffffffffffffffe) request_key(&(0x7f0000001ac0)='\x89yzkal\x01\x00r\xd3', &(0x7f0000001b00)={'syz', 0x1}, &(0x7f0000000440)='Y\x00', r3) move_pages(r6, 0x2, &(0x7f00000004c0)=[&(0x7f000000f000/0x2000)=nil, &(0x7f0000009000/0x4000)=nil], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0], 0x0) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000001940)=0x5, 0x4) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:47:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000340)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000140)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, &(0x7f000001c000)) munmap(&(0x7f0000551000/0x4000)=nil, 0x4000) chdir(&(0x7f0000000480)='./file0\x00') r2 = getpgrp(0x0) sched_setscheduler(r2, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) getsockname$inet6(r1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r3, &(0x7f0000000280), 0xa68c4f8f) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x80000001) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000003c0)={@rand_addr, @broadcast}, &(0x7f00000004c0)=0x8) 03:47:44 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x202, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000800)='/dev/rtc0\x00', 0x10000002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003280)={'team0\x00'}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000032c0)={0x0, 0x8, 0x53c9dfdf, 0x7, 0x7f, 0x0, 0x1}) fcntl$lock(r2, 0x6, &(0x7f0000000480)={0x0, 0x1, 0x6, 0x9}) write$apparmor_current(r0, &(0x7f00000005c0)=ANY=[], 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000000640)={r4, r5+30000000}) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@local, @in=@broadcast}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) setxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'L+', 0x401}, 0x28, 0x3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400003, 0x9, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000740), 0xffffffffffffffff) 03:47:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 03:47:44 executing program 5: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x0, 0x8000, 0x8000}, &(0x7f0000000280)=0x14) r0 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000640)={'irlan0\x00', {0x2, 0x4e21}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000480)) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000001780)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x10f, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = add_key$keyring(&(0x7f00000017c0)='keyring\x00', &(0x7f0000001800)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000001840)='user\x00', &(0x7f0000001880)={'syz', 0x2}, &(0x7f00000018c0)='Y\x00', 0xfffffffffffffffe) keyctl$link(0x8, r3, r4) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000300)={0x0, "5137664187d91aebd3d0cae10e316b6b3ac196711f990cf9d1882e7adfdf5b44", 0x1, 0x1}) ioctl$void(r2, 0xc0045c79) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x24e2) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = fcntl$getown(r5, 0x9) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000680)="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", 0x1000, 0xfffffffffffffffe) request_key(&(0x7f0000001ac0)='\x89yzkal\x01\x00r\xd3', &(0x7f0000001b00)={'syz', 0x1}, &(0x7f0000000440)='Y\x00', r3) move_pages(r6, 0x2, &(0x7f00000004c0)=[&(0x7f000000f000/0x2000)=nil, &(0x7f0000009000/0x4000)=nil], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0], 0x0) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000001940)=0x5, 0x4) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:47:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$revoke(0x3, r0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getuid() ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) set_mempolicy(0x2, 0x0, 0x1f) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = request_key(&(0x7f0000000440)='rxrpc_s\x00', 0x0, &(0x7f0000000500)='/dev/video#\x00', 0xfffffffffffffffb) add_key(&(0x7f0000000600)='encrypted\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r1) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) 03:47:45 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xc) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000140), 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) 03:47:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000340)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000140)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, &(0x7f000001c000)) munmap(&(0x7f0000551000/0x4000)=nil, 0x4000) chdir(&(0x7f0000000480)='./file0\x00') r2 = getpgrp(0x0) sched_setscheduler(r2, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) getsockname$inet6(r1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r3, &(0x7f0000000280), 0xa68c4f8f) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x80000001) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000003c0)={@rand_addr, @broadcast}, &(0x7f00000004c0)=0x8) [ 2481.518004][ C0] net_ratelimit: 16 callbacks suppressed [ 2481.518053][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2481.530465][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2481.537705][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2481.544738][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000340)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000140)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, &(0x7f000001c000)) munmap(&(0x7f0000551000/0x4000)=nil, 0x4000) chdir(&(0x7f0000000480)='./file0\x00') r2 = getpgrp(0x0) sched_setscheduler(r2, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) getsockname$inet6(r1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r3, &(0x7f0000000280), 0xa68c4f8f) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x80000001) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000003c0)={@rand_addr, @broadcast}, &(0x7f00000004c0)=0x8) 03:47:45 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x202, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000800)='/dev/rtc0\x00', 0x10000002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003280)={'team0\x00'}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000032c0)={0x0, 0x8, 0x53c9dfdf, 0x7, 0x7f, 0x0, 0x1}) fcntl$lock(r2, 0x6, &(0x7f0000000480)={0x0, 0x1, 0x6, 0x9}) write$apparmor_current(r0, &(0x7f00000005c0)=ANY=[], 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000000640)={r4, r5+30000000}) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@local, @in=@broadcast}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) setxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'L+', 0x401}, 0x28, 0x3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400003, 0x9, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000740), 0xffffffffffffffff) 03:47:45 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xc) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000140), 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) [ 2481.597803][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2481.603691][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2481.609596][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2481.616920][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2481.622851][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2481.628691][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000340)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000140)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, &(0x7f000001c000)) munmap(&(0x7f0000551000/0x4000)=nil, 0x4000) chdir(&(0x7f0000000480)='./file0\x00') r2 = getpgrp(0x0) sched_setscheduler(r2, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) getsockname$inet6(r1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r3, &(0x7f0000000280), 0xa68c4f8f) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x80000001) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000003c0)={@rand_addr, @broadcast}, &(0x7f00000004c0)=0x8) 03:47:45 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xc) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000140), 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) 03:47:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$revoke(0x3, r0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getuid() ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) set_mempolicy(0x2, 0x0, 0x1f) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = request_key(&(0x7f0000000440)='rxrpc_s\x00', 0x0, &(0x7f0000000500)='/dev/video#\x00', 0xfffffffffffffffb) add_key(&(0x7f0000000600)='encrypted\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r1) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) 03:47:45 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xc) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000140), 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) 03:47:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$revoke(0x3, r0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getuid() ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) set_mempolicy(0x2, 0x0, 0x1f) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = request_key(&(0x7f0000000440)='rxrpc_s\x00', 0x0, &(0x7f0000000500)='/dev/video#\x00', 0xfffffffffffffffb) add_key(&(0x7f0000000600)='encrypted\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r1) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) 03:47:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$revoke(0x3, r0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getuid() ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) set_mempolicy(0x2, 0x0, 0x1f) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = request_key(&(0x7f0000000440)='rxrpc_s\x00', 0x0, &(0x7f0000000500)='/dev/video#\x00', 0xfffffffffffffffb) add_key(&(0x7f0000000600)='encrypted\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r1) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) 03:47:46 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x202, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000800)='/dev/rtc0\x00', 0x10000002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003280)={'team0\x00'}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000032c0)={0x0, 0x8, 0x53c9dfdf, 0x7, 0x7f, 0x0, 0x1}) fcntl$lock(r2, 0x6, &(0x7f0000000480)={0x0, 0x1, 0x6, 0x9}) write$apparmor_current(r0, &(0x7f00000005c0)=ANY=[], 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000000640)={r4, r5+30000000}) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@local, @in=@broadcast}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) setxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'L+', 0x401}, 0x28, 0x3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400003, 0x9, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000740), 0xffffffffffffffff) 03:47:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000340)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000140)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, &(0x7f000001c000)) munmap(&(0x7f0000551000/0x4000)=nil, 0x4000) chdir(&(0x7f0000000480)='./file0\x00') r2 = getpgrp(0x0) sched_setscheduler(r2, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) getsockname$inet6(r1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r3, &(0x7f0000000280), 0xa68c4f8f) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x80000001) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000003c0)={@rand_addr, @broadcast}, &(0x7f00000004c0)=0x8) 03:47:46 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x202, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000800)='/dev/rtc0\x00', 0x10000002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003280)={'team0\x00'}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000032c0)={0x0, 0x8, 0x53c9dfdf, 0x7, 0x7f, 0x0, 0x1}) fcntl$lock(r2, 0x6, &(0x7f0000000480)={0x0, 0x1, 0x6, 0x9}) write$apparmor_current(r0, &(0x7f00000005c0)=ANY=[], 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000000640)={r4, r5+30000000}) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@local, @in=@broadcast}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) setxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'L+', 0x401}, 0x28, 0x3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400003, 0x9, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000740), 0xffffffffffffffff) 03:47:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$revoke(0x3, r0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getuid() ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) set_mempolicy(0x2, 0x0, 0x1f) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = request_key(&(0x7f0000000440)='rxrpc_s\x00', 0x0, &(0x7f0000000500)='/dev/video#\x00', 0xfffffffffffffffb) add_key(&(0x7f0000000600)='encrypted\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r1) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) 03:47:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$revoke(0x3, r0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getuid() ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) set_mempolicy(0x2, 0x0, 0x1f) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = request_key(&(0x7f0000000440)='rxrpc_s\x00', 0x0, &(0x7f0000000500)='/dev/video#\x00', 0xfffffffffffffffb) add_key(&(0x7f0000000600)='encrypted\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r1) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) 03:47:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000340)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000140)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, &(0x7f000001c000)) munmap(&(0x7f0000551000/0x4000)=nil, 0x4000) chdir(&(0x7f0000000480)='./file0\x00') r2 = getpgrp(0x0) sched_setscheduler(r2, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) getsockname$inet6(r1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r3, &(0x7f0000000280), 0xa68c4f8f) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x80000001) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000003c0)={@rand_addr, @broadcast}, &(0x7f00000004c0)=0x8) 03:47:47 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$revoke(0x3, r0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getuid() ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) set_mempolicy(0x2, 0x0, 0x1f) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = request_key(&(0x7f0000000440)='rxrpc_s\x00', 0x0, &(0x7f0000000500)='/dev/video#\x00', 0xfffffffffffffffb) add_key(&(0x7f0000000600)='encrypted\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r1) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) 03:47:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$revoke(0x3, r0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getuid() ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) set_mempolicy(0x2, 0x0, 0x1f) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = request_key(&(0x7f0000000440)='rxrpc_s\x00', 0x0, &(0x7f0000000500)='/dev/video#\x00', 0xfffffffffffffffb) add_key(&(0x7f0000000600)='encrypted\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r1) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) 03:47:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$revoke(0x3, r0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getuid() ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) set_mempolicy(0x2, 0x0, 0x1f) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = request_key(&(0x7f0000000440)='rxrpc_s\x00', 0x0, &(0x7f0000000500)='/dev/video#\x00', 0xfffffffffffffffb) add_key(&(0x7f0000000600)='encrypted\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r1) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) [ 2483.505422][ T7558] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 2483.569230][ T7558] CPU: 0 PID: 7558 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2483.578215][ T7558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2483.588281][ T7558] Call Trace: [ 2483.591591][ T7558] dump_stack+0x172/0x1f0 [ 2483.595960][ T7558] dump_header+0x10f/0xb6c [ 2483.600398][ T7558] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2483.606314][ T7558] ? ___ratelimit+0x60/0x595 [ 2483.610930][ T7558] ? do_raw_spin_unlock+0x57/0x270 [ 2483.617730][ T7558] oom_kill_process.cold+0x10/0x15 [ 2483.622865][ T7558] out_of_memory+0x79a/0x1280 [ 2483.627569][ T7558] ? lock_downgrade+0x880/0x880 [ 2483.632429][ T7558] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2483.638680][ T7558] ? oom_killer_disable+0x280/0x280 [ 2483.643884][ T7558] ? find_held_lock+0x35/0x130 [ 2483.648680][ T7558] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2483.654243][ T7558] ? memcg_event_wake+0x230/0x230 [ 2483.659289][ T7558] ? do_raw_spin_unlock+0x57/0x270 [ 2483.665982][ T7558] ? _raw_spin_unlock+0x2d/0x50 [ 2483.670856][ T7558] try_charge+0x118d/0x1790 [ 2483.675381][ T7558] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2483.681021][ T7558] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2483.686588][ T7558] ? find_held_lock+0x35/0x130 [ 2483.691452][ T7558] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2483.697021][ T7558] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2483.702576][ T7558] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2483.707790][ T7558] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2483.713348][ T7558] __memcg_kmem_charge+0x136/0x300 [ 2483.718478][ T7558] __alloc_pages_nodemask+0x437/0x7e0 [ 2483.723869][ T7558] ? __alloc_pages_slowpath+0x2900/0x2900 [ 2483.729613][ T7558] ? copy_page_range+0x125a/0x1f90 [ 2483.734734][ T7558] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2483.740994][ T7558] alloc_pages_current+0x107/0x210 [ 2483.746119][ T7558] pte_alloc_one+0x1b/0x1a0 [ 2483.750640][ T7558] __pte_alloc+0x20/0x310 [ 2483.755162][ T7558] copy_page_range+0x1529/0x1f90 [ 2483.760111][ T7558] ? perf_trace_lock+0xeb/0x510 [ 2483.764978][ T7558] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2483.771255][ T7558] ? pmd_alloc+0x180/0x180 [ 2483.775691][ T7558] ? __rb_insert_augmented+0x231/0xdf0 [ 2483.781909][ T7558] ? validate_mm_rb+0xa3/0xc0 [ 2483.786703][ T7558] ? __vma_link_rb+0x279/0x370 [ 2483.791482][ T7558] copy_process.part.0+0x5ab7/0x79d0 [ 2483.796811][ T7558] ? __cleanup_sighand+0x60/0x60 [ 2483.801782][ T7558] _do_fork+0x257/0xfd0 [ 2483.805971][ T7558] ? fork_idle+0x1d0/0x1d0 [ 2483.810404][ T7558] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2483.815875][ T7558] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2483.821351][ T7558] ? do_syscall_64+0x26/0x610 [ 2483.826036][ T7558] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2483.832105][ T7558] ? do_syscall_64+0x26/0x610 [ 2483.836794][ T7558] __x64_sys_clone+0xbf/0x150 [ 2483.841489][ T7558] do_syscall_64+0x103/0x610 [ 2483.846091][ T7558] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2483.851986][ T7558] RIP: 0033:0x45664a [ 2483.855885][ T7558] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2483.875537][ T7558] RSP: 002b:00007fff5bc3c810 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2483.883983][ T7558] RAX: ffffffffffffffda RBX: 00007fff5bc3c810 RCX: 000000000045664a [ 2483.891970][ T7558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2483.899962][ T7558] RBP: 00007fff5bc3c850 R08: 0000000000000001 R09: 00000000010ac940 [ 2483.907951][ T7558] R10: 00000000010acc10 R11: 0000000000000246 R12: 0000000000000001 03:47:47 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$revoke(0x3, r0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getuid() ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) set_mempolicy(0x2, 0x0, 0x1f) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = request_key(&(0x7f0000000440)='rxrpc_s\x00', 0x0, &(0x7f0000000500)='/dev/video#\x00', 0xfffffffffffffffb) add_key(&(0x7f0000000600)='encrypted\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r1) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) [ 2483.915952][ T7558] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff5bc3c8a0 03:47:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$revoke(0x3, r0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getuid() ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) set_mempolicy(0x2, 0x0, 0x1f) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = request_key(&(0x7f0000000440)='rxrpc_s\x00', 0x0, &(0x7f0000000500)='/dev/video#\x00', 0xfffffffffffffffb) add_key(&(0x7f0000000600)='encrypted\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r1) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) 03:47:48 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x202, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000800)='/dev/rtc0\x00', 0x10000002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003280)={'team0\x00'}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000032c0)={0x0, 0x8, 0x53c9dfdf, 0x7, 0x7f, 0x0, 0x1}) fcntl$lock(r2, 0x6, &(0x7f0000000480)={0x0, 0x1, 0x6, 0x9}) write$apparmor_current(r0, &(0x7f00000005c0)=ANY=[], 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000000640)={r4, r5+30000000}) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@local, @in=@broadcast}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) setxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'L+', 0x401}, 0x28, 0x3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400003, 0x9, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000740), 0xffffffffffffffff) [ 2484.256627][ T7558] memory: usage 307200kB, limit 307200kB, failcnt 8489 [ 2484.263589][ T7558] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2484.344407][ T7558] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:47:48 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r4 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x20, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(r0, 0x0, 0x0) ioprio_set$uid(0x3, r4, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getpid() ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x0, 0x3, &(0x7f00000000c0)='/[\x00'}, 0x30) r5 = getpgid(0xffffffffffffffff) r6 = getpgrp(r5) setresuid(0xffffffffffffffff, r4, r4) r7 = geteuid() setuid(r7) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000200)=r6) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 2484.403263][ T7558] Memory cgroup stats for /syz1: cache:11044KB rss:237968KB rss_huge:215040KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:238036KB inactive_file:0KB active_file:0KB unevictable:11008KB [ 2484.491542][ T7558] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18398,uid=0 [ 2484.512824][ T7558] Memory cgroup out of memory: Killed process 18398 (syz-executor.1) total-vm:72448kB, anon-rss:4248kB, file-rss:34816kB, shmem-rss:0kB 03:47:48 executing program 4: mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/184, 0x41) 03:47:48 executing program 4: mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/184, 0x41) 03:47:48 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x202, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000800)='/dev/rtc0\x00', 0x10000002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003280)={'team0\x00'}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000032c0)={0x0, 0x8, 0x53c9dfdf, 0x7, 0x7f, 0x0, 0x1}) fcntl$lock(r2, 0x6, &(0x7f0000000480)={0x0, 0x1, 0x6, 0x9}) write$apparmor_current(r0, &(0x7f00000005c0)=ANY=[], 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000000640)={r4, r5+30000000}) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@local, @in=@broadcast}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) setxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'L+', 0x401}, 0x28, 0x3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400003, 0x9, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000740), 0xffffffffffffffff) 03:47:48 executing program 4: mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/184, 0x41) 03:47:48 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000002000000000f"], 0x0, 0x1a}, 0x20) 03:47:48 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x202, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000800)='/dev/rtc0\x00', 0x10000002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003280)={'team0\x00'}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000032c0)={0x0, 0x8, 0x53c9dfdf, 0x7, 0x7f, 0x0, 0x1}) fcntl$lock(r2, 0x6, &(0x7f0000000480)={0x0, 0x1, 0x6, 0x9}) write$apparmor_current(r0, &(0x7f00000005c0)=ANY=[], 0x0) clock_gettime(0xfffffffefffffffe, &(0x7f0000000b40)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000000640)={r4, r5+30000000}) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@local, @in=@broadcast}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) setxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'L+', 0x401}, 0x28, 0x3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400003, 0x9, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000740), 0xffffffffffffffff) 03:47:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$revoke(0x3, r0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getuid() ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) set_mempolicy(0x2, 0x0, 0x1f) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = request_key(&(0x7f0000000440)='rxrpc_s\x00', 0x0, &(0x7f0000000500)='/dev/video#\x00', 0xfffffffffffffffb) add_key(&(0x7f0000000600)='encrypted\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r1) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) 03:47:49 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "858cf76ca6fc7a0a"}}, 0x48}}, 0x0) close(r0) 03:47:49 executing program 5: personality(0x8000000000140008) uname(&(0x7f0000000480)=""/176) 03:47:49 executing program 4: mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/184, 0x41) 03:47:49 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "858cf76ca6fc7a0a"}}, 0x48}}, 0x0) close(r0) 03:47:51 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r4 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x20, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(r0, 0x0, 0x0) ioprio_set$uid(0x3, r4, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getpid() ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x0, 0x3, &(0x7f00000000c0)='/[\x00'}, 0x30) r5 = getpgid(0xffffffffffffffff) r6 = getpgrp(r5) setresuid(0xffffffffffffffff, r4, r4) r7 = geteuid() setuid(r7) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000200)=r6) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 03:47:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$revoke(0x3, r0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getuid() ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) set_mempolicy(0x2, 0x0, 0x1f) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = request_key(&(0x7f0000000440)='rxrpc_s\x00', 0x0, &(0x7f0000000500)='/dev/video#\x00', 0xfffffffffffffffb) add_key(&(0x7f0000000600)='encrypted\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r1) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) 03:47:51 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0xac1e6cf258a20fd5}) 03:47:51 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "858cf76ca6fc7a0a"}}, 0x48}}, 0x0) close(r0) 03:47:51 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "858cf76ca6fc7a0a"}}, 0x48}}, 0x0) close(r0) 03:47:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)='y\x00', 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0) 03:47:51 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r4 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x20, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(r0, 0x0, 0x0) ioprio_set$uid(0x3, r4, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getpid() ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x0, 0x3, &(0x7f00000000c0)='/[\x00'}, 0x30) r5 = getpgid(0xffffffffffffffff) r6 = getpgrp(r5) setresuid(0xffffffffffffffff, r4, r4) r7 = geteuid() setuid(r7) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000200)=r6) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 03:47:51 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "858cf76ca6fc7a0a"}}, 0x48}}, 0x0) close(r0) 03:47:51 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "858cf76ca6fc7a0a"}}, 0x48}}, 0x0) close(r0) 03:47:51 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "858cf76ca6fc7a0a"}}, 0x48}}, 0x0) close(r0) 03:47:51 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r4 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x20, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(r0, 0x0, 0x0) ioprio_set$uid(0x3, r4, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getpid() ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x0, 0x3, &(0x7f00000000c0)='/[\x00'}, 0x30) r5 = getpgid(0xffffffffffffffff) r6 = getpgrp(r5) setresuid(0xffffffffffffffff, r4, r4) r7 = geteuid() setuid(r7) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000200)=r6) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 03:47:51 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000001c0)={0x0, 0x0, 0xffff, 0x0, 'syz0\x00'}) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000140)=0x7, 0x99) sendto$inet6(r1, &(0x7f0000000080)="ab", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) [ 2487.877049][T29822] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=3, oom_score_adj=0 [ 2487.982933][T29822] CPU: 0 PID: 29822 Comm: syz-executor.5 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2487.992004][T29822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2488.002067][T29822] Call Trace: [ 2488.005380][T29822] dump_stack+0x172/0x1f0 [ 2488.009744][T29822] dump_header+0x10f/0xb6c [ 2488.014180][T29822] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2488.019998][T29822] ? ___ratelimit+0x60/0x595 [ 2488.024612][T29822] ? do_raw_spin_unlock+0x57/0x270 [ 2488.029736][T29822] oom_kill_process.cold+0x10/0x15 [ 2488.034862][T29822] out_of_memory+0x79a/0x1280 [ 2488.039573][T29822] ? lock_downgrade+0x880/0x880 [ 2488.044951][T29822] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2488.051205][T29822] ? oom_killer_disable+0x280/0x280 [ 2488.056421][T29822] ? find_held_lock+0x35/0x130 [ 2488.061207][T29822] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2488.066765][T29822] ? memcg_event_wake+0x230/0x230 [ 2488.071807][T29822] ? do_raw_spin_unlock+0x57/0x270 [ 2488.076934][T29822] ? _raw_spin_unlock+0x2d/0x50 [ 2488.081805][T29822] try_charge+0x118d/0x1790 [ 2488.086327][T29822] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2488.091913][T29822] ? mark_held_locks+0xa4/0xf0 [ 2488.096691][T29822] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 2488.102520][T29822] ? __sk_mem_raise_allocated+0x557/0x1390 [ 2488.108363][T29822] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 2488.114012][T29822] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2488.119312][T29822] ? trace_hardirqs_on+0x67/0x230 [ 2488.124352][T29822] mem_cgroup_charge_skmem+0x12f/0x280 [ 2488.129823][T29822] ? mem_cgroup_sk_free+0x90/0x90 [ 2488.134930][T29822] ? lock_downgrade+0x880/0x880 [ 2488.139781][T29822] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2488.145494][T29822] ? iov_iter_advance+0x295/0xf70 [ 2488.150540][T29822] __sk_mem_raise_allocated+0x557/0x1390 [ 2488.154411][ C1] net_ratelimit: 26 callbacks suppressed [ 2488.154420][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2488.156167][T29822] ? alloc_pages_current+0x10f/0x210 [ 2488.156197][T29822] __sk_mem_schedule+0x6d/0xe0 [ 2488.156213][T29822] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2488.156233][T29822] tcp_sendmsg_locked+0x1992/0x34b0 [ 2488.161907][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2488.167569][T29822] ? tcp_sendpage+0x60/0x60 [ 2488.167587][T29822] ? trace_hardirqs_on+0x67/0x230 [ 2488.167607][T29822] ? lock_sock_nested+0x9a/0x120 [ 2488.211147][T29822] ? __local_bh_enable_ip+0x15a/0x270 [ 2488.216535][T29822] tcp_sendmsg+0x30/0x50 [ 2488.220791][T29822] inet_sendmsg+0x147/0x5d0 [ 2488.225390][T29822] ? ipip_gro_receive+0x100/0x100 [ 2488.230497][T29822] sock_sendmsg+0xdd/0x130 [ 2488.235030][T29822] __sys_sendto+0x262/0x380 [ 2488.239558][T29822] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2488.244958][T29822] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2488.251321][T29822] ? put_timespec64+0xda/0x140 [ 2488.256082][T29822] ? nsecs_to_jiffies+0x30/0x30 [ 2488.260951][T29822] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2488.266408][T29822] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2488.271940][T29822] ? do_syscall_64+0x26/0x610 [ 2488.276617][T29822] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2488.282699][T29822] __x64_sys_sendto+0xe1/0x1a0 [ 2488.287459][T29822] do_syscall_64+0x103/0x610 [ 2488.292047][T29822] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2488.297934][T29822] RIP: 0033:0x458079 [ 2488.301832][T29822] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2488.321442][T29822] RSP: 002b:00007f9efbb3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2488.329859][T29822] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000458079 [ 2488.337837][T29822] RDX: fffffffffffffd4d RSI: 0000000020000340 RDI: 0000000000000006 [ 2488.345804][T29822] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 2488.353761][T29822] R10: 0000000000000057 R11: 0000000000000246 R12: 00007f9efbb3d6d4 [ 2488.361731][T29822] R13: 00000000004c5761 R14: 00000000004d9728 R15: 00000000ffffffff [ 2488.370143][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2488.376014][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2488.381903][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2488.387762][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2488.393660][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2488.399501][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2488.405411][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2488.411232][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2488.417420][T29822] memory: usage 307188kB, limit 307200kB, failcnt 6502 [ 2488.426900][T29822] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2488.435886][T29822] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2488.442741][T29822] Memory cgroup stats for /syz5: cache:0KB rss:247780KB rss_huge:223232KB shmem:56KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:247804KB inactive_file:4KB active_file:0KB unevictable:4KB [ 2488.470254][T29822] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=29807,uid=0 [ 2488.485953][T29822] Memory cgroup out of memory: Killed process 29807 (syz-executor.5) total-vm:72712kB, anon-rss:4280kB, file-rss:35704kB, shmem-rss:0kB [ 2488.504595][ T1044] oom_reaper: reaped process 29807 (syz-executor.5), now anon-rss:0kB, file-rss:34908kB, shmem-rss:0kB 03:47:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(0x0) remap_file_pages(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x1, 0x0, 0x0) creat(0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10001}, 0x2d) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) 03:47:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@ipmr_getroute={0x1c, 0x1a, 0x525, 0x0, 0x0, {0xa000000, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 03:47:54 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r4 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x20, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(r0, 0x0, 0x0) ioprio_set$uid(0x3, r4, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getpid() ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x0, 0x3, &(0x7f00000000c0)='/[\x00'}, 0x30) r5 = getpgid(0xffffffffffffffff) r6 = getpgrp(r5) setresuid(0xffffffffffffffff, r4, r4) r7 = geteuid() setuid(r7) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000200)=r6) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 03:47:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000001c0)={0x0, 0x0, 0xffff, 0x0, 'syz0\x00'}) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000140)=0x7, 0x99) sendto$inet6(r1, &(0x7f0000000080)="ab", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) 03:47:54 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r4 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x20, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(r0, 0x0, 0x0) ioprio_set$uid(0x3, r4, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getpid() ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x0, 0x3, &(0x7f00000000c0)='/[\x00'}, 0x30) r5 = getpgid(0xffffffffffffffff) r6 = getpgrp(r5) setresuid(0xffffffffffffffff, r4, r4) r7 = geteuid() setuid(r7) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000200)=r6) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 03:47:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x54, 0x0, &(0x7f00000002c0)=[@decrefs, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:47:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@ipmr_getroute={0x1c, 0x1a, 0x525, 0x0, 0x0, {0xa000000, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 03:47:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@ipmr_getroute={0x1c, 0x1a, 0x525, 0x0, 0x0, {0xa000000, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) [ 2490.808990][T29854] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=3, oom_score_adj=0 [ 2490.833454][T29854] CPU: 0 PID: 29854 Comm: syz-executor.5 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2490.842521][T29854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2490.852585][T29854] Call Trace: [ 2490.855899][T29854] dump_stack+0x172/0x1f0 [ 2490.860253][T29854] dump_header+0x10f/0xb6c [ 2490.864691][T29854] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2490.870514][T29854] ? ___ratelimit+0x60/0x595 [ 2490.875640][T29854] ? do_raw_spin_unlock+0x57/0x270 [ 2490.880784][T29854] oom_kill_process.cold+0x10/0x15 [ 2490.885975][T29854] out_of_memory+0x79a/0x1280 [ 2490.890665][T29854] ? lock_downgrade+0x880/0x880 [ 2490.895521][T29854] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2490.901915][T29854] ? oom_killer_disable+0x280/0x280 03:47:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@ipmr_getroute={0x1c, 0x1a, 0x525, 0x0, 0x0, {0xa000000, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 03:47:54 executing program 1: mkdir(0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x34180, 0x40) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100f}}, 0x20) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000140)=0xa7a, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) close(r2) [ 2490.907125][T29854] ? find_held_lock+0x35/0x130 [ 2490.911964][T29854] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2490.917534][T29854] ? memcg_event_wake+0x230/0x230 [ 2490.922847][T29854] ? do_raw_spin_unlock+0x57/0x270 [ 2490.927981][T29854] ? _raw_spin_unlock+0x2d/0x50 [ 2490.932849][T29854] try_charge+0x118d/0x1790 [ 2490.937372][T29854] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2490.942976][T29854] ? mark_held_locks+0xa4/0xf0 [ 2490.947830][T29854] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 2490.947851][T29854] ? __sk_mem_raise_allocated+0x557/0x1390 03:47:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r4 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x20, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(r0, 0x0, 0x0) ioprio_set$uid(0x3, r4, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getpid() ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x0, 0x3, &(0x7f00000000c0)='/[\x00'}, 0x30) r5 = getpgid(0xffffffffffffffff) r6 = getpgrp(r5) setresuid(0xffffffffffffffff, r4, r4) r7 = geteuid() setuid(r7) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000200)=r6) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 2490.959260][T29854] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 2490.964921][T29854] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2490.970219][T29854] ? trace_hardirqs_on+0x67/0x230 [ 2490.975261][T29854] mem_cgroup_charge_skmem+0x12f/0x280 [ 2490.980734][T29854] ? mem_cgroup_sk_free+0x90/0x90 [ 2490.980752][T29854] ? lock_downgrade+0x880/0x880 [ 2490.980769][T29854] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2490.980787][T29854] ? iov_iter_advance+0x295/0xf70 [ 2490.980814][T29854] __sk_mem_raise_allocated+0x557/0x1390 [ 2490.980828][T29854] ? alloc_pages_current+0x10f/0x210 [ 2490.980852][T29854] __sk_mem_schedule+0x6d/0xe0 [ 2491.017542][T29854] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2491.023801][T29854] tcp_sendmsg_locked+0x1992/0x34b0 [ 2491.029148][T29854] ? tcp_sendpage+0x60/0x60 [ 2491.033666][T29854] ? trace_hardirqs_on+0x67/0x230 [ 2491.038702][T29854] ? lock_sock_nested+0x9a/0x120 [ 2491.043650][T29854] ? __local_bh_enable_ip+0x15a/0x270 [ 2491.049211][T29854] tcp_sendmsg+0x30/0x50 [ 2491.053464][T29854] inet_sendmsg+0x147/0x5d0 [ 2491.058067][T29854] ? ipip_gro_receive+0x100/0x100 [ 2491.063103][T29854] sock_sendmsg+0xdd/0x130 [ 2491.067620][T29854] __sys_sendto+0x262/0x380 [ 2491.072225][T29854] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2491.077625][T29854] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2491.083888][T29854] ? put_timespec64+0xda/0x140 [ 2491.088663][T29854] ? nsecs_to_jiffies+0x30/0x30 [ 2491.093538][T29854] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2491.099006][T29854] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2491.104477][T29854] ? do_syscall_64+0x26/0x610 [ 2491.109169][T29854] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2491.115249][T29854] __x64_sys_sendto+0xe1/0x1a0 [ 2491.120043][T29854] do_syscall_64+0x103/0x610 [ 2491.124819][T29854] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2491.130743][T29854] RIP: 0033:0x458079 [ 2491.134645][T29854] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2491.154257][T29854] RSP: 002b:00007f9efbb5dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2491.162691][T29854] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000458079 [ 2491.170669][T29854] RDX: fffffffffffffd4d RSI: 0000000020000340 RDI: 0000000000000006 [ 2491.178645][T29854] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2491.186627][T29854] R10: 0000000000000057 R11: 0000000000000246 R12: 00007f9efbb5e6d4 [ 2491.194609][T29854] R13: 00000000004c5761 R14: 00000000004d9728 R15: 00000000ffffffff [ 2491.230544][T29854] memory: usage 307124kB, limit 307200kB, failcnt 6608 [ 2491.237786][T29854] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2491.245653][T29854] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2491.245662][T29854] Memory cgroup stats for /syz5: cache:0KB rss:247768KB rss_huge:223232KB shmem:56KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:247796KB inactive_file:0KB active_file:0KB unevictable:4KB 03:47:55 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x4aff3cc39a1046d5, 0x0, 0x0, 0x0) [ 2491.245751][T29854] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=29838,uid=0 [ 2491.245881][T29854] Memory cgroup out of memory: Killed process 29838 (syz-executor.5) total-vm:72580kB, anon-rss:4220kB, file-rss:34816kB, shmem-rss:0kB 03:47:55 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r4 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x20, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(r0, 0x0, 0x0) ioprio_set$uid(0x3, r4, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getpid() ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x0, 0x3, &(0x7f00000000c0)='/[\x00'}, 0x30) r5 = getpgid(0xffffffffffffffff) r6 = getpgrp(r5) setresuid(0xffffffffffffffff, r4, r4) r7 = geteuid() setuid(r7) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000200)=r6) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 03:47:55 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x4aff3cc39a1046d5, 0x0, 0x0, 0x0) [ 2491.539527][T29879] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=3, oom_score_adj=0 [ 2491.552975][T29879] CPU: 0 PID: 29879 Comm: syz-executor.5 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2491.562027][T29879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2491.572072][T29879] Call Trace: [ 2491.575359][T29879] dump_stack+0x172/0x1f0 [ 2491.579687][T29879] dump_header+0x10f/0xb6c [ 2491.584088][T29879] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2491.589904][T29879] ? ___ratelimit+0x60/0x595 [ 2491.594496][T29879] ? do_raw_spin_unlock+0x57/0x270 [ 2491.599592][T29879] oom_kill_process.cold+0x10/0x15 [ 2491.604692][T29879] out_of_memory+0x79a/0x1280 [ 2491.609354][T29879] ? lock_downgrade+0x880/0x880 [ 2491.615730][T29879] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2491.622049][T29879] ? oom_killer_disable+0x280/0x280 [ 2491.627231][T29879] ? find_held_lock+0x35/0x130 [ 2491.631997][T29879] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2491.637527][T29879] ? memcg_event_wake+0x230/0x230 [ 2491.642541][T29879] ? do_raw_spin_unlock+0x57/0x270 [ 2491.647645][T29879] ? _raw_spin_unlock+0x2d/0x50 [ 2491.652496][T29879] try_charge+0x118d/0x1790 [ 2491.656988][T29879] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2491.662521][T29879] ? mark_held_locks+0xa4/0xf0 [ 2491.667275][T29879] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 2491.672901][T29879] ? __sk_mem_raise_allocated+0x557/0x1390 [ 2491.678697][T29879] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 2491.684316][T29879] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2491.689585][T29879] ? trace_hardirqs_on+0x67/0x230 [ 2491.694610][T29879] mem_cgroup_charge_skmem+0x12f/0x280 [ 2491.700054][T29879] ? mem_cgroup_sk_free+0x90/0x90 [ 2491.705073][T29879] ? lock_downgrade+0x880/0x880 [ 2491.709909][T29879] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2491.715610][T29879] ? iov_iter_advance+0x295/0xf70 [ 2491.720623][T29879] __sk_mem_raise_allocated+0x557/0x1390 [ 2491.726241][T29879] ? alloc_pages_current+0x10f/0x210 [ 2491.731520][T29879] __sk_mem_schedule+0x6d/0xe0 [ 2491.736270][T29879] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2491.742498][T29879] tcp_sendmsg_locked+0x1992/0x34b0 [ 2491.747699][T29879] ? tcp_sendpage+0x60/0x60 [ 2491.752188][T29879] ? trace_hardirqs_on+0x67/0x230 [ 2491.757195][T29879] ? lock_sock_nested+0x9a/0x120 [ 2491.762125][T29879] ? __local_bh_enable_ip+0x15a/0x270 [ 2491.767483][T29879] tcp_sendmsg+0x30/0x50 [ 2491.771712][T29879] inet_sendmsg+0x147/0x5d0 [ 2491.776197][T29879] ? ipip_gro_receive+0x100/0x100 [ 2491.781990][T29879] sock_sendmsg+0xdd/0x130 [ 2491.786396][T29879] __sys_sendto+0x262/0x380 [ 2491.790887][T29879] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2491.796268][T29879] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2491.802496][T29879] ? put_timespec64+0xda/0x140 [ 2491.807255][T29879] ? nsecs_to_jiffies+0x30/0x30 [ 2491.812098][T29879] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2491.817539][T29879] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2491.822981][T29879] ? do_syscall_64+0x26/0x610 [ 2491.827642][T29879] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2491.833693][T29879] __x64_sys_sendto+0xe1/0x1a0 [ 2491.838443][T29879] do_syscall_64+0x103/0x610 [ 2491.843020][T29879] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2491.848896][T29879] RIP: 0033:0x458079 [ 2491.852776][T29879] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2491.872377][T29879] RSP: 002b:00007f9efbb5dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2491.880769][T29879] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000458079 [ 2491.888724][T29879] RDX: fffffffffffffd4d RSI: 0000000020000340 RDI: 0000000000000006 [ 2491.896693][T29879] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2491.904646][T29879] R10: 0000000000000057 R11: 0000000000000246 R12: 00007f9efbb5e6d4 [ 2491.912603][T29879] R13: 00000000004c5761 R14: 00000000004d9728 R15: 00000000ffffffff [ 2491.930252][T29879] memory: usage 307188kB, limit 307200kB, failcnt 6801 [ 2491.938359][T29879] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2491.946695][T29879] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2491.954457][T29879] Memory cgroup stats for /syz5: cache:0KB rss:247804KB rss_huge:223232KB shmem:56KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:247784KB inactive_file:0KB active_file:0KB unevictable:4KB [ 2491.977107][T29879] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=29874,uid=0 [ 2491.993463][T29879] Memory cgroup out of memory: Killed process 29874 (syz-executor.5) total-vm:72580kB, anon-rss:4220kB, file-rss:34816kB, shmem-rss:0kB [ 2492.018752][ T1044] oom_reaper: reaped process 29874 (syz-executor.5), now anon-rss:0kB, file-rss:34744kB, shmem-rss:0kB 03:47:57 executing program 1: mkdir(0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x34180, 0x40) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100f}}, 0x20) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000140)=0xa7a, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) close(r2) 03:47:57 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r4 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x20, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(r0, 0x0, 0x0) ioprio_set$uid(0x3, r4, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getpid() ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x0, 0x3, &(0x7f00000000c0)='/[\x00'}, 0x30) r5 = getpgid(0xffffffffffffffff) r6 = getpgrp(r5) setresuid(0xffffffffffffffff, r4, r4) r7 = geteuid() setuid(r7) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000200)=r6) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 03:47:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x4aff3cc39a1046d5, 0x0, 0x0, 0x0) 03:47:57 executing program 5: r0 = socket(0x1000000000000010, 0x20000000802, 0x0) write(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000000040)="240000001a0025f00018009300edfc0e800300000000af00000000000800010048050006", 0x24) 03:47:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000001c0)={0x0, 0x0, 0xffff, 0x0, 'syz0\x00'}) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000140)=0x7, 0x99) sendto$inet6(r1, &(0x7f0000000080)="ab", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) 03:47:57 executing program 5: r0 = socket(0x1000000000000010, 0x20000000802, 0x0) write(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000000040)="240000001a0025f00018009300edfc0e800300000000af00000000000800010048050006", 0x24) 03:47:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x4aff3cc39a1046d5, 0x0, 0x0, 0x0) 03:47:57 executing program 5: r0 = socket(0x1000000000000010, 0x20000000802, 0x0) write(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000000040)="240000001a0025f00018009300edfc0e800300000000af00000000000800010048050006", 0x24) 03:47:57 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r4 = geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x20, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(r0, 0x0, 0x0) ioprio_set$uid(0x3, r4, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getpid() ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x0, 0x3, &(0x7f00000000c0)='/[\x00'}, 0x30) r5 = getpgid(0xffffffffffffffff) r6 = getpgrp(r5) setresuid(0xffffffffffffffff, r4, r4) r7 = geteuid() setuid(r7) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000200)=r6) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 03:47:57 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000500)=@ethtool_sset_info={0x12}}) 03:47:57 executing program 5: r0 = socket(0x1000000000000010, 0x20000000802, 0x0) write(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000000040)="240000001a0025f00018009300edfc0e800300000000af00000000000800010048050006", 0x24) 03:47:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x40000000000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$inet_sctp(0x2, 0x5, 0x84) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x7}]) [ 2494.391300][ C1] net_ratelimit: 26 callbacks suppressed [ 2494.391336][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2494.402881][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:47:58 executing program 1: mkdir(0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x34180, 0x40) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100f}}, 0x20) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000140)=0xa7a, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) close(r2) [ 2494.561261][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2494.567184][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2494.573130][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2494.578908][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2494.631263][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2494.637161][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2494.643148][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2494.648938][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x48, r1, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x48}}, 0x0) 03:48:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d91f63190408000340000000fb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0) 03:48:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000001c0)={0x0, 0x0, 0xffff, 0x0, 'syz0\x00'}) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000140)=0x7, 0x99) sendto$inet6(r1, &(0x7f0000000080)="ab", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f000000000000000000000000000000000000000000000000"], 0x90) 03:48:00 executing program 1: mkdir(0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x34180, 0x40) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100f}}, 0x20) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000140)=0xa7a, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) close(r2) 03:48:00 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) [ 2496.783475][T29929] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:48:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d91f63190408000340000000fb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0) [ 2496.853652][T29935] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:48:00 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) 03:48:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d91f63190408000340000000fb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0) 03:48:01 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 03:48:01 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 03:48:01 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) 03:48:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d91f63190408000340000000fb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0) 03:48:01 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 03:48:01 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 03:48:01 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 03:48:01 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 03:48:01 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 03:48:01 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) 03:48:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x7, &(0x7f0000000140)={0x0, @dev, 0x0, 0x0, 'ovf\x00'}, 0x2c) 03:48:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local}, 0xc) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x11, 0x0, 0x6) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) 03:48:01 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f85fa0)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x60}}, 0x0) 03:48:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000100)) 03:48:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff70, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r1, 0x15, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 03:48:01 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 03:48:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local}, 0xc) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x11, 0x0, 0x6) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) 03:48:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @dev}, 0x4, 0x0, 0x7a02}) 03:48:01 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) 03:48:01 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '&\t&'}, 0x8) 03:48:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x6e0]}) 03:48:01 executing program 3: r0 = socket(0x2, 0x2, 0x0) r1 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00009c1000)=0xff, 0x4) fallocate(r1, 0x0, 0xffff, 0x9) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0xfffffe06}, 0x14}}, 0x0) sendfile(r0, r1, &(0x7f0000000080)=0x400, 0x10001) 03:48:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local}, 0xc) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x11, 0x0, 0x6) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) 03:48:02 executing program 0: epoll_create1(0x0) set_mempolicy(0x4002, &(0x7f0000000380)=0x7, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mq_notify(r0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x200000000000040, 0x0) clock_gettime(0x0, &(0x7f00000005c0)) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x2}) fallocate(r0, 0x0, 0x0, 0xa6ba0) r2 = dup(r0) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000200)) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000003c0)={0x5, "bec6da4797bf953b924adfb20b7a574b7cf9b43f0f5de2bc76019a994a56ed72", 0x0, 0x0, 0xffffffffffffd310, 0xffffffffffffffff, 0x0, 0x2}) io_submit(r3, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000500)='big_key\x00', &(0x7f0000000580)={'syz'}, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000700)='fdinfo/3\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100), &(0x7f00000007c0)=0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:48:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) madvise(&(0x7f0000c24000/0x3000)=nil, 0x3000, 0xc) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 03:48:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x8c02) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000300)="b6001000000020000000ed69d2bc70f4458b62900338fc0fae1a0000002e008dbdc660f2", 0x24) 03:48:02 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 03:48:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local}, 0xc) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x11, 0x0, 0x6) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) 03:48:02 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x44}}, &(0x7f0000000480)='syzkaller\x00'}, 0x48) 03:48:02 executing program 5: r0 = semget(0xffffffffffffffff, 0x0, 0x0) semtimedop(r0, 0x0, 0x0, &(0x7f00000001c0)) syz_open_dev$evdev(0x0, 0x20, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 03:48:02 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$vnet(r1, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0}}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80000) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@loopback, 0x31, r2}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) write$cgroup_type(r3, 0x0, 0xfffffffffffffe6d) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="710000007d010000005100b700030000003003000000020000460000000000000400060000000872697374e363757367725669643a40650100250b006173796d6d657472696300737148d7", @ANYRES64, @ANYRES32], 0x57) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x8, 0xff, 0x80, 0xffff, 0x3, 0x3e, 0x2, 0x1d8, 0x40, 0xc3, 0xd9, 0x6, 0x38, 0x1, 0xfff, 0x1918, 0x8}, [{0x3, 0x100000001, 0x2, 0x7fff, 0x0, 0x5, 0x7, 0x31d}], "a34886213d1bc6bc8d00eb8900a5a25f3cec539628998483ce9500aba983cde365aac65c8bfdf54a4a72c6b2cb5a26af0113c319c94b6cef49017ad8924e20066bc7a60f32c973c56eb1d5180b27309031a384ea772cba927bcfdcbfa61ddfbbb09068dc5194997769b08b8d40e8d9e5cdabcce12c1d8fbd2f5a07668982e1ae26a7119dcfea66e5517d48dc15f87e7e1c80cd9e9f5ffa73ac52365b6d67ce10b40561efb3662be8928b720be9bd841dc6eb9799777a442bcb2843fe57002acd2d535274e30d19570466cf5f833e7fdd6b3917cb84c35e673de99c", [[], [], [], [], [], []]}, 0x753) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000180)={0x3, 0x4}) 03:48:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) madvise(&(0x7f0000c24000/0x3000)=nil, 0x3000, 0xc) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 03:48:02 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000009c0)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x300}}}, 0x5c) 03:48:02 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {}, [], {}, [{0x8, 0x5}], {0x10, 0x2}}, 0x2c, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') 03:48:02 executing program 0: epoll_create1(0x0) set_mempolicy(0x4002, &(0x7f0000000380)=0x7, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mq_notify(r0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x200000000000040, 0x0) clock_gettime(0x0, &(0x7f00000005c0)) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x2}) fallocate(r0, 0x0, 0x0, 0xa6ba0) r2 = dup(r0) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000200)) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000003c0)={0x5, "bec6da4797bf953b924adfb20b7a574b7cf9b43f0f5de2bc76019a994a56ed72", 0x0, 0x0, 0xffffffffffffd310, 0xffffffffffffffff, 0x0, 0x2}) io_submit(r3, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000500)='big_key\x00', &(0x7f0000000580)={'syz'}, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000700)='fdinfo/3\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100), &(0x7f00000007c0)=0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:48:02 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/190) 03:48:02 executing program 5: r0 = socket(0x11, 0x80003, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000001500)={'hwsim0\x00'}) 03:48:02 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="a9fc844142db005700010000000000080000004451a6382a1b208053cad2f86c40e429a702a166bb4d944555f3fdff034cd60e1552797a8ceceda2b97829753e46f28e240fda433aed97132db2e57146158e6e52bd1704b4159f57b4a0d69091d89f76c11eb6796dd201de90ca5099cf1e6b8f6e2bd781355943a78f012f3471640da9cc6be5289674cb06ce0b44daf23e6a69c457eef84837294d9625c9add1fc01003455eeb1dda25c1577af51a741c1a31e61d64618245e09cbff3f3a4662bdbba8babdf357"], 0xc7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000140), 0x7fff) 03:48:02 executing program 5: epoll_create1(0x0) r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x4) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000240), 0x0, 0x0, 0x0, 0x8, 0x0, 0x13bf, {0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, "2ca5efa3aba691d6e07bbc10ba6d0c5b6b40bbf95a5d2f9d892c7a4320755ebc"}}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000005c0)) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) r1 = dup(r0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000200)) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000003c0)={0x5, "bec6da4797bf953b924adfb20b7a574b7cf9b43f0f5de2bc76019a994a56ed72", 0x0, 0x1800, 0xffffffffffffd310, 0xffffffffffffffff, 0x5, 0x2, 0x401}) io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@int=0x9480, 0x4) r3 = add_key(&(0x7f0000000500)='big_key\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000006c0)="c7b6f041b23aa46897b2fff79b75", 0xe, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000700)='fdinfo/3\x00', &(0x7f0000000740)) getsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x5, 0x6, 0x7ff, 0x8, 0x10001, 0x3, 0x10001}) 03:48:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) madvise(&(0x7f0000c24000/0x3000)=nil, 0x3000, 0xc) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 03:48:02 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$vnet(r1, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0}}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80000) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@loopback, 0x31, r2}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) write$cgroup_type(r3, 0x0, 0xfffffffffffffe6d) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="710000007d010000005100b700030000003003000000020000460000000000000400060000000872697374e363757367725669643a40650100250b006173796d6d657472696300737148d7", @ANYRES64, @ANYRES32], 0x57) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x8, 0xff, 0x80, 0xffff, 0x3, 0x3e, 0x2, 0x1d8, 0x40, 0xc3, 0xd9, 0x6, 0x38, 0x1, 0xfff, 0x1918, 0x8}, [{0x3, 0x100000001, 0x2, 0x7fff, 0x0, 0x5, 0x7, 0x31d}], "a34886213d1bc6bc8d00eb8900a5a25f3cec539628998483ce9500aba983cde365aac65c8bfdf54a4a72c6b2cb5a26af0113c319c94b6cef49017ad8924e20066bc7a60f32c973c56eb1d5180b27309031a384ea772cba927bcfdcbfa61ddfbbb09068dc5194997769b08b8d40e8d9e5cdabcce12c1d8fbd2f5a07668982e1ae26a7119dcfea66e5517d48dc15f87e7e1c80cd9e9f5ffa73ac52365b6d67ce10b40561efb3662be8928b720be9bd841dc6eb9799777a442bcb2843fe57002acd2d535274e30d19570466cf5f833e7fdd6b3917cb84c35e673de99c", [[], [], [], [], [], []]}, 0x753) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000180)={0x3, 0x4}) 03:48:03 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$vnet(r1, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0}}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80000) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@loopback, 0x31, r2}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) write$cgroup_type(r3, 0x0, 0xfffffffffffffe6d) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="710000007d010000005100b700030000003003000000020000460000000000000400060000000872697374e363757367725669643a40650100250b006173796d6d657472696300737148d7", @ANYRES64, @ANYRES32], 0x57) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x8, 0xff, 0x80, 0xffff, 0x3, 0x3e, 0x2, 0x1d8, 0x40, 0xc3, 0xd9, 0x6, 0x38, 0x1, 0xfff, 0x1918, 0x8}, [{0x3, 0x100000001, 0x2, 0x7fff, 0x0, 0x5, 0x7, 0x31d}], "a34886213d1bc6bc8d00eb8900a5a25f3cec539628998483ce9500aba983cde365aac65c8bfdf54a4a72c6b2cb5a26af0113c319c94b6cef49017ad8924e20066bc7a60f32c973c56eb1d5180b27309031a384ea772cba927bcfdcbfa61ddfbbb09068dc5194997769b08b8d40e8d9e5cdabcce12c1d8fbd2f5a07668982e1ae26a7119dcfea66e5517d48dc15f87e7e1c80cd9e9f5ffa73ac52365b6d67ce10b40561efb3662be8928b720be9bd841dc6eb9799777a442bcb2843fe57002acd2d535274e30d19570466cf5f833e7fdd6b3917cb84c35e673de99c", [[], [], [], [], [], []]}, 0x753) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000180)={0x3, 0x4}) 03:48:03 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$vnet(r1, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0}}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80000) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@loopback, 0x31, r2}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) write$cgroup_type(r3, 0x0, 0xfffffffffffffe6d) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="710000007d010000005100b700030000003003000000020000460000000000000400060000000872697374e363757367725669643a40650100250b006173796d6d657472696300737148d7", @ANYRES64, @ANYRES32], 0x57) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x8, 0xff, 0x80, 0xffff, 0x3, 0x3e, 0x2, 0x1d8, 0x40, 0xc3, 0xd9, 0x6, 0x38, 0x1, 0xfff, 0x1918, 0x8}, [{0x3, 0x100000001, 0x2, 0x7fff, 0x0, 0x5, 0x7, 0x31d}], "a34886213d1bc6bc8d00eb8900a5a25f3cec539628998483ce9500aba983cde365aac65c8bfdf54a4a72c6b2cb5a26af0113c319c94b6cef49017ad8924e20066bc7a60f32c973c56eb1d5180b27309031a384ea772cba927bcfdcbfa61ddfbbb09068dc5194997769b08b8d40e8d9e5cdabcce12c1d8fbd2f5a07668982e1ae26a7119dcfea66e5517d48dc15f87e7e1c80cd9e9f5ffa73ac52365b6d67ce10b40561efb3662be8928b720be9bd841dc6eb9799777a442bcb2843fe57002acd2d535274e30d19570466cf5f833e7fdd6b3917cb84c35e673de99c", [[], [], [], [], [], []]}, 0x753) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000180)={0x3, 0x4}) 03:48:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) madvise(&(0x7f0000c24000/0x3000)=nil, 0x3000, 0xc) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 03:48:03 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$vnet(r1, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0}}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80000) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@loopback, 0x31, r2}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) write$cgroup_type(r3, 0x0, 0xfffffffffffffe6d) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="710000007d010000005100b700030000003003000000020000460000000000000400060000000872697374e363757367725669643a40650100250b006173796d6d657472696300737148d7", @ANYRES64, @ANYRES32], 0x57) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x8, 0xff, 0x80, 0xffff, 0x3, 0x3e, 0x2, 0x1d8, 0x40, 0xc3, 0xd9, 0x6, 0x38, 0x1, 0xfff, 0x1918, 0x8}, [{0x3, 0x100000001, 0x2, 0x7fff, 0x0, 0x5, 0x7, 0x31d}], "a34886213d1bc6bc8d00eb8900a5a25f3cec539628998483ce9500aba983cde365aac65c8bfdf54a4a72c6b2cb5a26af0113c319c94b6cef49017ad8924e20066bc7a60f32c973c56eb1d5180b27309031a384ea772cba927bcfdcbfa61ddfbbb09068dc5194997769b08b8d40e8d9e5cdabcce12c1d8fbd2f5a07668982e1ae26a7119dcfea66e5517d48dc15f87e7e1c80cd9e9f5ffa73ac52365b6d67ce10b40561efb3662be8928b720be9bd841dc6eb9799777a442bcb2843fe57002acd2d535274e30d19570466cf5f833e7fdd6b3917cb84c35e673de99c", [[], [], [], [], [], []]}, 0x753) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000180)={0x3, 0x4}) 03:48:03 executing program 0: epoll_create1(0x0) set_mempolicy(0x4002, &(0x7f0000000380)=0x7, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mq_notify(r0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x200000000000040, 0x0) clock_gettime(0x0, &(0x7f00000005c0)) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x2}) fallocate(r0, 0x0, 0x0, 0xa6ba0) r2 = dup(r0) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000200)) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000003c0)={0x5, "bec6da4797bf953b924adfb20b7a574b7cf9b43f0f5de2bc76019a994a56ed72", 0x0, 0x0, 0xffffffffffffd310, 0xffffffffffffffff, 0x0, 0x2}) io_submit(r3, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000500)='big_key\x00', &(0x7f0000000580)={'syz'}, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000700)='fdinfo/3\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100), &(0x7f00000007c0)=0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:48:03 executing program 5: epoll_create1(0x0) r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x4) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000240), 0x0, 0x0, 0x0, 0x8, 0x0, 0x13bf, {0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, "2ca5efa3aba691d6e07bbc10ba6d0c5b6b40bbf95a5d2f9d892c7a4320755ebc"}}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000005c0)) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) r1 = dup(r0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000200)) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000003c0)={0x5, "bec6da4797bf953b924adfb20b7a574b7cf9b43f0f5de2bc76019a994a56ed72", 0x0, 0x1800, 0xffffffffffffd310, 0xffffffffffffffff, 0x5, 0x2, 0x401}) io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@int=0x9480, 0x4) r3 = add_key(&(0x7f0000000500)='big_key\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000006c0)="c7b6f041b23aa46897b2fff79b75", 0xe, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000700)='fdinfo/3\x00', &(0x7f0000000740)) getsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x5, 0x6, 0x7ff, 0x8, 0x10001, 0x3, 0x10001}) 03:48:03 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$vnet(r1, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0}}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80000) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@loopback, 0x31, r2}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) write$cgroup_type(r3, 0x0, 0xfffffffffffffe6d) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="710000007d010000005100b700030000003003000000020000460000000000000400060000000872697374e363757367725669643a40650100250b006173796d6d657472696300737148d7", @ANYRES64, @ANYRES32], 0x57) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x8, 0xff, 0x80, 0xffff, 0x3, 0x3e, 0x2, 0x1d8, 0x40, 0xc3, 0xd9, 0x6, 0x38, 0x1, 0xfff, 0x1918, 0x8}, [{0x3, 0x100000001, 0x2, 0x7fff, 0x0, 0x5, 0x7, 0x31d}], "a34886213d1bc6bc8d00eb8900a5a25f3cec539628998483ce9500aba983cde365aac65c8bfdf54a4a72c6b2cb5a26af0113c319c94b6cef49017ad8924e20066bc7a60f32c973c56eb1d5180b27309031a384ea772cba927bcfdcbfa61ddfbbb09068dc5194997769b08b8d40e8d9e5cdabcce12c1d8fbd2f5a07668982e1ae26a7119dcfea66e5517d48dc15f87e7e1c80cd9e9f5ffa73ac52365b6d67ce10b40561efb3662be8928b720be9bd841dc6eb9799777a442bcb2843fe57002acd2d535274e30d19570466cf5f833e7fdd6b3917cb84c35e673de99c", [[], [], [], [], [], []]}, 0x753) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000180)={0x3, 0x4}) 03:48:03 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$vnet(r1, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0}}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80000) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@loopback, 0x31, r2}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) write$cgroup_type(r3, 0x0, 0xfffffffffffffe6d) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="710000007d010000005100b700030000003003000000020000460000000000000400060000000872697374e363757367725669643a40650100250b006173796d6d657472696300737148d7", @ANYRES64, @ANYRES32], 0x57) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x8, 0xff, 0x80, 0xffff, 0x3, 0x3e, 0x2, 0x1d8, 0x40, 0xc3, 0xd9, 0x6, 0x38, 0x1, 0xfff, 0x1918, 0x8}, [{0x3, 0x100000001, 0x2, 0x7fff, 0x0, 0x5, 0x7, 0x31d}], "a34886213d1bc6bc8d00eb8900a5a25f3cec539628998483ce9500aba983cde365aac65c8bfdf54a4a72c6b2cb5a26af0113c319c94b6cef49017ad8924e20066bc7a60f32c973c56eb1d5180b27309031a384ea772cba927bcfdcbfa61ddfbbb09068dc5194997769b08b8d40e8d9e5cdabcce12c1d8fbd2f5a07668982e1ae26a7119dcfea66e5517d48dc15f87e7e1c80cd9e9f5ffa73ac52365b6d67ce10b40561efb3662be8928b720be9bd841dc6eb9799777a442bcb2843fe57002acd2d535274e30d19570466cf5f833e7fdd6b3917cb84c35e673de99c", [[], [], [], [], [], []]}, 0x753) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000180)={0x3, 0x4}) 03:48:03 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="a9fc844142db005700010000000000080000004451a6382a1b208053cad2f86c40e429a702a166bb4d944555f3fdff034cd60e1552797a8ceceda2b97829753e46f28e240fda433aed97132db2e57146158e6e52bd1704b4159f57b4a0d69091d89f76c11eb6796dd201de90ca5099cf1e6b8f6e2bd781355943a78f012f3471640da9cc6be5289674cb06ce0b44daf23e6a69c457eef84837294d9625c9add1fc01003455eeb1dda25c1577af51a741c1a31e61d64618245e09cbff3f3a4662bdbba8babdf357"], 0xc7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000140), 0x7fff) 03:48:03 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$vnet(r1, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0}}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80000) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@loopback, 0x31, r2}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) write$cgroup_type(r3, 0x0, 0xfffffffffffffe6d) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="710000007d010000005100b700030000003003000000020000460000000000000400060000000872697374e363757367725669643a40650100250b006173796d6d657472696300737148d7", @ANYRES64, @ANYRES32], 0x57) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x8, 0xff, 0x80, 0xffff, 0x3, 0x3e, 0x2, 0x1d8, 0x40, 0xc3, 0xd9, 0x6, 0x38, 0x1, 0xfff, 0x1918, 0x8}, [{0x3, 0x100000001, 0x2, 0x7fff, 0x0, 0x5, 0x7, 0x31d}], "a34886213d1bc6bc8d00eb8900a5a25f3cec539628998483ce9500aba983cde365aac65c8bfdf54a4a72c6b2cb5a26af0113c319c94b6cef49017ad8924e20066bc7a60f32c973c56eb1d5180b27309031a384ea772cba927bcfdcbfa61ddfbbb09068dc5194997769b08b8d40e8d9e5cdabcce12c1d8fbd2f5a07668982e1ae26a7119dcfea66e5517d48dc15f87e7e1c80cd9e9f5ffa73ac52365b6d67ce10b40561efb3662be8928b720be9bd841dc6eb9799777a442bcb2843fe57002acd2d535274e30d19570466cf5f833e7fdd6b3917cb84c35e673de99c", [[], [], [], [], [], []]}, 0x753) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000180)={0x3, 0x4}) 03:48:03 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$vnet(r1, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0}}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80000) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@loopback, 0x31, r2}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) write$cgroup_type(r3, 0x0, 0xfffffffffffffe6d) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="710000007d010000005100b700030000003003000000020000460000000000000400060000000872697374e363757367725669643a40650100250b006173796d6d657472696300737148d7", @ANYRES64, @ANYRES32], 0x57) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x8, 0xff, 0x80, 0xffff, 0x3, 0x3e, 0x2, 0x1d8, 0x40, 0xc3, 0xd9, 0x6, 0x38, 0x1, 0xfff, 0x1918, 0x8}, [{0x3, 0x100000001, 0x2, 0x7fff, 0x0, 0x5, 0x7, 0x31d}], "a34886213d1bc6bc8d00eb8900a5a25f3cec539628998483ce9500aba983cde365aac65c8bfdf54a4a72c6b2cb5a26af0113c319c94b6cef49017ad8924e20066bc7a60f32c973c56eb1d5180b27309031a384ea772cba927bcfdcbfa61ddfbbb09068dc5194997769b08b8d40e8d9e5cdabcce12c1d8fbd2f5a07668982e1ae26a7119dcfea66e5517d48dc15f87e7e1c80cd9e9f5ffa73ac52365b6d67ce10b40561efb3662be8928b720be9bd841dc6eb9799777a442bcb2843fe57002acd2d535274e30d19570466cf5f833e7fdd6b3917cb84c35e673de99c", [[], [], [], [], [], []]}, 0x753) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000180)={0x3, 0x4}) 03:48:04 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = syz_open_pts(r1, 0x40001) syz_extract_tcp_res(0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x14) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) kcmp(r0, r0, 0x0, r2, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040004) 03:48:04 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$vnet(r1, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0}}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80000) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@loopback, 0x31, r2}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) write$cgroup_type(r3, 0x0, 0xfffffffffffffe6d) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="710000007d010000005100b700030000003003000000020000460000000000000400060000000872697374e363757367725669643a40650100250b006173796d6d657472696300737148d7", @ANYRES64, @ANYRES32], 0x57) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x8, 0xff, 0x80, 0xffff, 0x3, 0x3e, 0x2, 0x1d8, 0x40, 0xc3, 0xd9, 0x6, 0x38, 0x1, 0xfff, 0x1918, 0x8}, [{0x3, 0x100000001, 0x2, 0x7fff, 0x0, 0x5, 0x7, 0x31d}], "a34886213d1bc6bc8d00eb8900a5a25f3cec539628998483ce9500aba983cde365aac65c8bfdf54a4a72c6b2cb5a26af0113c319c94b6cef49017ad8924e20066bc7a60f32c973c56eb1d5180b27309031a384ea772cba927bcfdcbfa61ddfbbb09068dc5194997769b08b8d40e8d9e5cdabcce12c1d8fbd2f5a07668982e1ae26a7119dcfea66e5517d48dc15f87e7e1c80cd9e9f5ffa73ac52365b6d67ce10b40561efb3662be8928b720be9bd841dc6eb9799777a442bcb2843fe57002acd2d535274e30d19570466cf5f833e7fdd6b3917cb84c35e673de99c", [[], [], [], [], [], []]}, 0x753) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000180)={0x3, 0x4}) 03:48:04 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x71, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) 03:48:04 executing program 0: epoll_create1(0x0) set_mempolicy(0x4002, &(0x7f0000000380)=0x7, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mq_notify(r0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x200000000000040, 0x0) clock_gettime(0x0, &(0x7f00000005c0)) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x2}) fallocate(r0, 0x0, 0x0, 0xa6ba0) r2 = dup(r0) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000200)) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000003c0)={0x5, "bec6da4797bf953b924adfb20b7a574b7cf9b43f0f5de2bc76019a994a56ed72", 0x0, 0x0, 0xffffffffffffd310, 0xffffffffffffffff, 0x0, 0x2}) io_submit(r3, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000500)='big_key\x00', &(0x7f0000000580)={'syz'}, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000700)='fdinfo/3\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100), &(0x7f00000007c0)=0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:48:04 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="a9fc844142db005700010000000000080000004451a6382a1b208053cad2f86c40e429a702a166bb4d944555f3fdff034cd60e1552797a8ceceda2b97829753e46f28e240fda433aed97132db2e57146158e6e52bd1704b4159f57b4a0d69091d89f76c11eb6796dd201de90ca5099cf1e6b8f6e2bd781355943a78f012f3471640da9cc6be5289674cb06ce0b44daf23e6a69c457eef84837294d9625c9add1fc01003455eeb1dda25c1577af51a741c1a31e61d64618245e09cbff3f3a4662bdbba8babdf357"], 0xc7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000140), 0x7fff) 03:48:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) [ 2500.628185][ C1] net_ratelimit: 26 callbacks suppressed [ 2500.628194][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2500.639766][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2500.798128][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2500.804027][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2500.809979][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2500.815784][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:04 executing program 5: epoll_create1(0x0) r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x4) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000240), 0x0, 0x0, 0x0, 0x8, 0x0, 0x13bf, {0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, "2ca5efa3aba691d6e07bbc10ba6d0c5b6b40bbf95a5d2f9d892c7a4320755ebc"}}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000005c0)) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) r1 = dup(r0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000200)) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000003c0)={0x5, "bec6da4797bf953b924adfb20b7a574b7cf9b43f0f5de2bc76019a994a56ed72", 0x0, 0x1800, 0xffffffffffffd310, 0xffffffffffffffff, 0x5, 0x2, 0x401}) io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@int=0x9480, 0x4) r3 = add_key(&(0x7f0000000500)='big_key\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000006c0)="c7b6f041b23aa46897b2fff79b75", 0xe, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000700)='fdinfo/3\x00', &(0x7f0000000740)) getsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x5, 0x6, 0x7ff, 0x8, 0x10001, 0x3, 0x10001}) 03:48:04 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x71, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) 03:48:04 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x104e21, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/16, 0xfd0f}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/39, 0x27}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 03:48:04 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f00000001c0)='./file2\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file2\x00') [ 2500.868140][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2500.873973][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2500.879844][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2500.885648][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:04 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)) 03:48:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffd76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100030e000000030000000000000005000600000000000a0000400000000400000000000000000000002100004000000100000000000002000100010000fdff00000200fd000005000500000000000a004872bbb6896209000000000000009aec3f3f7710aa000000ff1700400000"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x40000000000006c, 0x0) [ 2500.934229][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 2500.934242][ T26] audit: type=1804 audit(2000000884.838:1450): pid=30141 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="file2" dev="sda1" ino=17289 res=1 03:48:05 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x71, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) 03:48:05 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000c00)="1717efc41bc4143b4c398ff1f1c40c3cd9eaea910d3f3477e4f1cd4e5121819a4e3f4239f7a798a7ab28a2867829b1e92bd20ab67381cea048bff0f843bb4e4d0b84e7ff198dc587ad175a850a0f7a164d5873a30ee06f752d44774de3d715c9eaa40bda572d15e0402116abd85f13690c5e26f9d6379677e665624230b4deaf51c393e65e0472c4e4c26fea9de1bdf0faca0064f60d77812badbe9a04f78f25ac2149c21b54058d3fc782bd207a99a6ca211097f43a47e330e249a57be6269b17a977b3716bd5e58a6a852884357eeaf34f5af6763b4b1d33d406fd89e16ecd6f299388cedfba32855f6ff803c3ca853f94ac1df59f0efc012f6c570b354646156199b696e70c265130dde13545bebfd53cf5c535ab76632f470d06261fee7610449f3fdc08a8e89e6fd070df02618e57d20efa4428d63c5de9bfd64ad70e40b66bc30eb31495a067bc811139f0d0070c467e7c82f89116ae48aee2194cc929bcaa76a2b72766bb59ca43a9b3b1df00af00bfd8a2a20947f314e55357710ea1ae214754781abe62134f4a4d25fcdf3a2be92711fd6d70d14113ee1e88f4922cb9eeed5ef582700b428f52091cb2c07cff31c97081f25b6bb27d682e9e7dd790adf3e717c61f40a8dd2306e98d3325d1b3853cfd88abe0fe5933dc03f5487e257ce4d8eb15556f68c6610b3c81ac8ffd1ab66ae06b28c0c765a75505806a5caa4f396b80f54cf9d67ee99345cbf27628cfc291a1c0c56bb7aa4dbf8753e59353606a19f05132e4a8db584e045dd114ef553b6d7187eae64ed7ae7d379a392ac06afd75ffb16a914a1443ec9e0487155d465970aa50516cd50811e7a4c52f94e71ffc0b99419734dd4f3e3aa0a62688a314a73c83e1ec9e4aad271894ca344b2e40f239b77f3a4ab46f969a5e7d085b3a74b9d7bad646ba062203488d09744aebbe13e8409ec2f51de99b99f82d030adf852c92fc3e64f79e50b9dd36e0317caa200a0c209e96d29b8cc929408db1e6e4efd4edbe4e5c97270e4066379e6be37794476b9b02fb6fc4c0c81d79e5b23879ef7c48cef88dd69a1685fc0f3310d13b1e6378863471b5ff8fe865757f191127cc5fd160bb3d2f2ab8c88f0f2bf18d8dd24775020d95aaf522307644bcd1d086a2bb608f2c9c50177ce256d8e5cb9e8419e8c43b50421d6bae47a781fb64be6954161b6b9fbf669279819bf8d44ace2bbedf1007915c77bd05e5f31cea83ef6a2415c14045b8fa64255c4461bf959c99e8b4e7198c8ad53cb97d98f7972cc3a2004fec7edf5577a89e2f6ce4358b4911a538c78acf6be622c2a315827ed97c56323c8f6b3930d9a366987eb344f72cc789fbce4a23a51f5168936390e7c0312baae0e2aec3a8ddc6af721d80b19c539405362865d80dbfaa77588e8c347ea50e60bb59690872cdb0d8afe6a66d77dff167ddda3d506998182a688e19c2f38cd06de7d4f97890dc687df71603f257aabe1ab3779880fce50d4dbfb11c4251c341130e45feaeed940328fe336b8c3af64c6b7ba676e49b041679881ed78475c8b83b84c82f6410098212034c27ec580f0ea3c09711b79896e47b0dc667ea4b739ded5080d0ccfd14220bc56c46027ed650d43d0512732960d6bc7461a132d485f1d455256e0372d9adeb37b43231c1ec2da0764e9de870a08cec8ace716c4be88f6a16e317dc3c41ee33aa48dab112c19b523dd6d1026e0e28e2a03825d9cd9a416ec67fb036c1efcd7880272ec532ef711de49762e90e5d4d5c4ad09a880cd6c84dddf1feac9313e2aebfe597007e69642248fcf82cfd90b74c71a714aa7856641efad919a24807e9d2079e6f4a3f9eacda790873904a2c6932a637a4b5d93b99930872c5f41724f44db4f64f8725c858887eaa47fa1db155cb4677181dc4b3e6c9b4499f03bb361b9c769851e855b0e61cb30afda01a10996b7879cc40fe7fdb6e7520534ee6c34fac0a1cf25978d846e463538d6676f33652810a2818d204790b35cd32afc341dcb8134d476dd0589ed9989175b020dd87f492b9b096f02a4044bce1ee5d4e02190d8783a2bc3a76a76f7b1d747454fa47d426c7325da17ce5b0147e1c89fdd234852702f7ba756682f555df0b3a0bfea94a1078bf5a88d5efc00a6276b761b6fb7cc92f0626d11d7b001568c06a92b5d685c44164717dd49ca1b2b3352805a1f64fca24ec0bd63fe05fed44fcbfc29a6f7d359885307c6a498cbd28cc1b6e11dcdc4f26e840086d41cfbb6d4ad3b4c29b4cdc402acd2d342913e1e7b2bac7ce8904b2ede590fcb61bc3a4f29a089cd460832a8f5b4574261ecef1ad838d7d838d90827c6c23eabc9a8fe50da14f34f4110e5e275f431cb9eb552961017bfa7a1b3486ec96630f1f70f4b1abb1cdb3daba65d7ebd1bd35889323a2c7f686baa3f08b41b9a508a5fece00dbce9987f4337e27d3ef6ded30d764f8ef4be9728976050d416dcab034f15123b627f145e9d48fa9e7c834cc3f663ad81ac3e37e13b8eae1fe42a98046b676660fa74ae658eea2864a3a9b510f618891e32d44fdab81e981ce9ef376331827d97883b6a4372e849787effeb9a518ada7df9d7abeae8f12f0a5635db71fee882d241f12db79bb6d26aceaaff516d1bb1fc0b919dee796715a327341a93791567110d914b04a7f1afbacc6975de661d4159dbe94e21086a667229ada9ae3210197d7643eceb9e7b534c82631455e834fa201ab01b8732941c505aeae840c74426aff715c1f2c504562ac9f095b17f5e8243d51af6c04cf7630fd29d3276d1ca5472e9f681097530e68040dfaa387816c43212f1d804a43e08944c548e5c676bcc84b7db26065bfc886176a869db5adfd86f0e8d6b586c68da2f62f360425de40d2699074035b9bad7d9aafd999ab86fa3248fe0599e971fb2a09edf7d5c8b7d003af58a199f7f3560f4801fc95f319c93c58940cb3766cb3ab997faa731f270d0387ead886bd58d9236864bee68d0faf92909ad7749174383655b310811392d1d1878123ac93bd1c359c96e5be7ed43308254602195241cee52098d26e9dc6c1c2599a7d577c8003dcffa8ca56052caebec0a480acdf95c3055bb0673ab3a0530b104c7eb67b0e751d06307cdcb835882352b12b24edb654f850912f061133b98c16d75a4c416452a1c0586e474e8ceb96f5b12ce59425e390e57130e56022105150c27e52745c523eb0a309649fb2cbe52a4cf8acda81f44f73aecd95bc26a1af32a2b68a90412c648dc8ec6b8db801e29a5f172ea74c26ee373fb77f977987d601e185f9cc6899cf1977da27ac2dafc04f98ca2b0ffc00977d13b23187443c7f634adaf68806169b74cd4ce9d95a0028c66a69ec3fa739d86611e4049d0376bf3ada812f6234fb8271f0051fe29c24b5fecc7ecf2e7c3eead48f0d18d7a5adab8bdcea3a47d6d856d51e5177864b6da060d4582be78f70a8405d5fea458d5ad2ded37ff9684dbb70f00aa67e0b6fbf13c52a2a654cec69a89147d9b46d0ea799fd666276a308b100bfe7ef1568e649564babba6ad2e8cc753b9af252684f24c2fa3380e6cd4a59abb716b68f68b0c412fd527bf27bb62157ed5f2715d9e11dca57866c25fc20e3a0ee7d09e58ba54adf00e10fba590672298d60f05a88320030810370ae81b5b52bfc31e33f0004bda9051e61d03dacf1dd95625da19d68f5fa3e01f92febd883180103b068de84cb2d6839ff60bd15a80dcbaad271c71a2d69b93a6ec488ec24d3873faa8f8b9736bebd40736aa15e5f046f68c6ced6b3a0d30da06576c2848c87ebd1240132a0e2063f989061a6fb8172d67f91719f944ef58b395b1584c0b2d80cfe44edf9f520ea6cb547116ea0831124008bb910dd404695e9d6be236822053e77055788a017cddf0080b4b872edd29891568cdc29a8a2f0c80336ebd5c4cc1d06f0f87f160ee4677be05f7c904fb45c1e516a30bbbbd45e7b08f600f0d42788693be04b6105707c82aa59db511834321d831b18443261b75a2d501faba83282fca83fe673c8f5e1aee904d365469a9c2d16446111560d6c8470d52c8feba2809ec6fc53684e204737aed3b0df27f6c6cf996c8e8033fdcf1ec390a2e97936d5b716602ac9fcc8c9d0691511aedb5c133fbf4209136e37a0433940d23a2d797b4a8f73fb8673f06cd8cb7572c31b0a9a9e02ac466e204550198f1868bd96f64022696bcb9fbc155ff4259abdbd9918eaf003e1f06fb45bc5ede5a9456923f50229206e5635923f1313b8053a6253f7954c90ddfd364ca3a9ca3ac78b90c9c3f0ea08ddd74aca087749f4eac65b7d052a7df03685d9e8edb8e67548ac380140be039c5cd9efcf81fe89e155e36a98656f611da9eff2fa03d7def94d618d51d71b2133ec02619b7d0d71c50038ec21e3cc754e118f0a36c3296195b64e2d11fdb152bd7ff526235360e776ec8c4ee7d801a8b49fde7032a5a6b35cabf494801673d0b42411d95f33deded81d9714130797c6129e922af97ecb3a7feacbc6d9d78df77fc046c6bc7456021376ecc417c3dbd9eb2ddcf181b2f16508b64df6db1d0d4a06e030119b887f507a4c2d11ca62a012933086f809754fcdb9ad87e290215895808e79262e729b39588608a56e925ec8f8f721f608a0df79897b89c7e93ec8ba4ec27ddf3c8b3b392be1c20d029f43825ba871263f5541d35f78ab783389046e6aea2ba6c355a3fff7e3e9304925404abcad3a1a36646ad54804bd056fd7dd75b9a54a06bfda035793b1c04f5fea6872ae0f15ab048c4510a8b0d5fdb83eeabd6dce289eef9d3e09c111469ee16e1c02bced3bb0fa82cf68de77dd60766f423d88ff01e4e1af28500d38fc0cc8b233f7ebcc69443b168e0c2ef8c93f4795034006f9125b20db2db43e535011607504a43be0d19cd328f8c7d84006d8669861a2d63e952a11c9e9a039b89675eda1eca6b79460640e6ba643e01d36a647a019b672bdf982c0d346b9e3ca5c623ea46117d789a1e85ecfb6d5792ac1351eeadced3bf47d95e67579abeefc3ea5d184ddca6694319d258da5ca51939e590342c2aced27472d3b9f4a676d1d3545911e7a07505a5ae001894288a93d4d0c264b4e61b813e2cc594a7822da836610fd05246d52b7dc96a969a43d1f1f42891350d5714f865adfb47cd639fb6e0b5302e2bbdaf4f3a7118ba784b4526d4948dea071b85e96dc0a31f90cb0bec2e175c6e5d160e677f2fce7b88d229e6fc54ee4e4d466e3ee2e04c14887530c67e4ea23130b52519504491e493cc26a8d80610f11c8c1243006f5f034106fb3648eedb068401641b4afc8d0b87c454c2d4d168b6071a0cbc96dc098ed4a7f60773249aedf662c5505e8f2018c0dc5a3ae91353acc9be0d71e4f5e5cb4d1c94b66efd9f9f9c3c81b18e5fe47d8db81623cf319c2dfcfe3ab97a5cd25a4dd20177ea468bca45556dc732051a38b6c0315f5ffc666e9b3fa96c98188529dc29b0eb1e2bb9e84144658d909eb6d39c3029d644a504fc5bf7230cf961822e5a2d01fe12c452956d23019c0ac9a35f64f35b2a6e73fdc065125c41f996b662ea77b983b9e926d1fea2e6598b0136f9cce54b57bc8514da35a8b05307eb2d6eb0f21d45ebe25394d578276f999329106592f03e2649c280dd178207933f3e75d53fed4b12c62cf2b1485af5fe10178bf9deee690c4045cf3a5c91643999077f9088a7d493a16c9bf585d6d340da9d626f9787729b779dfb11f6c25676108cd2f404c18f4bff2ab3e71d7c0a9bb2386", 0x1000}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x200) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000004c0)=ANY=[@ANYBLOB="b400000081f715c493a90de48a0a470993c95631a222116d17145b7cb3f4615099b4b71e348155cd02ee14beb3f9ce7e2c7b060cc5a30c42ee5b534608af0b16e89c90ac14d9f8c29792303f5bba809b014f6a79fc87a0f39fbdc4fce2857f8cca7ccf2af1fc566a9b180807fe8de9c6caed1b724a39e8be8a8e2fdd784270b60ad650563b0ae3575a92b9a757ee8394df1a873c7b0fabfcfe7370b0c7a2f41f778301fbaad2c4964185742538"], 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x329}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty, 0x100000000}}, 0x200, 0x4}, &(0x7f00000002c0)=0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 03:48:05 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0,workdir=.']) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 03:48:05 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x200080044100, &(0x7f0000000080)) [ 2501.336589][T30165] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 03:48:05 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="a9fc844142db005700010000000000080000004451a6382a1b208053cad2f86c40e429a702a166bb4d944555f3fdff034cd60e1552797a8ceceda2b97829753e46f28e240fda433aed97132db2e57146158e6e52bd1704b4159f57b4a0d69091d89f76c11eb6796dd201de90ca5099cf1e6b8f6e2bd781355943a78f012f3471640da9cc6be5289674cb06ce0b44daf23e6a69c457eef84837294d9625c9add1fc01003455eeb1dda25c1577af51a741c1a31e61d64618245e09cbff3f3a4662bdbba8babdf357"], 0xc7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000140), 0x7fff) 03:48:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x101080) r2 = syz_open_dev$vcsa(0x0, 0x2000000000004, 0x20000) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1d, 0x0, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffffc, 0x0, 0xdb}, 0x2c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = getpid() r8 = getpid() r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r2, r9, 0xf4a}) ioctl$CAPI_GET_ERRCODE(r6, 0x80024321, &(0x7f0000000280)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000200)={0x8001005, 0x7fffffff, 0x2}) close(r5) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180)=r9, 0x4) sendmsg$tipc(r6, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000340)={0x10201, 0x0, 0x4001, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x58) [ 2501.506722][T30161] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 03:48:06 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0,workdir=.']) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 03:48:06 executing program 5: epoll_create1(0x0) r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x4) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000240), 0x0, 0x0, 0x0, 0x8, 0x0, 0x13bf, {0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, "2ca5efa3aba691d6e07bbc10ba6d0c5b6b40bbf95a5d2f9d892c7a4320755ebc"}}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000005c0)) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) r1 = dup(r0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000200)) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000003c0)={0x5, "bec6da4797bf953b924adfb20b7a574b7cf9b43f0f5de2bc76019a994a56ed72", 0x0, 0x1800, 0xffffffffffffd310, 0xffffffffffffffff, 0x5, 0x2, 0x401}) io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@int=0x9480, 0x4) r3 = add_key(&(0x7f0000000500)='big_key\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000006c0)="c7b6f041b23aa46897b2fff79b75", 0xe, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000700)='fdinfo/3\x00', &(0x7f0000000740)) getsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x5, 0x6, 0x7ff, 0x8, 0x10001, 0x3, 0x10001}) 03:48:06 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x71, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffbffffffffff, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) 03:48:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x101080) r2 = syz_open_dev$vcsa(0x0, 0x2000000000004, 0x20000) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1d, 0x0, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffffc, 0x0, 0xdb}, 0x2c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = getpid() r8 = getpid() r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r2, r9, 0xf4a}) ioctl$CAPI_GET_ERRCODE(r6, 0x80024321, &(0x7f0000000280)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000200)={0x8001005, 0x7fffffff, 0x2}) close(r5) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180)=r9, 0x4) sendmsg$tipc(r6, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000340)={0x10201, 0x0, 0x4001, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x58) 03:48:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x101080) r2 = syz_open_dev$vcsa(0x0, 0x2000000000004, 0x20000) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1d, 0x0, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffffc, 0x0, 0xdb}, 0x2c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = getpid() r8 = getpid() r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r2, r9, 0xf4a}) ioctl$CAPI_GET_ERRCODE(r6, 0x80024321, &(0x7f0000000280)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000200)={0x8001005, 0x7fffffff, 0x2}) close(r5) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180)=r9, 0x4) sendmsg$tipc(r6, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000340)={0x10201, 0x0, 0x4001, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x58) 03:48:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000c00)="1717efc41bc4143b4c398ff1f1c40c3cd9eaea910d3f3477e4f1cd4e5121819a4e3f4239f7a798a7ab28a2867829b1e92bd20ab67381cea048bff0f843bb4e4d0b84e7ff198dc587ad175a850a0f7a164d5873a30ee06f752d44774de3d715c9eaa40bda572d15e0402116abd85f13690c5e26f9d6379677e665624230b4deaf51c393e65e0472c4e4c26fea9de1bdf0faca0064f60d77812badbe9a04f78f25ac2149c21b54058d3fc782bd207a99a6ca211097f43a47e330e249a57be6269b17a977b3716bd5e58a6a852884357eeaf34f5af6763b4b1d33d406fd89e16ecd6f299388cedfba32855f6ff803c3ca853f94ac1df59f0efc012f6c570b354646156199b696e70c265130dde13545bebfd53cf5c535ab76632f470d06261fee7610449f3fdc08a8e89e6fd070df02618e57d20efa4428d63c5de9bfd64ad70e40b66bc30eb31495a067bc811139f0d0070c467e7c82f89116ae48aee2194cc929bcaa76a2b72766bb59ca43a9b3b1df00af00bfd8a2a20947f314e55357710ea1ae214754781abe62134f4a4d25fcdf3a2be92711fd6d70d14113ee1e88f4922cb9eeed5ef582700b428f52091cb2c07cff31c97081f25b6bb27d682e9e7dd790adf3e717c61f40a8dd2306e98d3325d1b3853cfd88abe0fe5933dc03f5487e257ce4d8eb15556f68c6610b3c81ac8ffd1ab66ae06b28c0c765a75505806a5caa4f396b80f54cf9d67ee99345cbf27628cfc291a1c0c56bb7aa4dbf8753e59353606a19f05132e4a8db584e045dd114ef553b6d7187eae64ed7ae7d379a392ac06afd75ffb16a914a1443ec9e0487155d465970aa50516cd50811e7a4c52f94e71ffc0b99419734dd4f3e3aa0a62688a314a73c83e1ec9e4aad271894ca344b2e40f239b77f3a4ab46f969a5e7d085b3a74b9d7bad646ba062203488d09744aebbe13e8409ec2f51de99b99f82d030adf852c92fc3e64f79e50b9dd36e0317caa200a0c209e96d29b8cc929408db1e6e4efd4edbe4e5c97270e4066379e6be37794476b9b02fb6fc4c0c81d79e5b23879ef7c48cef88dd69a1685fc0f3310d13b1e6378863471b5ff8fe865757f191127cc5fd160bb3d2f2ab8c88f0f2bf18d8dd24775020d95aaf522307644bcd1d086a2bb608f2c9c50177ce256d8e5cb9e8419e8c43b50421d6bae47a781fb64be6954161b6b9fbf669279819bf8d44ace2bbedf1007915c77bd05e5f31cea83ef6a2415c14045b8fa64255c4461bf959c99e8b4e7198c8ad53cb97d98f7972cc3a2004fec7edf5577a89e2f6ce4358b4911a538c78acf6be622c2a315827ed97c56323c8f6b3930d9a366987eb344f72cc789fbce4a23a51f5168936390e7c0312baae0e2aec3a8ddc6af721d80b19c539405362865d80dbfaa77588e8c347ea50e60bb59690872cdb0d8afe6a66d77dff167ddda3d506998182a688e19c2f38cd06de7d4f97890dc687df71603f257aabe1ab3779880fce50d4dbfb11c4251c341130e45feaeed940328fe336b8c3af64c6b7ba676e49b041679881ed78475c8b83b84c82f6410098212034c27ec580f0ea3c09711b79896e47b0dc667ea4b739ded5080d0ccfd14220bc56c46027ed650d43d0512732960d6bc7461a132d485f1d455256e0372d9adeb37b43231c1ec2da0764e9de870a08cec8ace716c4be88f6a16e317dc3c41ee33aa48dab112c19b523dd6d1026e0e28e2a03825d9cd9a416ec67fb036c1efcd7880272ec532ef711de49762e90e5d4d5c4ad09a880cd6c84dddf1feac9313e2aebfe597007e69642248fcf82cfd90b74c71a714aa7856641efad919a24807e9d2079e6f4a3f9eacda790873904a2c6932a637a4b5d93b99930872c5f41724f44db4f64f8725c858887eaa47fa1db155cb4677181dc4b3e6c9b4499f03bb361b9c769851e855b0e61cb30afda01a10996b7879cc40fe7fdb6e7520534ee6c34fac0a1cf25978d846e463538d6676f33652810a2818d204790b35cd32afc341dcb8134d476dd0589ed9989175b020dd87f492b9b096f02a4044bce1ee5d4e02190d8783a2bc3a76a76f7b1d747454fa47d426c7325da17ce5b0147e1c89fdd234852702f7ba756682f555df0b3a0bfea94a1078bf5a88d5efc00a6276b761b6fb7cc92f0626d11d7b001568c06a92b5d685c44164717dd49ca1b2b3352805a1f64fca24ec0bd63fe05fed44fcbfc29a6f7d359885307c6a498cbd28cc1b6e11dcdc4f26e840086d41cfbb6d4ad3b4c29b4cdc402acd2d342913e1e7b2bac7ce8904b2ede590fcb61bc3a4f29a089cd460832a8f5b4574261ecef1ad838d7d838d90827c6c23eabc9a8fe50da14f34f4110e5e275f431cb9eb552961017bfa7a1b3486ec96630f1f70f4b1abb1cdb3daba65d7ebd1bd35889323a2c7f686baa3f08b41b9a508a5fece00dbce9987f4337e27d3ef6ded30d764f8ef4be9728976050d416dcab034f15123b627f145e9d48fa9e7c834cc3f663ad81ac3e37e13b8eae1fe42a98046b676660fa74ae658eea2864a3a9b510f618891e32d44fdab81e981ce9ef376331827d97883b6a4372e849787effeb9a518ada7df9d7abeae8f12f0a5635db71fee882d241f12db79bb6d26aceaaff516d1bb1fc0b919dee796715a327341a93791567110d914b04a7f1afbacc6975de661d4159dbe94e21086a667229ada9ae3210197d7643eceb9e7b534c82631455e834fa201ab01b8732941c505aeae840c74426aff715c1f2c504562ac9f095b17f5e8243d51af6c04cf7630fd29d3276d1ca5472e9f681097530e68040dfaa387816c43212f1d804a43e08944c548e5c676bcc84b7db26065bfc886176a869db5adfd86f0e8d6b586c68da2f62f360425de40d2699074035b9bad7d9aafd999ab86fa3248fe0599e971fb2a09edf7d5c8b7d003af58a199f7f3560f4801fc95f319c93c58940cb3766cb3ab997faa731f270d0387ead886bd58d9236864bee68d0faf92909ad7749174383655b310811392d1d1878123ac93bd1c359c96e5be7ed43308254602195241cee52098d26e9dc6c1c2599a7d577c8003dcffa8ca56052caebec0a480acdf95c3055bb0673ab3a0530b104c7eb67b0e751d06307cdcb835882352b12b24edb654f850912f061133b98c16d75a4c416452a1c0586e474e8ceb96f5b12ce59425e390e57130e56022105150c27e52745c523eb0a309649fb2cbe52a4cf8acda81f44f73aecd95bc26a1af32a2b68a90412c648dc8ec6b8db801e29a5f172ea74c26ee373fb77f977987d601e185f9cc6899cf1977da27ac2dafc04f98ca2b0ffc00977d13b23187443c7f634adaf68806169b74cd4ce9d95a0028c66a69ec3fa739d86611e4049d0376bf3ada812f6234fb8271f0051fe29c24b5fecc7ecf2e7c3eead48f0d18d7a5adab8bdcea3a47d6d856d51e5177864b6da060d4582be78f70a8405d5fea458d5ad2ded37ff9684dbb70f00aa67e0b6fbf13c52a2a654cec69a89147d9b46d0ea799fd666276a308b100bfe7ef1568e649564babba6ad2e8cc753b9af252684f24c2fa3380e6cd4a59abb716b68f68b0c412fd527bf27bb62157ed5f2715d9e11dca57866c25fc20e3a0ee7d09e58ba54adf00e10fba590672298d60f05a88320030810370ae81b5b52bfc31e33f0004bda9051e61d03dacf1dd95625da19d68f5fa3e01f92febd883180103b068de84cb2d6839ff60bd15a80dcbaad271c71a2d69b93a6ec488ec24d3873faa8f8b9736bebd40736aa15e5f046f68c6ced6b3a0d30da06576c2848c87ebd1240132a0e2063f989061a6fb8172d67f91719f944ef58b395b1584c0b2d80cfe44edf9f520ea6cb547116ea0831124008bb910dd404695e9d6be236822053e77055788a017cddf0080b4b872edd29891568cdc29a8a2f0c80336ebd5c4cc1d06f0f87f160ee4677be05f7c904fb45c1e516a30bbbbd45e7b08f600f0d42788693be04b6105707c82aa59db511834321d831b18443261b75a2d501faba83282fca83fe673c8f5e1aee904d365469a9c2d16446111560d6c8470d52c8feba2809ec6fc53684e204737aed3b0df27f6c6cf996c8e8033fdcf1ec390a2e97936d5b716602ac9fcc8c9d0691511aedb5c133fbf4209136e37a0433940d23a2d797b4a8f73fb8673f06cd8cb7572c31b0a9a9e02ac466e204550198f1868bd96f64022696bcb9fbc155ff4259abdbd9918eaf003e1f06fb45bc5ede5a9456923f50229206e5635923f1313b8053a6253f7954c90ddfd364ca3a9ca3ac78b90c9c3f0ea08ddd74aca087749f4eac65b7d052a7df03685d9e8edb8e67548ac380140be039c5cd9efcf81fe89e155e36a98656f611da9eff2fa03d7def94d618d51d71b2133ec02619b7d0d71c50038ec21e3cc754e118f0a36c3296195b64e2d11fdb152bd7ff526235360e776ec8c4ee7d801a8b49fde7032a5a6b35cabf494801673d0b42411d95f33deded81d9714130797c6129e922af97ecb3a7feacbc6d9d78df77fc046c6bc7456021376ecc417c3dbd9eb2ddcf181b2f16508b64df6db1d0d4a06e030119b887f507a4c2d11ca62a012933086f809754fcdb9ad87e290215895808e79262e729b39588608a56e925ec8f8f721f608a0df79897b89c7e93ec8ba4ec27ddf3c8b3b392be1c20d029f43825ba871263f5541d35f78ab783389046e6aea2ba6c355a3fff7e3e9304925404abcad3a1a36646ad54804bd056fd7dd75b9a54a06bfda035793b1c04f5fea6872ae0f15ab048c4510a8b0d5fdb83eeabd6dce289eef9d3e09c111469ee16e1c02bced3bb0fa82cf68de77dd60766f423d88ff01e4e1af28500d38fc0cc8b233f7ebcc69443b168e0c2ef8c93f4795034006f9125b20db2db43e535011607504a43be0d19cd328f8c7d84006d8669861a2d63e952a11c9e9a039b89675eda1eca6b79460640e6ba643e01d36a647a019b672bdf982c0d346b9e3ca5c623ea46117d789a1e85ecfb6d5792ac1351eeadced3bf47d95e67579abeefc3ea5d184ddca6694319d258da5ca51939e590342c2aced27472d3b9f4a676d1d3545911e7a07505a5ae001894288a93d4d0c264b4e61b813e2cc594a7822da836610fd05246d52b7dc96a969a43d1f1f42891350d5714f865adfb47cd639fb6e0b5302e2bbdaf4f3a7118ba784b4526d4948dea071b85e96dc0a31f90cb0bec2e175c6e5d160e677f2fce7b88d229e6fc54ee4e4d466e3ee2e04c14887530c67e4ea23130b52519504491e493cc26a8d80610f11c8c1243006f5f034106fb3648eedb068401641b4afc8d0b87c454c2d4d168b6071a0cbc96dc098ed4a7f60773249aedf662c5505e8f2018c0dc5a3ae91353acc9be0d71e4f5e5cb4d1c94b66efd9f9f9c3c81b18e5fe47d8db81623cf319c2dfcfe3ab97a5cd25a4dd20177ea468bca45556dc732051a38b6c0315f5ffc666e9b3fa96c98188529dc29b0eb1e2bb9e84144658d909eb6d39c3029d644a504fc5bf7230cf961822e5a2d01fe12c452956d23019c0ac9a35f64f35b2a6e73fdc065125c41f996b662ea77b983b9e926d1fea2e6598b0136f9cce54b57bc8514da35a8b05307eb2d6eb0f21d45ebe25394d578276f999329106592f03e2649c280dd178207933f3e75d53fed4b12c62cf2b1485af5fe10178bf9deee690c4045cf3a5c91643999077f9088a7d493a16c9bf585d6d340da9d626f9787729b779dfb11f6c25676108cd2f404c18f4bff2ab3e71d7c0a9bb2386", 0x1000}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x200) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000004c0)=ANY=[@ANYBLOB="b400000081f715c493a90de48a0a470993c95631a222116d17145b7cb3f4615099b4b71e348155cd02ee14beb3f9ce7e2c7b060cc5a30c42ee5b534608af0b16e89c90ac14d9f8c29792303f5bba809b014f6a79fc87a0f39fbdc4fce2857f8cca7ccf2af1fc566a9b180807fe8de9c6caed1b724a39e8be8a8e2fdd784270b60ad650563b0ae3575a92b9a757ee8394df1a873c7b0fabfcfe7370b0c7a2f41f778301fbaad2c4964185742538"], 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x329}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty, 0x100000000}}, 0x200, 0x4}, &(0x7f00000002c0)=0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 03:48:06 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000c00)="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", 0x1000}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x200) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000004c0)=ANY=[@ANYBLOB="b400000081f715c493a90de48a0a470993c95631a222116d17145b7cb3f4615099b4b71e348155cd02ee14beb3f9ce7e2c7b060cc5a30c42ee5b534608af0b16e89c90ac14d9f8c29792303f5bba809b014f6a79fc87a0f39fbdc4fce2857f8cca7ccf2af1fc566a9b180807fe8de9c6caed1b724a39e8be8a8e2fdd784270b60ad650563b0ae3575a92b9a757ee8394df1a873c7b0fabfcfe7370b0c7a2f41f778301fbaad2c4964185742538"], 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x329}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty, 0x100000000}}, 0x200, 0x4}, &(0x7f00000002c0)=0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2502.214151][T30187] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 03:48:06 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0,workdir=.']) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 03:48:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x101080) r2 = syz_open_dev$vcsa(0x0, 0x2000000000004, 0x20000) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1d, 0x0, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffffc, 0x0, 0xdb}, 0x2c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = getpid() r8 = getpid() r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r2, r9, 0xf4a}) ioctl$CAPI_GET_ERRCODE(r6, 0x80024321, &(0x7f0000000280)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000200)={0x8001005, 0x7fffffff, 0x2}) close(r5) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180)=r9, 0x4) sendmsg$tipc(r6, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000340)={0x10201, 0x0, 0x4001, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x58) 03:48:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x101080) r2 = syz_open_dev$vcsa(0x0, 0x2000000000004, 0x20000) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1d, 0x0, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffffc, 0x0, 0xdb}, 0x2c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = getpid() r8 = getpid() r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r2, r9, 0xf4a}) ioctl$CAPI_GET_ERRCODE(r6, 0x80024321, &(0x7f0000000280)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000200)={0x8001005, 0x7fffffff, 0x2}) close(r5) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180)=r9, 0x4) sendmsg$tipc(r6, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000340)={0x10201, 0x0, 0x4001, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x58) [ 2502.519996][T30205] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 03:48:06 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0,workdir=.']) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 03:48:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x101080) r2 = syz_open_dev$vcsa(0x0, 0x2000000000004, 0x20000) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1d, 0x0, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffffc, 0x0, 0xdb}, 0x2c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = getpid() r8 = getpid() r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r2, r9, 0xf4a}) ioctl$CAPI_GET_ERRCODE(r6, 0x80024321, &(0x7f0000000280)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000200)={0x8001005, 0x7fffffff, 0x2}) close(r5) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180)=r9, 0x4) sendmsg$tipc(r6, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000340)={0x10201, 0x0, 0x4001, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x58) 03:48:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x101080) r2 = syz_open_dev$vcsa(0x0, 0x2000000000004, 0x20000) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1d, 0x0, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffffc, 0x0, 0xdb}, 0x2c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = getpid() r8 = getpid() r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r2, r9, 0xf4a}) ioctl$CAPI_GET_ERRCODE(r6, 0x80024321, &(0x7f0000000280)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000200)={0x8001005, 0x7fffffff, 0x2}) close(r5) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180)=r9, 0x4) sendmsg$tipc(r6, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000340)={0x10201, 0x0, 0x4001, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x58) 03:48:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x101080) r2 = syz_open_dev$vcsa(0x0, 0x2000000000004, 0x20000) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1d, 0x0, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffffc, 0x0, 0xdb}, 0x2c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = getpid() r8 = getpid() r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r2, r9, 0xf4a}) ioctl$CAPI_GET_ERRCODE(r6, 0x80024321, &(0x7f0000000280)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000200)={0x8001005, 0x7fffffff, 0x2}) close(r5) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180)=r9, 0x4) sendmsg$tipc(r6, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000340)={0x10201, 0x0, 0x4001, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x58) 03:48:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000c00)="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", 0x1000}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x200) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000004c0)=ANY=[@ANYBLOB="b400000081f715c493a90de48a0a470993c95631a222116d17145b7cb3f4615099b4b71e348155cd02ee14beb3f9ce7e2c7b060cc5a30c42ee5b534608af0b16e89c90ac14d9f8c29792303f5bba809b014f6a79fc87a0f39fbdc4fce2857f8cca7ccf2af1fc566a9b180807fe8de9c6caed1b724a39e8be8a8e2fdd784270b60ad650563b0ae3575a92b9a757ee8394df1a873c7b0fabfcfe7370b0c7a2f41f778301fbaad2c4964185742538"], 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x329}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty, 0x100000000}}, 0x200, 0x4}, &(0x7f00000002c0)=0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 03:48:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x101080) r2 = syz_open_dev$vcsa(0x0, 0x2000000000004, 0x20000) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1d, 0x0, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffffc, 0x0, 0xdb}, 0x2c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = getpid() r8 = getpid() r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r2, r9, 0xf4a}) ioctl$CAPI_GET_ERRCODE(r6, 0x80024321, &(0x7f0000000280)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000200)={0x8001005, 0x7fffffff, 0x2}) close(r5) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180)=r9, 0x4) sendmsg$tipc(r6, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000340)={0x10201, 0x0, 0x4001, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x58) [ 2502.818466][T30219] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 2502.879937][T30222] FS-Cache: Duplicate cookie detected [ 2502.885432][T30222] FS-Cache: O-cookie c=00000000dee6f0ef [p=00000000c96158cf fl=222 nc=0 na=1] [ 2502.885447][T30222] FS-Cache: O-cookie d=0000000068a28143 n=0000000076ca8447 [ 2502.906228][T30222] FS-Cache: O-key=[22] '02000a00000000000000040001000000000000000000' [ 2502.915489][T30222] FS-Cache: N-cookie c=00000000cfbbccd4 [p=00000000c96158cf fl=2 nc=0 na=1] [ 2502.924429][T30222] FS-Cache: N-cookie d=0000000068a28143 n=0000000020203fa2 [ 2502.931863][T30222] FS-Cache: N-key=[22] '02000a00000000000000040001000000000000000000' 03:48:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x101080) r2 = syz_open_dev$vcsa(0x0, 0x2000000000004, 0x20000) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1d, 0x0, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffffc, 0x0, 0xdb}, 0x2c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = getpid() r8 = getpid() r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r2, r9, 0xf4a}) ioctl$CAPI_GET_ERRCODE(r6, 0x80024321, &(0x7f0000000280)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000200)={0x8001005, 0x7fffffff, 0x2}) close(r5) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180)=r9, 0x4) sendmsg$tipc(r6, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000340)={0x10201, 0x0, 0x4001, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x58) 03:48:07 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000004c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGKEYCODE_V2(r0, 0x400445a0, 0x0) 03:48:07 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000c00)="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", 0x1000}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x200) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000004c0)=ANY=[@ANYBLOB="b400000081f715c493a90de48a0a470993c95631a222116d17145b7cb3f4615099b4b71e348155cd02ee14beb3f9ce7e2c7b060cc5a30c42ee5b534608af0b16e89c90ac14d9f8c29792303f5bba809b014f6a79fc87a0f39fbdc4fce2857f8cca7ccf2af1fc566a9b180807fe8de9c6caed1b724a39e8be8a8e2fdd784270b60ad650563b0ae3575a92b9a757ee8394df1a873c7b0fabfcfe7370b0c7a2f41f778301fbaad2c4964185742538"], 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x329}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty, 0x100000000}}, 0x200, 0x4}, &(0x7f00000002c0)=0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 03:48:07 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x101080) r2 = syz_open_dev$vcsa(0x0, 0x2000000000004, 0x20000) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1d, 0x0, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffffc, 0x0, 0xdb}, 0x2c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = getpid() r8 = getpid() r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r2, r9, 0xf4a}) ioctl$CAPI_GET_ERRCODE(r6, 0x80024321, &(0x7f0000000280)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000200)={0x8001005, 0x7fffffff, 0x2}) close(r5) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180)=r9, 0x4) sendmsg$tipc(r6, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000340)={0x10201, 0x0, 0x4001, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x58) 03:48:07 executing program 1: modify_ldt$write2(0x11, &(0x7f0000000200)={0x5fa}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000100), 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 03:48:07 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) shutdown(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:48:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x101080) r2 = syz_open_dev$vcsa(0x0, 0x2000000000004, 0x20000) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1d, 0x0, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffffc, 0x0, 0xdb}, 0x2c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = getpid() r8 = getpid() r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r2, r9, 0xf4a}) ioctl$CAPI_GET_ERRCODE(r6, 0x80024321, &(0x7f0000000280)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000200)={0x8001005, 0x7fffffff, 0x2}) close(r5) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180)=r9, 0x4) sendmsg$tipc(r6, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000340)={0x10201, 0x0, 0x4001, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x58) 03:48:07 executing program 1: modify_ldt$write2(0x11, &(0x7f0000000200)={0x5fa}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000100), 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 03:48:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) madvise(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:48:07 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0xc1105511, &(0x7f0000000000)=""/93) 03:48:07 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000c00)="1717efc41bc4143b4c398ff1f1c40c3cd9eaea910d3f3477e4f1cd4e5121819a4e3f4239f7a798a7ab28a2867829b1e92bd20ab67381cea048bff0f843bb4e4d0b84e7ff198dc587ad175a850a0f7a164d5873a30ee06f752d44774de3d715c9eaa40bda572d15e0402116abd85f13690c5e26f9d6379677e665624230b4deaf51c393e65e0472c4e4c26fea9de1bdf0faca0064f60d77812badbe9a04f78f25ac2149c21b54058d3fc782bd207a99a6ca211097f43a47e330e249a57be6269b17a977b3716bd5e58a6a852884357eeaf34f5af6763b4b1d33d406fd89e16ecd6f299388cedfba32855f6ff803c3ca853f94ac1df59f0efc012f6c570b354646156199b696e70c265130dde13545bebfd53cf5c535ab76632f470d06261fee7610449f3fdc08a8e89e6fd070df02618e57d20efa4428d63c5de9bfd64ad70e40b66bc30eb31495a067bc811139f0d0070c467e7c82f89116ae48aee2194cc929bcaa76a2b72766bb59ca43a9b3b1df00af00bfd8a2a20947f314e55357710ea1ae214754781abe62134f4a4d25fcdf3a2be92711fd6d70d14113ee1e88f4922cb9eeed5ef582700b428f52091cb2c07cff31c97081f25b6bb27d682e9e7dd790adf3e717c61f40a8dd2306e98d3325d1b3853cfd88abe0fe5933dc03f5487e257ce4d8eb15556f68c6610b3c81ac8ffd1ab66ae06b28c0c765a75505806a5caa4f396b80f54cf9d67ee99345cbf27628cfc291a1c0c56bb7aa4dbf8753e59353606a19f05132e4a8db584e045dd114ef553b6d7187eae64ed7ae7d379a392ac06afd75ffb16a914a1443ec9e0487155d465970aa50516cd50811e7a4c52f94e71ffc0b99419734dd4f3e3aa0a62688a314a73c83e1ec9e4aad271894ca344b2e40f239b77f3a4ab46f969a5e7d085b3a74b9d7bad646ba062203488d09744aebbe13e8409ec2f51de99b99f82d030adf852c92fc3e64f79e50b9dd36e0317caa200a0c209e96d29b8cc929408db1e6e4efd4edbe4e5c97270e4066379e6be37794476b9b02fb6fc4c0c81d79e5b23879ef7c48cef88dd69a1685fc0f3310d13b1e6378863471b5ff8fe865757f191127cc5fd160bb3d2f2ab8c88f0f2bf18d8dd24775020d95aaf522307644bcd1d086a2bb608f2c9c50177ce256d8e5cb9e8419e8c43b50421d6bae47a781fb64be6954161b6b9fbf669279819bf8d44ace2bbedf1007915c77bd05e5f31cea83ef6a2415c14045b8fa64255c4461bf959c99e8b4e7198c8ad53cb97d98f7972cc3a2004fec7edf5577a89e2f6ce4358b4911a538c78acf6be622c2a315827ed97c56323c8f6b3930d9a366987eb344f72cc789fbce4a23a51f5168936390e7c0312baae0e2aec3a8ddc6af721d80b19c539405362865d80dbfaa77588e8c347ea50e60bb59690872cdb0d8afe6a66d77dff167ddda3d506998182a688e19c2f38cd06de7d4f97890dc687df71603f257aabe1ab3779880fce50d4dbfb11c4251c341130e45feaeed940328fe336b8c3af64c6b7ba676e49b041679881ed78475c8b83b84c82f6410098212034c27ec580f0ea3c09711b79896e47b0dc667ea4b739ded5080d0ccfd14220bc56c46027ed650d43d0512732960d6bc7461a132d485f1d455256e0372d9adeb37b43231c1ec2da0764e9de870a08cec8ace716c4be88f6a16e317dc3c41ee33aa48dab112c19b523dd6d1026e0e28e2a03825d9cd9a416ec67fb036c1efcd7880272ec532ef711de49762e90e5d4d5c4ad09a880cd6c84dddf1feac9313e2aebfe597007e69642248fcf82cfd90b74c71a714aa7856641efad919a24807e9d2079e6f4a3f9eacda790873904a2c6932a637a4b5d93b99930872c5f41724f44db4f64f8725c858887eaa47fa1db155cb4677181dc4b3e6c9b4499f03bb361b9c769851e855b0e61cb30afda01a10996b7879cc40fe7fdb6e7520534ee6c34fac0a1cf25978d846e463538d6676f33652810a2818d204790b35cd32afc341dcb8134d476dd0589ed9989175b020dd87f492b9b096f02a4044bce1ee5d4e02190d8783a2bc3a76a76f7b1d747454fa47d426c7325da17ce5b0147e1c89fdd234852702f7ba756682f555df0b3a0bfea94a1078bf5a88d5efc00a6276b761b6fb7cc92f0626d11d7b001568c06a92b5d685c44164717dd49ca1b2b3352805a1f64fca24ec0bd63fe05fed44fcbfc29a6f7d359885307c6a498cbd28cc1b6e11dcdc4f26e840086d41cfbb6d4ad3b4c29b4cdc402acd2d342913e1e7b2bac7ce8904b2ede590fcb61bc3a4f29a089cd460832a8f5b4574261ecef1ad838d7d838d90827c6c23eabc9a8fe50da14f34f4110e5e275f431cb9eb552961017bfa7a1b3486ec96630f1f70f4b1abb1cdb3daba65d7ebd1bd35889323a2c7f686baa3f08b41b9a508a5fece00dbce9987f4337e27d3ef6ded30d764f8ef4be9728976050d416dcab034f15123b627f145e9d48fa9e7c834cc3f663ad81ac3e37e13b8eae1fe42a98046b676660fa74ae658eea2864a3a9b510f618891e32d44fdab81e981ce9ef376331827d97883b6a4372e849787effeb9a518ada7df9d7abeae8f12f0a5635db71fee882d241f12db79bb6d26aceaaff516d1bb1fc0b919dee796715a327341a93791567110d914b04a7f1afbacc6975de661d4159dbe94e21086a667229ada9ae3210197d7643eceb9e7b534c82631455e834fa201ab01b8732941c505aeae840c74426aff715c1f2c504562ac9f095b17f5e8243d51af6c04cf7630fd29d3276d1ca5472e9f681097530e68040dfaa387816c43212f1d804a43e08944c548e5c676bcc84b7db26065bfc886176a869db5adfd86f0e8d6b586c68da2f62f360425de40d2699074035b9bad7d9aafd999ab86fa3248fe0599e971fb2a09edf7d5c8b7d003af58a199f7f3560f4801fc95f319c93c58940cb3766cb3ab997faa731f270d0387ead886bd58d9236864bee68d0faf92909ad7749174383655b310811392d1d1878123ac93bd1c359c96e5be7ed43308254602195241cee52098d26e9dc6c1c2599a7d577c8003dcffa8ca56052caebec0a480acdf95c3055bb0673ab3a0530b104c7eb67b0e751d06307cdcb835882352b12b24edb654f850912f061133b98c16d75a4c416452a1c0586e474e8ceb96f5b12ce59425e390e57130e56022105150c27e52745c523eb0a309649fb2cbe52a4cf8acda81f44f73aecd95bc26a1af32a2b68a90412c648dc8ec6b8db801e29a5f172ea74c26ee373fb77f977987d601e185f9cc6899cf1977da27ac2dafc04f98ca2b0ffc00977d13b23187443c7f634adaf68806169b74cd4ce9d95a0028c66a69ec3fa739d86611e4049d0376bf3ada812f6234fb8271f0051fe29c24b5fecc7ecf2e7c3eead48f0d18d7a5adab8bdcea3a47d6d856d51e5177864b6da060d4582be78f70a8405d5fea458d5ad2ded37ff9684dbb70f00aa67e0b6fbf13c52a2a654cec69a89147d9b46d0ea799fd666276a308b100bfe7ef1568e649564babba6ad2e8cc753b9af252684f24c2fa3380e6cd4a59abb716b68f68b0c412fd527bf27bb62157ed5f2715d9e11dca57866c25fc20e3a0ee7d09e58ba54adf00e10fba590672298d60f05a88320030810370ae81b5b52bfc31e33f0004bda9051e61d03dacf1dd95625da19d68f5fa3e01f92febd883180103b068de84cb2d6839ff60bd15a80dcbaad271c71a2d69b93a6ec488ec24d3873faa8f8b9736bebd40736aa15e5f046f68c6ced6b3a0d30da06576c2848c87ebd1240132a0e2063f989061a6fb8172d67f91719f944ef58b395b1584c0b2d80cfe44edf9f520ea6cb547116ea0831124008bb910dd404695e9d6be236822053e77055788a017cddf0080b4b872edd29891568cdc29a8a2f0c80336ebd5c4cc1d06f0f87f160ee4677be05f7c904fb45c1e516a30bbbbd45e7b08f600f0d42788693be04b6105707c82aa59db511834321d831b18443261b75a2d501faba83282fca83fe673c8f5e1aee904d365469a9c2d16446111560d6c8470d52c8feba2809ec6fc53684e204737aed3b0df27f6c6cf996c8e8033fdcf1ec390a2e97936d5b716602ac9fcc8c9d0691511aedb5c133fbf4209136e37a0433940d23a2d797b4a8f73fb8673f06cd8cb7572c31b0a9a9e02ac466e204550198f1868bd96f64022696bcb9fbc155ff4259abdbd9918eaf003e1f06fb45bc5ede5a9456923f50229206e5635923f1313b8053a6253f7954c90ddfd364ca3a9ca3ac78b90c9c3f0ea08ddd74aca087749f4eac65b7d052a7df03685d9e8edb8e67548ac380140be039c5cd9efcf81fe89e155e36a98656f611da9eff2fa03d7def94d618d51d71b2133ec02619b7d0d71c50038ec21e3cc754e118f0a36c3296195b64e2d11fdb152bd7ff526235360e776ec8c4ee7d801a8b49fde7032a5a6b35cabf494801673d0b42411d95f33deded81d9714130797c6129e922af97ecb3a7feacbc6d9d78df77fc046c6bc7456021376ecc417c3dbd9eb2ddcf181b2f16508b64df6db1d0d4a06e030119b887f507a4c2d11ca62a012933086f809754fcdb9ad87e290215895808e79262e729b39588608a56e925ec8f8f721f608a0df79897b89c7e93ec8ba4ec27ddf3c8b3b392be1c20d029f43825ba871263f5541d35f78ab783389046e6aea2ba6c355a3fff7e3e9304925404abcad3a1a36646ad54804bd056fd7dd75b9a54a06bfda035793b1c04f5fea6872ae0f15ab048c4510a8b0d5fdb83eeabd6dce289eef9d3e09c111469ee16e1c02bced3bb0fa82cf68de77dd60766f423d88ff01e4e1af28500d38fc0cc8b233f7ebcc69443b168e0c2ef8c93f4795034006f9125b20db2db43e535011607504a43be0d19cd328f8c7d84006d8669861a2d63e952a11c9e9a039b89675eda1eca6b79460640e6ba643e01d36a647a019b672bdf982c0d346b9e3ca5c623ea46117d789a1e85ecfb6d5792ac1351eeadced3bf47d95e67579abeefc3ea5d184ddca6694319d258da5ca51939e590342c2aced27472d3b9f4a676d1d3545911e7a07505a5ae001894288a93d4d0c264b4e61b813e2cc594a7822da836610fd05246d52b7dc96a969a43d1f1f42891350d5714f865adfb47cd639fb6e0b5302e2bbdaf4f3a7118ba784b4526d4948dea071b85e96dc0a31f90cb0bec2e175c6e5d160e677f2fce7b88d229e6fc54ee4e4d466e3ee2e04c14887530c67e4ea23130b52519504491e493cc26a8d80610f11c8c1243006f5f034106fb3648eedb068401641b4afc8d0b87c454c2d4d168b6071a0cbc96dc098ed4a7f60773249aedf662c5505e8f2018c0dc5a3ae91353acc9be0d71e4f5e5cb4d1c94b66efd9f9f9c3c81b18e5fe47d8db81623cf319c2dfcfe3ab97a5cd25a4dd20177ea468bca45556dc732051a38b6c0315f5ffc666e9b3fa96c98188529dc29b0eb1e2bb9e84144658d909eb6d39c3029d644a504fc5bf7230cf961822e5a2d01fe12c452956d23019c0ac9a35f64f35b2a6e73fdc065125c41f996b662ea77b983b9e926d1fea2e6598b0136f9cce54b57bc8514da35a8b05307eb2d6eb0f21d45ebe25394d578276f999329106592f03e2649c280dd178207933f3e75d53fed4b12c62cf2b1485af5fe10178bf9deee690c4045cf3a5c91643999077f9088a7d493a16c9bf585d6d340da9d626f9787729b779dfb11f6c25676108cd2f404c18f4bff2ab3e71d7c0a9bb2386", 0x1000}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x200) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000004c0)=ANY=[@ANYBLOB="b400000081f715c493a90de48a0a470993c95631a222116d17145b7cb3f4615099b4b71e348155cd02ee14beb3f9ce7e2c7b060cc5a30c42ee5b534608af0b16e89c90ac14d9f8c29792303f5bba809b014f6a79fc87a0f39fbdc4fce2857f8cca7ccf2af1fc566a9b180807fe8de9c6caed1b724a39e8be8a8e2fdd784270b60ad650563b0ae3575a92b9a757ee8394df1a873c7b0fabfcfe7370b0c7a2f41f778301fbaad2c4964185742538"], 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x329}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty, 0x100000000}}, 0x200, 0x4}, &(0x7f00000002c0)=0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 03:48:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x4, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x1000, 0x0, 0x257, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff8c, 0x0, 0x80000001, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x8, 0x0, 0xffffffffffffb7a4, 0x0, 0x1, 0x0, 0x7ff, 0x0, 0x7, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x8, r0, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="000c0500cd0000001b0300000000000000000000263f4aa9f8b0eb37235e200000000001000000000000f4546b2a010000008c57e1e99e2eaa16f320792d9306c7157639331a35feef10c456c9db1a5f08df8016fb26f08749a65000"], 0x5c) sync_file_range(r0, 0x0, 0x9, 0x2) fallocate(r1, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8}) 03:48:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x101080) r2 = syz_open_dev$vcsa(0x0, 0x2000000000004, 0x20000) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1d, 0x0, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffffc, 0x0, 0xdb}, 0x2c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = getpid() r8 = getpid() r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r2, r9, 0xf4a}) ioctl$CAPI_GET_ERRCODE(r6, 0x80024321, &(0x7f0000000280)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000200)={0x8001005, 0x7fffffff, 0x2}) close(r5) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180)=r9, 0x4) sendmsg$tipc(r6, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000340)={0x10201, 0x0, 0x4001, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x58) 03:48:07 executing program 1: modify_ldt$write2(0x11, &(0x7f0000000200)={0x5fa}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000100), 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 03:48:07 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) 03:48:07 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000c00)="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", 0x1000}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x200) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000004c0)=ANY=[@ANYBLOB="b400000081f715c493a90de48a0a470993c95631a222116d17145b7cb3f4615099b4b71e348155cd02ee14beb3f9ce7e2c7b060cc5a30c42ee5b534608af0b16e89c90ac14d9f8c29792303f5bba809b014f6a79fc87a0f39fbdc4fce2857f8cca7ccf2af1fc566a9b180807fe8de9c6caed1b724a39e8be8a8e2fdd784270b60ad650563b0ae3575a92b9a757ee8394df1a873c7b0fabfcfe7370b0c7a2f41f778301fbaad2c4964185742538"], 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x329}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty, 0x100000000}}, 0x200, 0x4}, &(0x7f00000002c0)=0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 03:48:07 executing program 1: modify_ldt$write2(0x11, &(0x7f0000000200)={0x5fa}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000100), 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 03:48:08 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) 03:48:08 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) 03:48:08 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0xeb, &(0x7f0000002b80)=[{&(0x7f0000000600)=""/190, 0xbe}], 0x1}}], 0x400023a, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) 03:48:08 executing program 1: socketpair$unix(0x1, 0x100000000000002, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) keyctl$clear(0x7, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ptrace(0xffffffffffffffff, 0x0) 03:48:08 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) [ 2504.477354][T30293] [ 2504.479917][T30293] ============================= [ 2504.485193][T30293] WARNING: suspicious RCU usage 03:48:08 executing program 0: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0x397) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) sendto$inet6(r1, &(0x7f00000003c0), 0x101d0, 0x0, 0x0, 0x0) [ 2504.565466][T30293] 5.1.0-rc1-next-20190319 #6 Not tainted [ 2504.596702][T30293] ----------------------------- [ 2504.645295][T30293] net/xfrm/xfrm_user.c:1080 suspicious rcu_dereference_check() usage! [ 2504.660327][T30293] [ 2504.660327][T30293] other info that might help us debug this: [ 2504.660327][T30293] [ 2504.671722][T30293] [ 2504.671722][T30293] rcu_scheduler_active = 2, debug_locks = 1 [ 2504.690786][T30293] 1 lock held by syz-executor.1/30293: [ 2504.707797][T30293] #0: 00000000d112a8a6 (&net->xfrm.xfrm_cfg_mutex){+.+.}, at: xfrm_netlink_rcv+0x61/0x90 [ 2504.729789][T30293] [ 2504.729789][T30293] stack backtrace: [ 2504.740784][T30293] CPU: 0 PID: 30293 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2504.749845][T30293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2504.759911][T30293] Call Trace: [ 2504.763217][T30293] dump_stack+0x172/0x1f0 [ 2504.767566][T30293] lockdep_rcu_suspicious+0x153/0x15d [ 2504.773894][T30293] xfrm_get_spdinfo+0x923/0xb20 [ 2504.778769][T30293] ? xfrm_send_state_notify+0x1b90/0x1b90 [ 2504.784497][T30293] ? audit_add_tree_rule+0x390/0xbc0 [ 2504.789809][T30293] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2504.796060][T30293] ? __nla_parse+0x12a/0x340 [ 2504.800658][T30293] ? nla_parse+0x45/0x60 [ 2504.804917][T30293] ? xfrm_send_state_notify+0x1b90/0x1b90 [ 2504.810679][T30293] xfrm_user_rcv_msg+0x458/0x770 [ 2504.815619][T30293] ? xfrm_dump_sa_done+0xf0/0xf0 [ 2504.820668][T30293] ? mark_held_locks+0xf0/0xf0 [ 2504.825430][T30293] ? perf_trace_lock+0x510/0x510 [ 2504.830408][T30293] ? __mutex_lock+0x3cd/0x1310 [ 2504.835188][T30293] ? xfrm_netlink_rcv+0x61/0x90 [ 2504.840183][T30293] netlink_rcv_skb+0x17a/0x460 [ 2504.844958][T30293] ? xfrm_dump_sa_done+0xf0/0xf0 [ 2504.849914][T30293] ? netlink_ack+0xb50/0xb50 [ 2504.855326][T30293] xfrm_netlink_rcv+0x70/0x90 [ 2504.860017][T30293] netlink_unicast+0x536/0x720 [ 2504.864795][T30293] ? netlink_attachskb+0x770/0x770 [ 2504.869912][T30293] ? _copy_from_iter_full+0x259/0x8f0 [ 2504.875374][T30293] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2504.881099][T30293] ? __check_object_size+0x3d/0x42f [ 2504.886327][T30293] netlink_sendmsg+0x8ae/0xd70 [ 2504.891107][T30293] ? netlink_unicast+0x720/0x720 [ 2504.896066][T30293] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 2504.901617][T30293] ? apparmor_socket_sendmsg+0x2a/0x30 [ 2504.907080][T30293] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2504.913333][T30293] ? security_socket_sendmsg+0x93/0xc0 [ 2504.918797][T30293] ? netlink_unicast+0x720/0x720 [ 2504.923913][T30293] sock_sendmsg+0xdd/0x130 [ 2504.928336][T30293] ___sys_sendmsg+0x806/0x930 [ 2504.933028][T30293] ? copy_msghdr_from_user+0x430/0x430 [ 2504.938510][T30293] ? kasan_check_read+0x11/0x20 03:48:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x4, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x1000, 0x0, 0x257, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff8c, 0x0, 0x80000001, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x8, 0x0, 0xffffffffffffb7a4, 0x0, 0x1, 0x0, 0x7ff, 0x0, 0x7, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x8, r0, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="000c0500cd0000001b0300000000000000000000263f4aa9f8b0eb37235e200000000001000000000000f4546b2a010000008c57e1e99e2eaa16f320792d9306c7157639331a35feef10c456c9db1a5f08df8016fb26f08749a65000"], 0x5c) sync_file_range(r0, 0x0, 0x9, 0x2) fallocate(r1, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8}) 03:48:08 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) 03:48:08 executing program 4: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/32) r2 = socket$inet_dccp(0x2, 0x6, 0x0) fremovexattr(0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x1f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r3, 0x0, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = accept(r1, 0x0, &(0x7f0000000080)=0xfe0f) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getgid() fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fcntl$getown(r0, 0x9) getgroups(0x0, &(0x7f00000023c0)) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendfile(r4, r0, 0x0, 0x10000014e) 03:48:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x101) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x10001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0x0) 03:48:08 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) [ 2504.943379][T30293] ? __fget+0x381/0x550 [ 2504.947553][T30293] ? ksys_dup3+0x3e0/0x3e0 [ 2504.951981][T30293] ? lock_downgrade+0x880/0x880 [ 2504.956846][T30293] ? __fget_light+0x1a9/0x230 [ 2504.961538][T30293] ? __fdget+0x1b/0x20 [ 2504.965626][T30293] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2504.971878][T30293] __sys_sendmsg+0x105/0x1d0 [ 2504.976481][T30293] ? __ia32_sys_shutdown+0x80/0x80 [ 2504.981623][T30293] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2504.987088][T30293] ? do_syscall_64+0x26/0x610 [ 2504.991788][T30293] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2504.997859][T30293] ? do_syscall_64+0x26/0x610 [ 2505.002551][T30293] __x64_sys_sendmsg+0x78/0xb0 [ 2505.007329][T30293] do_syscall_64+0x103/0x610 [ 2505.011931][T30293] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2505.017824][T30293] RIP: 0033:0x458079 [ 2505.021723][T30293] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2505.041331][T30293] RSP: 002b:00007fa951308c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2505.049751][T30293] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458079 [ 2505.057731][T30293] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000005 [ 2505.065712][T30293] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2505.073697][T30293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa9513096d4 [ 2505.081679][T30293] R13: 00000000004c4fe7 R14: 00000000004d8d98 R15: 00000000ffffffff [ 2505.126428][T30293] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2505.163405][T30298] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 03:48:09 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000540)={'TPROXY\x00'}, &(0x7f0000000640)=0x46) openat$ptmx(0xffffffffffffff9c, 0x0, 0xfffffffffffffffe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f00000001c0)={0x6, 0x1d, 0x1}) r3 = mq_open(&(0x7f0000000000)='TPROXY\x00', 0x6e93ebbbcc0884f2, 0x4, 0x0) mq_notify(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040)="3db8ff500610689ec6d80d61eaeeb8f357bea52d709add5e9c8eaf6c550bb2662d178141fbe790083d490f76eb251da07b92e308c4ea09f0514bd5", 0x0}}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) r5 = getegid() ioctl$TUNSETGROUP(r1, 0x400454ce, r5) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f00000003c0)='NET_DM\x00') syz_open_dev$binder(0x0, 0x0, 0x802) recvfrom$llc(r2, &(0x7f0000000280)=""/178, 0xb2, 0x2007, &(0x7f0000000200)={0x1a, 0x6, 0xffffffffffffffff, 0x100000000, 0xfff, 0x20000cd7, @broadcast}, 0xfffffffffffffe3f) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000380)={0x1, 0x18cf, 0x5, 0x4}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x4000000000001000, &(0x7f0000000140), 0x1, r1, 0x8}) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x10, &(0x7f0000000740)={0x0, 0x0, 0xffffffffffffffff}}, 0x10) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000400), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000440)={0x3, @raw_data="d0ff50662d24992032727469b48500272198d5315e63d3974b7fed5f2f8762bebde97b7e5029e65fb0ee4082660998fed5ab2a36e81663674599a31da36beb31915f78cf315a5b91ddf6bd90cbd02421f6fa179fc7d7777469e11981ef977c0f0c2b4d75306cf8f130a133b810700ada7c22dd870ed051b54fceee2014e929ff193db8c4c41efa2d7f414f6d8c8ffbc49717586c7810770d68712c794d84324f7abfde489de3f39c59373d914e3c12ec4bdaaecba356982bc276abf733e1663346a3c6ddfa1b4478"}) 03:48:09 executing program 1: socketpair$unix(0x1, 0x100000000000002, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) keyctl$clear(0x7, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ptrace(0xffffffffffffffff, 0x0) 03:48:09 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) [ 2505.377355][T30323] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2505.416329][T30323] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2505.457902][T30323] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2505.497173][T30323] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 2505.536421][T30330] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 03:48:09 executing program 4: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/32) r2 = socket$inet_dccp(0x2, 0x6, 0x0) fremovexattr(0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x1f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r3, 0x0, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = accept(r1, 0x0, &(0x7f0000000080)=0xfe0f) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getgid() fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fcntl$getown(r0, 0x9) getgroups(0x0, &(0x7f00000023c0)) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendfile(r4, r0, 0x0, 0x10000014e) 03:48:09 executing program 2: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/32) r2 = socket$inet_dccp(0x2, 0x6, 0x0) fremovexattr(0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x1f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r3, 0x0, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = accept(r1, 0x0, &(0x7f0000000080)=0xfe0f) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getgid() fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fcntl$getown(r0, 0x9) getgroups(0x0, &(0x7f00000023c0)) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendfile(r4, r0, 0x0, 0x10000014e) 03:48:09 executing program 1: socketpair$unix(0x1, 0x100000000000002, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) keyctl$clear(0x7, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ptrace(0xffffffffffffffff, 0x0) 03:48:09 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000540)={'TPROXY\x00'}, &(0x7f0000000640)=0x46) openat$ptmx(0xffffffffffffff9c, 0x0, 0xfffffffffffffffe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f00000001c0)={0x6, 0x1d, 0x1}) r3 = mq_open(&(0x7f0000000000)='TPROXY\x00', 0x6e93ebbbcc0884f2, 0x4, 0x0) mq_notify(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040)="3db8ff500610689ec6d80d61eaeeb8f357bea52d709add5e9c8eaf6c550bb2662d178141fbe790083d490f76eb251da07b92e308c4ea09f0514bd5", 0x0}}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) r5 = getegid() ioctl$TUNSETGROUP(r1, 0x400454ce, r5) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f00000003c0)='NET_DM\x00') syz_open_dev$binder(0x0, 0x0, 0x802) recvfrom$llc(r2, &(0x7f0000000280)=""/178, 0xb2, 0x2007, &(0x7f0000000200)={0x1a, 0x6, 0xffffffffffffffff, 0x100000000, 0xfff, 0x20000cd7, @broadcast}, 0xfffffffffffffe3f) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000380)={0x1, 0x18cf, 0x5, 0x4}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x4000000000001000, &(0x7f0000000140), 0x1, r1, 0x8}) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x10, &(0x7f0000000740)={0x0, 0x0, 0xffffffffffffffff}}, 0x10) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000400), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000440)={0x3, @raw_data="d0ff50662d24992032727469b48500272198d5315e63d3974b7fed5f2f8762bebde97b7e5029e65fb0ee4082660998fed5ab2a36e81663674599a31da36beb31915f78cf315a5b91ddf6bd90cbd02421f6fa179fc7d7777469e11981ef977c0f0c2b4d75306cf8f130a133b810700ada7c22dd870ed051b54fceee2014e929ff193db8c4c41efa2d7f414f6d8c8ffbc49717586c7810770d68712c794d84324f7abfde489de3f39c59373d914e3c12ec4bdaaecba356982bc276abf733e1663346a3c6ddfa1b4478"}) [ 2505.876840][T30344] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 03:48:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x4, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x1000, 0x0, 0x257, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff8c, 0x0, 0x80000001, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x8, 0x0, 0xffffffffffffb7a4, 0x0, 0x1, 0x0, 0x7ff, 0x0, 0x7, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x8, r0, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="000c0500cd0000001b0300000000000000000000263f4aa9f8b0eb37235e200000000001000000000000f4546b2a010000008c57e1e99e2eaa16f320792d9306c7157639331a35feef10c456c9db1a5f08df8016fb26f08749a65000"], 0x5c) sync_file_range(r0, 0x0, 0x9, 0x2) fallocate(r1, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8}) 03:48:09 executing program 1: socketpair$unix(0x1, 0x100000000000002, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) keyctl$clear(0x7, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ptrace(0xffffffffffffffff, 0x0) [ 2506.093054][T30346] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) 03:48:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x101) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x10001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0x0) [ 2506.149948][T30356] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2506.167141][T30346] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2506.191710][T30346] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2506.199867][T30346] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 2506.210450][T30356] CPU: 1 PID: 30356 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2506.219495][T30356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2506.229557][T30356] Call Trace: [ 2506.232852][T30356] dump_stack+0x172/0x1f0 [ 2506.237199][T30356] dump_header+0x10f/0xb6c [ 2506.241629][T30356] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2506.247452][T30356] ? ___ratelimit+0x60/0x595 [ 2506.252047][T30356] ? do_raw_spin_unlock+0x57/0x270 [ 2506.257168][T30356] oom_kill_process.cold+0x10/0x15 [ 2506.262308][T30356] out_of_memory+0x79a/0x1280 [ 2506.266995][T30356] ? lock_downgrade+0x880/0x880 [ 2506.271857][T30356] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2506.278106][T30356] ? oom_killer_disable+0x280/0x280 [ 2506.283304][T30356] ? find_held_lock+0x35/0x130 [ 2506.288086][T30356] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2506.293634][T30356] ? memcg_event_wake+0x230/0x230 [ 2506.298669][T30356] ? do_raw_spin_unlock+0x57/0x270 [ 2506.303785][T30356] ? _raw_spin_unlock+0x2d/0x50 [ 2506.308642][T30356] try_charge+0x118d/0x1790 [ 2506.313159][T30356] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2506.318800][T30356] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2506.325052][T30356] ? kasan_check_read+0x11/0x20 [ 2506.329913][T30356] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2506.335473][T30356] mem_cgroup_try_charge+0x24d/0x5e0 [ 2506.340776][T30356] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2506.346419][T30356] __handle_mm_fault+0x1e1f/0x3ec0 [ 2506.351548][T30356] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2506.357099][T30356] ? find_held_lock+0x35/0x130 [ 2506.361867][T30356] ? handle_mm_fault+0x322/0xb30 [ 2506.366819][T30356] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2506.373067][T30356] ? kasan_check_read+0x11/0x20 [ 2506.377925][T30356] handle_mm_fault+0x43f/0xb30 [ 2506.382708][T30356] __do_page_fault+0x5ef/0xda0 [ 2506.387492][T30356] do_page_fault+0x71/0x581 [ 2506.392010][T30356] ? page_fault+0x8/0x30 [ 2506.396260][T30356] page_fault+0x1e/0x30 [ 2506.400418][T30356] RIP: 0033:0x40b8c4 [ 2506.404318][T30356] Code: 33 00 89 48 24 48 89 58 18 31 c0 48 8b 8c 04 10 01 00 00 48 89 8c 02 30 bf 73 00 48 83 c0 08 48 83 f8 48 75 e6 e8 2c 75 ff ff <83> 05 39 47 53 00 01 80 7c 24 0b 00 74 0b f6 44 24 0c 01 0f 84 cd [ 2506.423922][T30356] RSP: 002b:00007fff5bc3c6c0 EFLAGS: 00010217 [ 2506.430001][T30356] RAX: 0000000000000000 RBX: ffffffffffffffff RCX: 0000000000458079 [ 2506.438017][T30356] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 000000000073bf08 [ 2506.446001][T30356] RBP: 000000000073bf00 R08: 00007fa951309700 R09: 0000000000263f17 [ 2506.454063][T30356] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000090f [ 2506.462037][T30356] R13: 0000000000000000 R14: 0000000000000004 R15: 000000000073bf0c [ 2506.494807][T30356] memory: usage 307200kB, limit 307200kB, failcnt 8575 03:48:10 executing program 4: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/32) r2 = socket$inet_dccp(0x2, 0x6, 0x0) fremovexattr(0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x1f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r3, 0x0, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = accept(r1, 0x0, &(0x7f0000000080)=0xfe0f) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getgid() fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fcntl$getown(r0, 0x9) getgroups(0x0, &(0x7f00000023c0)) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendfile(r4, r0, 0x0, 0x10000014e) [ 2506.545740][T30356] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2506.611346][T30356] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2506.625761][T30356] Memory cgroup stats for /syz1: cache:11044KB rss:236060KB rss_huge:212992KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:236080KB inactive_file:0KB active_file:0KB unevictable:11008KB 03:48:10 executing program 2: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/32) r2 = socket$inet_dccp(0x2, 0x6, 0x0) fremovexattr(0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x1f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r3, 0x0, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = accept(r1, 0x0, &(0x7f0000000080)=0xfe0f) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getgid() fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fcntl$getown(r0, 0x9) getgroups(0x0, &(0x7f00000023c0)) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendfile(r4, r0, 0x0, 0x10000014e) 03:48:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000540)={'TPROXY\x00'}, &(0x7f0000000640)=0x46) openat$ptmx(0xffffffffffffff9c, 0x0, 0xfffffffffffffffe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f00000001c0)={0x6, 0x1d, 0x1}) r3 = mq_open(&(0x7f0000000000)='TPROXY\x00', 0x6e93ebbbcc0884f2, 0x4, 0x0) mq_notify(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040)="3db8ff500610689ec6d80d61eaeeb8f357bea52d709add5e9c8eaf6c550bb2662d178141fbe790083d490f76eb251da07b92e308c4ea09f0514bd5", 0x0}}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) r5 = getegid() ioctl$TUNSETGROUP(r1, 0x400454ce, r5) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f00000003c0)='NET_DM\x00') syz_open_dev$binder(0x0, 0x0, 0x802) recvfrom$llc(r2, &(0x7f0000000280)=""/178, 0xb2, 0x2007, &(0x7f0000000200)={0x1a, 0x6, 0xffffffffffffffff, 0x100000000, 0xfff, 0x20000cd7, @broadcast}, 0xfffffffffffffe3f) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000380)={0x1, 0x18cf, 0x5, 0x4}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x4000000000001000, &(0x7f0000000140), 0x1, r1, 0x8}) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x10, &(0x7f0000000740)={0x0, 0x0, 0xffffffffffffffff}}, 0x10) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000400), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000440)={0x3, @raw_data="d0ff50662d24992032727469b48500272198d5315e63d3974b7fed5f2f8762bebde97b7e5029e65fb0ee4082660998fed5ab2a36e81663674599a31da36beb31915f78cf315a5b91ddf6bd90cbd02421f6fa179fc7d7777469e11981ef977c0f0c2b4d75306cf8f130a133b810700ada7c22dd870ed051b54fceee2014e929ff193db8c4c41efa2d7f414f6d8c8ffbc49717586c7810770d68712c794d84324f7abfde489de3f39c59373d914e3c12ec4bdaaecba356982bc276abf733e1663346a3c6ddfa1b4478"}) [ 2506.666920][T30356] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18416,uid=0 [ 2506.700876][T30356] Memory cgroup out of memory: Killed process 18416 (syz-executor.1) total-vm:72448kB, anon-rss:4248kB, file-rss:34816kB, shmem-rss:0kB [ 2506.865112][ C1] net_ratelimit: 27 callbacks suppressed [ 2506.865121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2506.876814][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2506.884827][T30359] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2506.934664][T30359] CPU: 1 PID: 30359 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2506.943735][T30359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2506.953808][T30359] Call Trace: [ 2506.957114][T30359] dump_stack+0x172/0x1f0 [ 2506.961475][T30359] dump_header+0x10f/0xb6c [ 2506.965909][T30359] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2506.967025][T30371] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2506.971911][T30359] ? ___ratelimit+0x60/0x595 [ 2506.971929][T30359] ? do_raw_spin_unlock+0x57/0x270 [ 2506.971962][T30359] oom_kill_process.cold+0x10/0x15 [ 2506.971982][T30359] out_of_memory+0x79a/0x1280 [ 2506.972007][T30359] ? oom_killer_disable+0x280/0x280 [ 2506.972019][T30359] ? find_held_lock+0x35/0x130 [ 2506.972045][T30359] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2507.004307][T30371] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2507.004419][T30359] ? memcg_event_wake+0x230/0x230 [ 2507.004446][T30359] ? do_raw_spin_unlock+0x57/0x270 [ 2507.004473][T30359] ? _raw_spin_unlock+0x2d/0x50 [ 2507.024835][T30371] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2507.027922][T30359] try_charge+0xd4d/0x1790 [ 2507.028011][T30359] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2507.028033][T30359] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2507.028055][T30359] ? kasan_check_read+0x11/0x20 [ 2507.028077][T30359] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2507.028098][T30359] mem_cgroup_try_charge+0x24d/0x5e0 [ 2507.028122][T30359] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2507.028142][T30359] wp_page_copy+0x408/0x1740 [ 2507.028158][T30359] ? find_held_lock+0x35/0x130 [ 2507.028179][T30359] ? pmd_pfn+0x1d0/0x1d0 [ 2507.038764][T30371] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 2507.046009][T30359] ? lock_downgrade+0x880/0x880 [ 2507.046029][T30359] ? __pte_alloc_kernel+0x220/0x220 [ 2507.046050][T30359] ? kasan_check_read+0x11/0x20 [ 2507.046066][T30359] ? do_raw_spin_unlock+0x57/0x270 [ 2507.046083][T30359] do_wp_page+0x5d8/0x16c0 [ 2507.046097][T30359] ? do_raw_spin_lock+0x12a/0x2e0 [ 2507.046115][T30359] ? rwlock_bug.part.0+0x90/0x90 [ 2507.046131][T30359] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2507.046151][T30359] ? add_mm_counter_fast.part.0+0x40/0x40 [ 2507.150906][T30359] __handle_mm_fault+0x22e8/0x3ec0 [ 2507.156052][T30359] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2507.161617][T30359] ? find_held_lock+0x35/0x130 [ 2507.166389][T30359] ? handle_mm_fault+0x322/0xb30 [ 2507.171347][T30359] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2507.177608][T30359] ? kasan_check_read+0x11/0x20 [ 2507.182487][T30359] handle_mm_fault+0x43f/0xb30 [ 2507.187285][T30359] __do_page_fault+0x5ef/0xda0 [ 2507.192099][T30359] do_page_fault+0x71/0x581 [ 2507.196628][T30359] page_fault+0x1e/0x30 [ 2507.200799][T30359] RIP: 0010:__put_user_4+0x1c/0x30 [ 2507.205918][T30359] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 00 ee 01 00 48 8b 9b 18 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 2507.225635][T30359] RSP: 0018:ffff88821b22fe18 EFLAGS: 00010297 [ 2507.231712][T30359] RAX: 0000000000000003 RBX: 00007fffffffeffd RCX: 00000000200002c0 [ 2507.239698][T30359] RDX: 000000000000006c RSI: ffffffff81995df3 RDI: 0000000000000286 [ 2507.247680][T30359] RBP: ffff88821b22fee0 R08: ffff8880766e4640 R09: 0000000000000001 [ 2507.255748][T30359] R10: ffff8880766e4ec0 R11: ffff8880766e4640 R12: 0000000000000002 [ 2507.263730][T30359] R13: 0000000000000003 R14: 0000000000000004 R15: 0000000000000000 [ 2507.271731][T30359] ? __might_fault+0x1a3/0x1e0 [ 2507.276524][T30359] ? __sys_socketpair+0x11f/0x5e0 [ 2507.281564][T30359] ? __ia32_sys_socket+0xb0/0xb0 [ 2507.286612][T30359] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2507.292166][T30359] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2507.297619][T30359] ? do_syscall_64+0x26/0x610 [ 2507.302282][T30359] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2507.308329][T30359] ? do_syscall_64+0x26/0x610 [ 2507.313013][T30359] __x64_sys_socketpair+0x97/0xf0 [ 2507.318059][T30359] do_syscall_64+0x103/0x610 [ 2507.322637][T30359] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2507.328550][T30359] RIP: 0033:0x458079 [ 2507.332447][T30359] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2507.352037][T30359] RSP: 002b:00007fa951308c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2507.360435][T30359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458079 [ 2507.368390][T30359] RDX: 0000000000000000 RSI: 0100000000000002 RDI: 0000000000000001 [ 2507.376345][T30359] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2507.384297][T30359] R10: 00000000200002c0 R11: 0000000000000246 R12: 00007fa9513096d4 [ 2507.392263][T30359] R13: 00000000004c6642 R14: 00000000004dba68 R15: 00000000ffffffff [ 2507.450994][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2507.458223][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2507.465960][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2507.471810][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2507.477804][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2507.483607][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2507.489499][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:48:11 executing program 4: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/32) r2 = socket$inet_dccp(0x2, 0x6, 0x0) fremovexattr(0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x1f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r3, 0x0, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = accept(r1, 0x0, &(0x7f0000000080)=0xfe0f) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getgid() fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fcntl$getown(r0, 0x9) getgroups(0x0, &(0x7f00000023c0)) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendfile(r4, r0, 0x0, 0x10000014e) 03:48:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x4, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x1000, 0x0, 0x257, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff8c, 0x0, 0x80000001, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x8, 0x0, 0xffffffffffffb7a4, 0x0, 0x1, 0x0, 0x7ff, 0x0, 0x7, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x8, r0, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="000c0500cd0000001b0300000000000000000000263f4aa9f8b0eb37235e200000000001000000000000f4546b2a010000008c57e1e99e2eaa16f320792d9306c7157639331a35feef10c456c9db1a5f08df8016fb26f08749a65000"], 0x5c) sync_file_range(r0, 0x0, 0x9, 0x2) fallocate(r1, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8}) [ 2507.492844][T30359] memory: usage 302852kB, limit 307200kB, failcnt 8575 [ 2507.495343][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x101) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x10001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0x0) 03:48:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000540)={'TPROXY\x00'}, &(0x7f0000000640)=0x46) openat$ptmx(0xffffffffffffff9c, 0x0, 0xfffffffffffffffe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f00000001c0)={0x6, 0x1d, 0x1}) r3 = mq_open(&(0x7f0000000000)='TPROXY\x00', 0x6e93ebbbcc0884f2, 0x4, 0x0) mq_notify(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040)="3db8ff500610689ec6d80d61eaeeb8f357bea52d709add5e9c8eaf6c550bb2662d178141fbe790083d490f76eb251da07b92e308c4ea09f0514bd5", 0x0}}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) r5 = getegid() ioctl$TUNSETGROUP(r1, 0x400454ce, r5) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f00000003c0)='NET_DM\x00') syz_open_dev$binder(0x0, 0x0, 0x802) recvfrom$llc(r2, &(0x7f0000000280)=""/178, 0xb2, 0x2007, &(0x7f0000000200)={0x1a, 0x6, 0xffffffffffffffff, 0x100000000, 0xfff, 0x20000cd7, @broadcast}, 0xfffffffffffffe3f) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000380)={0x1, 0x18cf, 0x5, 0x4}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x4000000000001000, &(0x7f0000000140), 0x1, r1, 0x8}) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x10, &(0x7f0000000740)={0x0, 0x0, 0xffffffffffffffff}}, 0x10) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000400), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000440)={0x3, @raw_data="d0ff50662d24992032727469b48500272198d5315e63d3974b7fed5f2f8762bebde97b7e5029e65fb0ee4082660998fed5ab2a36e81663674599a31da36beb31915f78cf315a5b91ddf6bd90cbd02421f6fa179fc7d7777469e11981ef977c0f0c2b4d75306cf8f130a133b810700ada7c22dd870ed051b54fceee2014e929ff193db8c4c41efa2d7f414f6d8c8ffbc49717586c7810770d68712c794d84324f7abfde489de3f39c59373d914e3c12ec4bdaaecba356982bc276abf733e1663346a3c6ddfa1b4478"}) [ 2507.592610][T30359] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2507.625802][T30359] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:48:11 executing program 2: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/32) r2 = socket$inet_dccp(0x2, 0x6, 0x0) fremovexattr(0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x1f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r3, 0x0, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = accept(r1, 0x0, &(0x7f0000000080)=0xfe0f) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getgid() fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fcntl$getown(r0, 0x9) getgroups(0x0, &(0x7f00000023c0)) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendfile(r4, r0, 0x0, 0x10000014e) [ 2507.668549][T30359] Memory cgroup stats for /syz1: cache:11044KB rss:231880KB rss_huge:208896KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:231888KB inactive_file:0KB active_file:0KB unevictable:11008KB [ 2507.772994][T30359] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18435,uid=0 [ 2507.836841][T30359] Memory cgroup out of memory: Killed process 18435 (syz-executor.1) total-vm:72448kB, anon-rss:4248kB, file-rss:34816kB, shmem-rss:0kB [ 2507.914064][ T1044] oom_reaper: reaped process 18435 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2507.929040][T30387] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2507.942490][T30387] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2507.953944][T30387] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2507.962852][T30387] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 2507.993696][T30359] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 03:48:12 executing program 1: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/32) r2 = socket$inet_dccp(0x2, 0x6, 0x0) fremovexattr(0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x1f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r3, 0x0, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = accept(r1, 0x0, &(0x7f0000000080)=0xfe0f) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getgid() fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fcntl$getown(r0, 0x9) getgroups(0x0, &(0x7f00000023c0)) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendfile(r4, r0, 0x0, 0x10000014e) 03:48:12 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/32) r2 = socket$inet_dccp(0x2, 0x6, 0x0) fremovexattr(0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x1f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r3, 0x0, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = accept(r1, 0x0, &(0x7f0000000080)=0xfe0f) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getgid() fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fcntl$getown(r0, 0x9) getgroups(0x0, &(0x7f00000023c0)) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendfile(r4, r0, 0x0, 0x10000014e) 03:48:12 executing program 4: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/32) r2 = socket$inet_dccp(0x2, 0x6, 0x0) fremovexattr(0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x1f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r3, 0x0, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = accept(r1, 0x0, &(0x7f0000000080)=0xfe0f) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getgid() fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fcntl$getown(r0, 0x9) getgroups(0x0, &(0x7f00000023c0)) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendfile(r4, r0, 0x0, 0x10000014e) 03:48:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x101) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x10001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0x0) 03:48:12 executing program 2: syz_open_dev$usb(0x0, 0x200, 0x4000000008000) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) keyctl$describe(0x6, 0x0, &(0x7f0000000640)=""/254, 0xfe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) 03:48:12 executing program 2: syz_open_dev$usb(0x0, 0x200, 0x4000000008000) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) keyctl$describe(0x6, 0x0, &(0x7f0000000640)=""/254, 0xfe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) 03:48:12 executing program 5: syz_open_dev$usb(0x0, 0x200, 0x4000000008000) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) keyctl$describe(0x6, 0x0, &(0x7f0000000640)=""/254, 0xfe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) 03:48:12 executing program 5: syz_open_dev$usb(0x0, 0x200, 0x4000000008000) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) keyctl$describe(0x6, 0x0, &(0x7f0000000640)=""/254, 0xfe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) 03:48:12 executing program 2: syz_open_dev$usb(0x0, 0x200, 0x4000000008000) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) keyctl$describe(0x6, 0x0, &(0x7f0000000640)=""/254, 0xfe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) 03:48:12 executing program 2: syz_open_dev$usb(0x0, 0x200, 0x4000000008000) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) keyctl$describe(0x6, 0x0, &(0x7f0000000640)=""/254, 0xfe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) 03:48:12 executing program 5: syz_open_dev$usb(0x0, 0x200, 0x4000000008000) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) keyctl$describe(0x6, 0x0, &(0x7f0000000640)=""/254, 0xfe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) 03:48:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x88, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0xffffffffffffffa5, [], 0x0, &(0x7f0000000080), &(0x7f00000002c0)=""/129}, 0xffffffffffffffff) 03:48:12 executing program 1: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/32) r2 = socket$inet_dccp(0x2, 0x6, 0x0) fremovexattr(0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x1f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r3, 0x0, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = accept(r1, 0x0, &(0x7f0000000080)=0xfe0f) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getgid() fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fcntl$getown(r0, 0x9) getgroups(0x0, &(0x7f00000023c0)) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendfile(r4, r0, 0x0, 0x10000014e) 03:48:12 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/32) r2 = socket$inet_dccp(0x2, 0x6, 0x0) fremovexattr(0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x1f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r3, 0x0, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = accept(r1, 0x0, &(0x7f0000000080)=0xfe0f) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getgid() fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fcntl$getown(r0, 0x9) getgroups(0x0, &(0x7f00000023c0)) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendfile(r4, r0, 0x0, 0x10000014e) 03:48:13 executing program 4: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/32) r2 = socket$inet_dccp(0x2, 0x6, 0x0) fremovexattr(0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x1f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r3, 0x0, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = accept(r1, 0x0, &(0x7f0000000080)=0xfe0f) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getgid() fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fcntl$getown(r0, 0x9) getgroups(0x0, &(0x7f00000023c0)) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendfile(r4, r0, 0x0, 0x10000014e) 03:48:13 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, r0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r3 = dup(r2) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000380)) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000400)='team\x00') eventfd(0x8) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) 03:48:13 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x890c, &(0x7f0000000380)={'bond0\x00\x00z\a\x00\x00\x01\x00\x01\x00\x05', @ifru_addrs=@tipc}) 03:48:13 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x40000000000002, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) 03:48:13 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xe, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0xffffffffffffffff, 0x79e, &(0x7f00001a7f05)=""/251}, 0x48) 03:48:13 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, r0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r3 = dup(r2) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000380)) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000400)='team\x00') eventfd(0x8) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) 03:48:13 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x3}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = eventfd(0x7ff) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000001c0)={0x3, 0x7, "75c2f774f8b527"}) syz_open_dev$dri(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) connect$caif(r1, &(0x7f0000000200), 0x18) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000280)=""/154) fallocate(r2, 0x5, 0x45, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r4, 0x4008af23, &(0x7f0000000240)={0x0, 0x3}) chmod(&(0x7f0000000180)='./file0\x00', 0x6) request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='nodev^\xd5\x00', 0xfffffffffffffffe) preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000400)=""/243, 0xf3}], 0x1, 0x0) close(r5) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x0, r5}) 03:48:13 executing program 2: r0 = getpgid(0x0) r1 = memfd_create(&(0x7f0000000580)='((!\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='\xf3patm\x00') 03:48:13 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, r0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r3 = dup(r2) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000380)) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000400)='team\x00') eventfd(0x8) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) 03:48:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000008a80)={&(0x7f0000008780)=@hci, 0x80, &(0x7f00000089c0)=[{&(0x7f00000088c0)=""/210, 0xd2}], 0x1, &(0x7f0000000bc0)=""/118, 0x76}, 0x2) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/137, 0x89}, {&(0x7f0000000580)=""/67, 0x43}, {&(0x7f00000006c0)=""/165, 0xa5}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000340)=""/41, 0x29}], 0x5, 0x0, 0x0, 0x6}, 0x1) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000003c0)="232c224f42fa9c02ce977e3f75f6f6413ab45b9b5ed588d03ccd43ece25cdb7ad8595aefe87d7f79c33bcd523bca559178980acf", 0x34}, {0x0}], 0x2}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000004340)={0x0, 0x0, 0x8}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000042c0)={&(0x7f0000000b00)=@in6={0xa, 0x4e24, 0x9, @loopback, 0xfffffffffffffffd}, 0x80, &(0x7f0000004180)=[{0x0}, {0x0}], 0x2, &(0x7f0000004240)=[{0x20, 0x11f, 0x7f, "d1cd956d956a7070c137a261a1"}], 0x20}, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) 03:48:13 executing program 1: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/32) r2 = socket$inet_dccp(0x2, 0x6, 0x0) fremovexattr(0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x1f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r3, 0x0, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = accept(r1, 0x0, &(0x7f0000000080)=0xfe0f) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getgid() fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fcntl$getown(r0, 0x9) getgroups(0x0, &(0x7f00000023c0)) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendfile(r4, r0, 0x0, 0x10000014e) 03:48:13 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/32) r2 = socket$inet_dccp(0x2, 0x6, 0x0) fremovexattr(0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x1f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r3, 0x0, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = accept(r1, 0x0, &(0x7f0000000080)=0xfe0f) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getgid() fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fcntl$getown(r0, 0x9) getgroups(0x0, &(0x7f00000023c0)) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendfile(r4, r0, 0x0, 0x10000014e) 03:48:14 executing program 4: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/32) r2 = socket$inet_dccp(0x2, 0x6, 0x0) fremovexattr(0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x1f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r3, 0x0, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = accept(r1, 0x0, &(0x7f0000000080)=0xfe0f) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getgid() fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fcntl$getown(r0, 0x9) getgroups(0x0, &(0x7f00000023c0)) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendfile(r4, r0, 0x0, 0x10000014e) 03:48:14 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, r0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r3 = dup(r2) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000380)) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000400)='team\x00') eventfd(0x8) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) 03:48:14 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x3}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = eventfd(0x7ff) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000001c0)={0x3, 0x7, "75c2f774f8b527"}) syz_open_dev$dri(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) connect$caif(r1, &(0x7f0000000200), 0x18) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000280)=""/154) fallocate(r2, 0x5, 0x45, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r4, 0x4008af23, &(0x7f0000000240)={0x0, 0x3}) chmod(&(0x7f0000000180)='./file0\x00', 0x6) request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='nodev^\xd5\x00', 0xfffffffffffffffe) preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000400)=""/243, 0xf3}], 0x1, 0x0) close(r5) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x0, r5}) 03:48:14 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x3}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = eventfd(0x7ff) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000001c0)={0x3, 0x7, "75c2f774f8b527"}) syz_open_dev$dri(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) connect$caif(r1, &(0x7f0000000200), 0x18) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000280)=""/154) fallocate(r2, 0x5, 0x45, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r4, 0x4008af23, &(0x7f0000000240)={0x0, 0x3}) chmod(&(0x7f0000000180)='./file0\x00', 0x6) request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='nodev^\xd5\x00', 0xfffffffffffffffe) preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000400)=""/243, 0xf3}], 0x1, 0x0) close(r5) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x0, r5}) 03:48:14 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x3}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = eventfd(0x7ff) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000001c0)={0x3, 0x7, "75c2f774f8b527"}) syz_open_dev$dri(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) connect$caif(r1, &(0x7f0000000200), 0x18) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000280)=""/154) fallocate(r2, 0x5, 0x45, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r4, 0x4008af23, &(0x7f0000000240)={0x0, 0x3}) chmod(&(0x7f0000000180)='./file0\x00', 0x6) request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='nodev^\xd5\x00', 0xfffffffffffffffe) preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000400)=""/243, 0xf3}], 0x1, 0x0) close(r5) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x0, r5}) 03:48:14 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x3}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = eventfd(0x7ff) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000001c0)={0x3, 0x7, "75c2f774f8b527"}) syz_open_dev$dri(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) connect$caif(r1, &(0x7f0000000200), 0x18) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000280)=""/154) fallocate(r2, 0x5, 0x45, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r4, 0x4008af23, &(0x7f0000000240)={0x0, 0x3}) chmod(&(0x7f0000000180)='./file0\x00', 0x6) request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='nodev^\xd5\x00', 0xfffffffffffffffe) preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000400)=""/243, 0xf3}], 0x1, 0x0) close(r5) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x0, r5}) [ 2510.679568][T30473] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2510.692645][T30473] CPU: 1 PID: 30473 Comm: syz-executor.2 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2510.701687][T30473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2510.712015][T30473] Call Trace: [ 2510.715326][T30473] dump_stack+0x172/0x1f0 [ 2510.719683][T30473] dump_header+0x10f/0xb6c [ 2510.725361][T30473] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2510.731170][T30473] ? ___ratelimit+0x60/0x595 [ 2510.735746][T30473] ? do_raw_spin_unlock+0x57/0x270 [ 2510.740845][T30473] oom_kill_process.cold+0x10/0x15 [ 2510.745953][T30473] out_of_memory+0x79a/0x1280 [ 2510.750613][T30473] ? mark_held_locks+0xa4/0xf0 [ 2510.755367][T30473] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2510.760812][T30473] ? oom_killer_disable+0x280/0x280 [ 2510.766083][T30473] ? find_held_lock+0x35/0x130 [ 2510.771013][T30473] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2510.776553][T30473] ? memcg_event_wake+0x230/0x230 [ 2510.781575][T30473] try_charge+0x118d/0x1790 [ 2510.786066][T30473] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2510.791599][T30473] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2510.797847][T30473] ? kasan_check_read+0x11/0x20 [ 2510.802689][T30473] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2510.808229][T30473] mem_cgroup_try_charge+0x24d/0x5e0 [ 2510.813509][T30473] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2510.819140][T30473] wp_page_copy+0x408/0x1740 [ 2510.823716][T30473] ? find_held_lock+0x35/0x130 [ 2510.828476][T30473] ? pmd_pfn+0x1d0/0x1d0 [ 2510.832706][T30473] ? lock_downgrade+0x880/0x880 [ 2510.837541][T30473] ? __pte_alloc_kernel+0x220/0x220 [ 2510.842729][T30473] ? kasan_check_read+0x11/0x20 [ 2510.847563][T30473] ? do_raw_spin_unlock+0x57/0x270 [ 2510.852663][T30473] do_wp_page+0x5d8/0x16c0 [ 2510.857066][T30473] ? do_raw_spin_lock+0x12a/0x2e0 [ 2510.862076][T30473] ? rwlock_bug.part.0+0x90/0x90 [ 2510.866998][T30473] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2510.872645][T30473] __handle_mm_fault+0x22e8/0x3ec0 [ 2510.878110][T30473] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2510.883647][T30473] ? find_held_lock+0x35/0x130 [ 2510.888394][T30473] ? handle_mm_fault+0x322/0xb30 [ 2510.893330][T30473] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2510.899554][T30473] ? sync_mm_rss+0xa4/0x1c0 [ 2510.904043][T30473] handle_mm_fault+0x43f/0xb30 [ 2510.908795][T30473] __do_page_fault+0x5ef/0xda0 [ 2510.913563][T30473] do_page_fault+0x71/0x581 [ 2510.918062][T30473] page_fault+0x1e/0x30 [ 2510.922219][T30473] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 2510.928790][T30473] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 2510.948379][T30473] RSP: 0018:ffff88820f0e77d8 EFLAGS: 00010206 [ 2510.954441][T30473] RAX: ffffed100f6ccc63 RBX: 00000000000101d0 RCX: 000000000000c785 [ 2510.962406][T30473] RDX: 00000000000101d0 RSI: ffff88807b659b93 RDI: 000000002039a000 [ 2510.970370][T30473] RBP: ffff88820f0e7810 R08: ffffed100f6ccc63 R09: 0000000000000003 [ 2510.978326][T30473] R10: ffffed100f6ccc62 R11: ffff88807b666317 R12: 00000000203965b5 [ 2510.986307][T30473] R13: ffff88807b656148 R14: 00000000203a6785 R15: 00007ffffffff000 [ 2510.994298][T30473] ? copyout+0xe2/0x100 [ 2510.998441][T30473] _copy_to_iter+0x27e/0x10f0 [ 2511.003105][T30473] ? skb_kill_datagram+0x130/0x130 [ 2511.008217][T30473] ? iov_iter_copy_from_user_atomic+0xc70/0xc70 [ 2511.014454][T30473] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2511.020785][T30473] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2511.027012][T30473] ? __phys_addr_symbol+0x30/0x70 [ 2511.032032][T30473] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2511.037746][T30473] ? __check_object_size+0x3d/0x42f [ 2511.042933][T30473] simple_copy_to_iter+0x36/0x40 [ 2511.047871][T30473] __skb_datagram_iter+0x10b/0x750 [ 2511.052966][T30473] ? skb_kill_datagram+0x130/0x130 [ 2511.058069][T30473] skb_copy_datagram_iter+0x92/0x310 [ 2511.063345][T30473] tipc_recvstream+0x432/0xa10 [ 2511.068100][T30473] ? tipc_recvmsg+0xc90/0xc90 [ 2511.072767][T30473] ? apparmor_socket_recvmsg+0x2a/0x30 [ 2511.078273][T30473] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2511.084500][T30473] ? security_socket_recvmsg+0x9b/0xd0 [ 2511.089956][T30473] ? tipc_recvmsg+0xc90/0xc90 [ 2511.094625][T30473] sock_recvmsg+0xd0/0x110 [ 2511.099026][T30473] ? __sock_recv_ts_and_drops+0x590/0x590 [ 2511.104730][T30473] ___sys_recvmsg+0x273/0x5a0 [ 2511.109398][T30473] ? ___sys_sendmsg+0x930/0x930 [ 2511.114247][T30473] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2511.120476][T30473] ? kasan_check_read+0x11/0x20 [ 2511.125317][T30473] ? __fget+0x381/0x550 [ 2511.129468][T30473] ? ksys_dup3+0x3e0/0x3e0 [ 2511.133891][T30473] ? lock_downgrade+0x880/0x880 [ 2511.138730][T30473] ? __fget_light+0x1a9/0x230 [ 2511.143390][T30473] ? __fdget+0x1b/0x20 [ 2511.147441][T30473] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2511.153668][T30473] __sys_recvmsg+0x102/0x1d0 [ 2511.158246][T30473] ? __ia32_sys_sendmmsg+0x100/0x100 [ 2511.163529][T30473] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2511.168985][T30473] ? do_syscall_64+0x26/0x610 [ 2511.173668][T30473] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2511.179725][T30473] ? do_syscall_64+0x26/0x610 [ 2511.184415][T30473] __x64_sys_recvmsg+0x78/0xb0 [ 2511.189168][T30473] do_syscall_64+0x103/0x610 [ 2511.193746][T30473] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2511.199624][T30473] RIP: 0033:0x458079 [ 2511.203502][T30473] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2511.223099][T30473] RSP: 002b:00007fe639a7bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f 03:48:15 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x3}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = eventfd(0x7ff) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000001c0)={0x3, 0x7, "75c2f774f8b527"}) syz_open_dev$dri(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) connect$caif(r1, &(0x7f0000000200), 0x18) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000280)=""/154) fallocate(r2, 0x5, 0x45, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r4, 0x4008af23, &(0x7f0000000240)={0x0, 0x3}) chmod(&(0x7f0000000180)='./file0\x00', 0x6) request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='nodev^\xd5\x00', 0xfffffffffffffffe) preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000400)=""/243, 0xf3}], 0x1, 0x0) close(r5) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x0, r5}) [ 2511.231496][T30473] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458079 [ 2511.239462][T30473] RDX: 0000000000003f00 RSI: 0000000020000200 RDI: 0000000000000004 [ 2511.247416][T30473] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2511.255369][T30473] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe639a7c6d4 [ 2511.263322][T30473] R13: 00000000004c4d21 R14: 00000000004d88a0 R15: 00000000ffffffff 03:48:15 executing program 3: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x2715, 0xffffffffffffffff, &(0x7f0000000000)=0x2a5) [ 2511.303564][T30473] memory: usage 307200kB, limit 307200kB, failcnt 3488 [ 2511.336834][T30473] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 03:48:15 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x3}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = eventfd(0x7ff) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000001c0)={0x3, 0x7, "75c2f774f8b527"}) syz_open_dev$dri(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) connect$caif(r1, &(0x7f0000000200), 0x18) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000280)=""/154) fallocate(r2, 0x5, 0x45, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r4, 0x4008af23, &(0x7f0000000240)={0x0, 0x3}) chmod(&(0x7f0000000180)='./file0\x00', 0x6) request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='nodev^\xd5\x00', 0xfffffffffffffffe) preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000400)=""/243, 0xf3}], 0x1, 0x0) close(r5) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x0, r5}) [ 2511.408748][T30473] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2511.446675][T30473] Memory cgroup stats for /syz2: cache:10036KB rss:242568KB rss_huge:212992KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:242692KB inactive_file:0KB active_file:4KB unevictable:10088KB [ 2511.473526][T30473] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30472,uid=0 [ 2511.508991][T30473] Memory cgroup out of memory: Killed process 30472 (syz-executor.2) total-vm:72976kB, anon-rss:3808kB, file-rss:34944kB, shmem-rss:0kB [ 2511.544972][ T1044] oom_reaper: reaped process 30472 (syz-executor.2), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 03:48:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000008a80)={&(0x7f0000008780)=@hci, 0x80, &(0x7f00000089c0)=[{&(0x7f00000088c0)=""/210, 0xd2}], 0x1, &(0x7f0000000bc0)=""/118, 0x76}, 0x2) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/137, 0x89}, {&(0x7f0000000580)=""/67, 0x43}, {&(0x7f00000006c0)=""/165, 0xa5}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000340)=""/41, 0x29}], 0x5, 0x0, 0x0, 0x6}, 0x1) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000003c0)="232c224f42fa9c02ce977e3f75f6f6413ab45b9b5ed588d03ccd43ece25cdb7ad8595aefe87d7f79c33bcd523bca559178980acf", 0x34}, {0x0}], 0x2}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000004340)={0x0, 0x0, 0x8}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000042c0)={&(0x7f0000000b00)=@in6={0xa, 0x4e24, 0x9, @loopback, 0xfffffffffffffffd}, 0x80, &(0x7f0000004180)=[{0x0}, {0x0}], 0x2, &(0x7f0000004240)=[{0x20, 0x11f, 0x7f, "d1cd956d956a7070c137a261a1"}], 0x20}, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) 03:48:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x2, 0x4, 0x1, 0x7, 0x4, 0xffffffffffffffff, 0x0, [0x5f]}, 0x2c) 03:48:15 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:48:15 executing program 1: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000100)='./file1\x00') fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x1) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x2000006102001fbc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) 03:48:15 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080), 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0xff) setresuid(0x0, r2, r2) r3 = inotify_init1(0x800) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000180)={0x0, 0x0}) process_vm_readv(r4, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000740)={0x2, 0xeef0, 0xc94, 0x0, 0x5, 0x8001}) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000200)) 03:48:15 executing program 0: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000002280)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 03:48:15 executing program 1: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000100)='./file1\x00') fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x1) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x2000006102001fbc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) 03:48:15 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) connect$netlink(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x400200007fe, &(0x7f0000000280)={0x2, 0x10084e23, @local}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x1000000}, 0x1500) 03:48:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0x1bf, 0x0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) [ 2511.812377][T30530] ptrace attach of "/root/syz-executor.5"[7571] was attempted by "/root/syz-executor.5"[30530] [ 2511.902233][T30546] ptrace attach of "/root/syz-executor.5"[7571] was attempted by "/root/syz-executor.5"[30546] 03:48:15 executing program 1: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000100)='./file1\x00') fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x1) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x2000006102001fbc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) 03:48:15 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f00000009c0)=ANY=[@ANYRES32], 0x4) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x2003e8, 0x5) 03:48:15 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080), 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0xff) setresuid(0x0, r2, r2) r3 = inotify_init1(0x800) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000180)={0x0, 0x0}) process_vm_readv(r4, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000740)={0x2, 0xeef0, 0xc94, 0x0, 0x5, 0x8001}) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000200)) [ 2512.247018][T30567] ptrace attach of "/root/syz-executor.5"[7571] was attempted by "/root/syz-executor.5"[30567] [ 2512.526573][T30538] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2512.556003][T30538] CPU: 0 PID: 30538 Comm: syz-executor.2 Not tainted 5.1.0-rc1-next-20190319 #6 [ 2512.565104][T30538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2512.575176][T30538] Call Trace: [ 2512.578499][T30538] dump_stack+0x172/0x1f0 [ 2512.582851][T30538] dump_header+0x10f/0xb6c [ 2512.587282][T30538] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2512.593224][T30538] ? ___ratelimit+0x60/0x595 [ 2512.597823][T30538] ? do_raw_spin_unlock+0x57/0x270 [ 2512.602943][T30538] oom_kill_process.cold+0x10/0x15 [ 2512.608124][T30538] out_of_memory+0x79a/0x1280 [ 2512.612815][T30538] ? lock_downgrade+0x880/0x880 [ 2512.617667][T30538] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2512.623913][T30538] ? oom_killer_disable+0x280/0x280 [ 2512.629121][T30538] ? find_held_lock+0x35/0x130 [ 2512.633907][T30538] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2512.639455][T30538] ? memcg_event_wake+0x230/0x230 [ 2512.644515][T30538] ? do_raw_spin_unlock+0x57/0x270 [ 2512.649638][T30538] ? _raw_spin_unlock+0x2d/0x50 [ 2512.654512][T30538] try_charge+0x118d/0x1790 [ 2512.659033][T30538] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2512.664585][T30538] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2512.670949][T30538] ? kasan_check_read+0x11/0x20 [ 2512.675812][T30538] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2512.681369][T30538] mem_cgroup_try_charge+0x24d/0x5e0 [ 2512.686671][T30538] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2512.692315][T30538] wp_page_copy+0x408/0x1740 [ 2512.696912][T30538] ? find_held_lock+0x35/0x130 [ 2512.701688][T30538] ? pmd_pfn+0x1d0/0x1d0 [ 2512.705943][T30538] ? lock_downgrade+0x880/0x880 [ 2512.710795][T30538] ? __pte_alloc_kernel+0x220/0x220 [ 2512.715983][T30538] ? kasan_check_read+0x11/0x20 [ 2512.720819][T30538] ? do_raw_spin_unlock+0x57/0x270 [ 2512.725914][T30538] do_wp_page+0x5d8/0x16c0 [ 2512.730314][T30538] ? do_raw_spin_lock+0x12a/0x2e0 [ 2512.735330][T30538] ? rwlock_bug.part.0+0x90/0x90 [ 2512.740252][T30538] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2512.745604][T30538] ? add_mm_counter_fast.part.0+0x40/0x40 [ 2512.751314][T30538] __handle_mm_fault+0x22e8/0x3ec0 [ 2512.756412][T30538] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2512.761952][T30538] ? find_held_lock+0x35/0x130 [ 2512.766721][T30538] ? handle_mm_fault+0x322/0xb30 [ 2512.771652][T30538] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2512.777879][T30538] ? kasan_check_read+0x11/0x20 [ 2512.782720][T30538] handle_mm_fault+0x43f/0xb30 [ 2512.787484][T30538] __do_page_fault+0x5ef/0xda0 [ 2512.792238][T30538] do_page_fault+0x71/0x581 [ 2512.796728][T30538] page_fault+0x1e/0x30 [ 2512.800868][T30538] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 2512.807446][T30538] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 2512.827044][T30538] RSP: 0018:ffff88820f4077d8 EFLAGS: 00010206 [ 2512.833106][T30538] RAX: ffffed1042045253 RBX: 00000000000101d0 RCX: 0000000000003955 [ 2512.841236][T30538] RDX: 00000000000101d0 RSI: ffff888210225943 RDI: 00000000203b3000 [ 2512.849193][T30538] RBP: ffff88820f407810 R08: ffffed1042045253 R09: 0000000000000003 [ 2512.857146][T30538] R10: ffffed1042045252 R11: ffff888210229297 R12: 00000000203a6785 [ 2512.865100][T30538] R13: ffff8882102190c8 R14: 00000000203b6955 R15: 00007ffffffff000 [ 2512.873127][T30538] ? copyout+0xe2/0x100 [ 2512.877272][T30538] _copy_to_iter+0x27e/0x10f0 [ 2512.881936][T30538] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2512.887211][T30538] ? retint_kernel+0x2d/0x2d [ 2512.891783][T30538] ? trace_hardirqs_on_caller+0x6a/0x220 [ 2512.897405][T30538] ? iov_iter_copy_from_user_atomic+0xc70/0xc70 [ 2512.903626][T30538] ? check_stack_object+0x114/0x160 [ 2512.908806][T30538] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2512.915029][T30538] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2512.921268][T30538] ? __phys_addr_symbol+0x30/0x70 [ 2512.926274][T30538] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2512.931979][T30538] ? __check_object_size+0x3d/0x42f [ 2512.937258][T30538] simple_copy_to_iter+0x36/0x40 [ 2512.942183][T30538] __skb_datagram_iter+0x10b/0x750 [ 2512.947280][T30538] ? skb_kill_datagram+0x130/0x130 [ 2512.952383][T30538] skb_copy_datagram_iter+0x92/0x310 [ 2512.957667][T30538] tipc_recvstream+0x432/0xa10 [ 2512.962425][T30538] ? tipc_recvmsg+0xc90/0xc90 [ 2512.967098][T30538] ? apparmor_socket_recvmsg+0x2a/0x30 [ 2512.972540][T30538] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2512.978763][T30538] ? security_socket_recvmsg+0x9b/0xd0 [ 2512.984226][T30538] ? tipc_recvmsg+0xc90/0xc90 [ 2512.988885][T30538] sock_recvmsg+0xd0/0x110 [ 2512.993283][T30538] ? __sock_recv_ts_and_drops+0x590/0x590 [ 2512.998984][T30538] ___sys_recvmsg+0x273/0x5a0 [ 2513.003664][T30538] ? ___sys_sendmsg+0x930/0x930 [ 2513.008497][T30538] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2513.014721][T30538] ? kasan_check_read+0x11/0x20 [ 2513.019555][T30538] ? __fget+0x381/0x550 [ 2513.023702][T30538] ? ksys_dup3+0x3e0/0x3e0 [ 2513.028107][T30538] ? lock_downgrade+0x880/0x880 [ 2513.032946][T30538] ? __fget_light+0x1a9/0x230 [ 2513.037608][T30538] ? __fdget+0x1b/0x20 [ 2513.041661][T30538] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2513.047910][T30538] __sys_recvmsg+0x102/0x1d0 [ 2513.052605][T30538] ? __ia32_sys_sendmmsg+0x100/0x100 [ 2513.057882][T30538] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2513.063325][T30538] ? do_syscall_64+0x26/0x610 [ 2513.067988][T30538] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2513.074035][T30538] ? do_syscall_64+0x26/0x610 [ 2513.078697][T30538] __x64_sys_recvmsg+0x78/0xb0 [ 2513.083456][T30538] do_syscall_64+0x103/0x610 [ 2513.088033][T30538] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2513.093909][T30538] RIP: 0033:0x458079 [ 2513.097788][T30538] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2513.117377][T30538] RSP: 002b:00007fe639a7bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2513.125769][T30538] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458079 [ 2513.133724][T30538] RDX: 0000000000003f00 RSI: 0000000020000200 RDI: 0000000000000004 [ 2513.141689][T30538] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2513.149659][T30538] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe639a7c6d4 [ 2513.157612][T30538] R13: 00000000004c4d21 R14: 00000000004d88a0 R15: 00000000ffffffff [ 2513.179546][T30538] memory: usage 307200kB, limit 307200kB, failcnt 3512 [ 2513.211409][T30538] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2513.228233][T30538] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2513.241964][T30538] Memory cgroup stats for /syz2: cache:10036KB rss:242616KB rss_huge:215040KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:242776KB inactive_file:0KB active_file:0KB unevictable:10088KB [ 2513.271675][T30538] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30537,uid=0 [ 2513.292450][T30538] Memory cgroup out of memory: Killed process 30538 (syz-executor.2) total-vm:72712kB, anon-rss:3804kB, file-rss:35824kB, shmem-rss:0kB [ 2513.312086][ T1044] oom_reaper: reaped process 30538 (syz-executor.2), now anon-rss:0kB, file-rss:34864kB, shmem-rss:0kB 03:48:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000008a80)={&(0x7f0000008780)=@hci, 0x80, &(0x7f00000089c0)=[{&(0x7f00000088c0)=""/210, 0xd2}], 0x1, &(0x7f0000000bc0)=""/118, 0x76}, 0x2) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/137, 0x89}, {&(0x7f0000000580)=""/67, 0x43}, {&(0x7f00000006c0)=""/165, 0xa5}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000340)=""/41, 0x29}], 0x5, 0x0, 0x0, 0x6}, 0x1) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000003c0)="232c224f42fa9c02ce977e3f75f6f6413ab45b9b5ed588d03ccd43ece25cdb7ad8595aefe87d7f79c33bcd523bca559178980acf", 0x34}, {0x0}], 0x2}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000004340)={0x0, 0x0, 0x8}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000042c0)={&(0x7f0000000b00)=@in6={0xa, 0x4e24, 0x9, @loopback, 0xfffffffffffffffd}, 0x80, &(0x7f0000004180)=[{0x0}, {0x0}], 0x2, &(0x7f0000004240)=[{0x20, 0x11f, 0x7f, "d1cd956d956a7070c137a261a1"}], 0x20}, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) 03:48:17 executing program 1: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000100)='./file1\x00') fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x1) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x2000006102001fbc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) 03:48:17 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080), 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0xff) setresuid(0x0, r2, r2) r3 = inotify_init1(0x800) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000180)={0x0, 0x0}) process_vm_readv(r4, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000740)={0x2, 0xeef0, 0xc94, 0x0, 0x5, 0x8001}) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000200)) 03:48:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0,