[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 40.182175][ T26] audit: type=1800 audit(1548906996.516:25): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 40.219405][ T26] audit: type=1800 audit(1548906996.516:26): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 40.240240][ T26] audit: type=1800 audit(1548906996.516:27): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.205' (ECDSA) to the list of known hosts. 2019/01/31 03:56:45 fuzzer started 2019/01/31 03:56:48 dialing manager at 10.128.0.26:43669 2019/01/31 03:56:48 syscalls: 1 2019/01/31 03:56:48 code coverage: enabled 2019/01/31 03:56:48 comparison tracing: enabled 2019/01/31 03:56:48 extra coverage: extra coverage is not supported by the kernel 2019/01/31 03:56:48 setuid sandbox: enabled 2019/01/31 03:56:48 namespace sandbox: enabled 2019/01/31 03:56:48 Android sandbox: /sys/fs/selinux/policy does not exist 2019/01/31 03:56:48 fault injection: enabled 2019/01/31 03:56:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/01/31 03:56:48 net packet injection: enabled 2019/01/31 03:56:48 net device setup: enabled 03:59:48 executing program 0: r0 = msgget(0x2, 0x14) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/225) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0xd8, 0x10000) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000140)={0x7, [0xa60, 0x80, 0x8, 0x1950000, 0x4, 0x6, 0x3, 0x5, 0x3f, 0xe9, 0x3, 0x7fffffff, 0x6, 0xe2a, 0x4, 0x100, 0x41, 0x5, 0x9, 0x3, 0x4f, 0x1, 0x7, 0x0, 0x7fff, 0x10000, 0x3ff, 0xb6b1, 0x2, 0x5, 0x0, 0x9, 0x3f, 0x3, 0x80, 0x4, 0x5, 0x8, 0x2, 0x100000000, 0x6, 0x1ff, 0x5, 0x401, 0x7ff, 0x81, 0x0, 0x400], 0xf}) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000001c0)={0x40, 0x3637775f, 0x3, @stepwise={0x1, 0x0, 0x1, 0x6, 0x6, 0x101}}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000240)=0x5, 0x4) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000280)=""/153, &(0x7f0000000340)=0x99) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000380)={0x2, 0x0, 0x1016, 0xb5, 0x0, 0x1f, 0x0, 0x1}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000003c0)={0xf09, 0x40, 0x0, 0x9}, 0x6) r2 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self/attr/current\x00', 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000440)={'broute\x00'}, &(0x7f00000004c0)=0x78) fcntl$getownex(r2, 0x10, &(0x7f0000000540)={0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xe8, 0x3f, 0x400, 0x70bd26, 0x25dfdbfc, {0xe}, [@nested={0xd4, 0x33, [@typed={0x8, 0x39, @pid=r3}, @generic="cf309012b21e05b5a7d94e09f2669ece0a41d48b535e2eac29ce693c3979b600f11b5e323e24ab085a0dd56a214ed1dccfb6133191d3d348162ddc1b967815997cc07aefadbf0bf25074671c63098907ebd4e0f239bab0a031723600147711bd30d6095659f946a38d752ec800a8323dae2f3223427c3c720f9d21c00583b47ac04629b9a91a06e329bc95ba6e8496ab9cce71d402c8be3a766f20c83d98388b52742fadb51ac458a7712a684e317683760df130e17da8f1a9d732188dcdea7fcd62b6f9c6"]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000700)={r1}) socket$inet6_udp(0xa, 0x2, 0x0) sendto$unix(r4, &(0x7f0000000740)="7f58aa0fd60c2789804019f03540f72794977b2eafeeeb0e99b5e47222cbddad5438f4c820c5673ff181e32313b2725c7757d773583edaca47ac464c85a40c70821cb7150ac555cd80f3f6ed8378cb35432b5fa85b49bd8460ef68327384890c1e3c1545bdd87ea86022478ff4fedf06ef922dbf9f0bc1964025bc2e40b810153150925984f5721b0a37616779ddb4eeb4b808d4edd97857e9a929ad17866dbc5f3d0dd66b9adef238d1ed60f211a25eb020e2a352001b9079a7a5c81a6577b9c2e4842368629bfe935ae3b36f949a5bcdd434946447c430519f6dc20fb7bb42234ec7ea74c2ba2fb0719ff1f479b4a601cf41", 0xf3, 0x2000c000, &(0x7f0000000840)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000008c0)={0x40, 0x0, 0x2, 'queue1\x00', 0x8000000000}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000980)=""/85, &(0x7f0000000a00)=0x55) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000a40)={0x200}, 0x1) waitid(0x0, r3, &(0x7f0000000a80), 0x2, &(0x7f0000000b00)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000bc0)={0x0, 0xe, "a9fe27340e2ffd02cc0c6e44dd7a"}, &(0x7f0000000c00)=0x16) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000c40)={r5, 0x3, 0x10}, &(0x7f0000000c80)=0xc) r6 = accept(r1, &(0x7f0000000cc0)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f0000000d40)=0x80) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f0000000d80)={0x8001, {{0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0x27}, 0x7fffffff}}, {{0xa, 0x4e24, 0x800, @empty, 0xffffffffffffea27}}}, 0x108) timer_create(0x7, &(0x7f00000010c0)={0x0, 0x3a, 0x1, @thr={&(0x7f0000000ec0)="ef072e255abb7bb8d3687c2314be449777dcd35d99d84c5728454d46a8d3c66de660233b5ed833e29d2210e9dac468ee4633f8c5fee0831287b5770a5ec899c9c84e65d3136792a62dbf42e9975f9979470b39d05a4a65ad28e638799862c68aeea473b42941e37500a2d6a9f1f9a97733082f49052992632854e3189245e87446d37a5bb4a20f3c8e8bfbf38526198eb0dfc7f8adf491e15f04f8656f6067dc5bb691f9ec644b55357da5ed1113312f9179506042acbae8aef497631062cd04a44ad5afd332ba22cf82fcbb", &(0x7f0000000fc0)="84814a70b7049671b4a34dab454f843b8332168c3c652261ef5a748d6cc9feea270010d18a24f7bd0cd3f08f884bfee2f20bffc9df4b999986b968844751c5505a5f49eae195ef55d786a89d11885b8274e8164a966d51938e7a770c37bb6a8df61d58001430d78cd9e46d634192fe98f558da99a8bef29cc4fdf8a80c9fee1f686c9b33f0a1152036caa962d6c4e1a500c92e9720ebd1f60209c6b6d926777b3c2e5da095ef45ffcce46b6fe92b2f4e62a8a5714eeeda867aeaec00fbfbcfc66df3713d0925685076d5684c"}}, &(0x7f0000001100)=0x0) timer_delete(r7) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000001140)={0x1, 0x0, 0x2, 0xd59}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000001180)={0x80000000, r8, 0x10001, 0x100}) syzkaller login: [ 231.781712][ T7991] IPVS: ftp: loaded support on port[0] = 21 03:59:48 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0xffff, 0x1}, 'port1\x00', 0x9, 0x100000, 0x0, 0x2, 0x1, 0x1000, 0xfe, 0x0, 0x0, 0x7}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) tkill(r1, 0x13) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x5, 0x7, 0x4, 0x8]}) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000240)={0x10000, 0xfffffffffffffc00}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000280)={{0x4, 0x9}, {0xff, 0xffffffff}, 0x7fffffff, 0x1, 0x1}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2d5, 0x3, 0x504, 0xfffffffffffffff8, 0x10000, 0xdba200]}, 0x10) r2 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x5, 0x4040) write$P9_RCLUNK(r2, &(0x7f0000000380)={0x7, 0x79, 0x2}, 0x7) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x228200, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000400)={0xc, @broadcast, 0x4e20, 0x3, 'dh\x00', 0x1, 0x5, 0x40}, 0x2c) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000440)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r3, 0x708, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}]}, @TIPC_NLA_NET={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000005c0)=0x34, 0x4) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000600)=""/11) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000640)={0x2, 0x8d, "31417f134adbd9df7054f30e7aec895829e61b276feeac26ef41df40a327b9467316cc5cdd6be54feb623af840680f09a561b9216db9012a67f6e2ed93d1a109dc7c613c63242de411172ccb18e8a0481e8162c4bf5bf4c26998a0ce722167cbf477d7a8857922b206d0fea512717e9c6ad24df3cf3ee47a3309ac7f907ad2e077b411b228abf69036afe1f6c0"}) r4 = open(&(0x7f0000000700)='./file0\x00', 0x8000, 0x2) syz_init_net_socket$llc(0x1a, 0x3, 0x0) geteuid() setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000740)={0x54, 0xc399, 0x3, 0x3}, 0x8) open(&(0x7f0000000780)='./file0\x00', 0x123800, 0x80) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f00000007c0)=0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000800)='/dev/sequencer2\x00', 0x4000, 0x0) [ 231.945486][ T7991] chnl_net:caif_netlink_parms(): no params data found [ 232.009216][ T7991] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.017886][ T7991] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.026453][ T7991] device bridge_slave_0 entered promiscuous mode [ 232.035611][ T7991] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.043144][ T7991] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.051306][ T7991] device bridge_slave_1 entered promiscuous mode [ 232.077328][ T7991] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 232.101071][ T7994] IPVS: ftp: loaded support on port[0] = 21 [ 232.109456][ T7991] bond0: Enslaving bond_slave_1 as an active interface with an up link 03:59:48 executing program 2: fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getuid() fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000000)='!\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x2020028, &(0x7f0000000240)={'trans=virtio,', {[{@dfltgid={'dfltgid', 0x3d, r0}}, {@fscache='fscache'}, {@uname={'uname', 0x3d, 'wlan0selinuxselfsystem'}}, {@dfltgid={'dfltgid', 0x3d, r1}}, {@afid={'afid', 0x3d, 0x4}}, {@cache_none='cache=none'}, {@uname={'uname', 0x3d, 'vboxnet1+vboxnet0'}}, {@mmap='mmap'}, {@fscache='fscache'}, {@access_uid={'access', 0x3d, r2}}], [{@euid_eq={'euid', 0x3d, r3}}, {@obj_user={'obj_user', 0x3d, '$posix_acl_accessem1@+:##em1\x95user\''}}, {@smackfshat={'smackfshat'}}]}}) r4 = syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0x2, 0x20000) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x80000001, 0x4) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f00000003c0)=0x6, &(0x7f0000000400)=0x1) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) sendto$netrom(r4, &(0x7f0000000440)="b77a07e62821535b2ab19de8b9d42d6e8c875bec515bc9f6ffd20141d4a1be8226bbd6a9de481073923f41cdfbcb69d5b577a715fe7e684b3502a3b712991b932015c1627f0fc776249d7067505ea21f965e36b7dd17a8a1e5496296c8a40886b7dafc51c9f176f9ccbf5ead42927b770e2292d6cc17883244c9f31a1527b5465a56c601b211572155d95702647295f4d16a0439829c1d48a23065ce32d1f0a8142d89e4f93474850522c9ff2c890d7f9f726971400fdd10034e86397a8e2071c66858b14c85488009f049615c6832", 0xcf, 0x0, &(0x7f0000000540)={{0x3, @null, 0x1}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f00000005c0)=0xa80901f844d4b3fb, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000640)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000680)={@rand_addr="5c9668a8508c6fe27fea154632884c26", r5}, 0x14) sendmsg$nl_generic(r4, &(0x7f0000000bc0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x470, 0x17, 0x0, 0x70bd2b, 0x25dfdbfe, {0x8}, [@typed={0x14, 0x2c, @ipv6=@empty}, @nested={0x1a8, 0xd, [@typed={0x8, 0x11, @ipv4=@multicast1}, @typed={0x8, 0x7a, @fd=r4}, @generic="3eaaf8c485e62f3a9a99dac6e59b650454443c6deb26c5690149b391fa5dd0e4e1e679081e53b032ffcdce384b0c4b927a688cba4340474c1850cfe847f8cfba14f6b85d5541b334efb6eaa616c25d61f92620f8b5aafa0cc7bb84d4f7f6780e98205c26d6e8ea8fdd3c00ed4dc5d1df1d12c35dedcc176b8245689ce58d5eb54dd81a8576311bcdf05cf3ae28ae9b32ff9f10e2bc", @typed={0x44, 0x2c, @binary="ebc24fdf883064403638aafe87ac419aed6658e00e5520260167fb6bd2ae6850f52c99acdbe632ffed20bd79241fd6923e316c065ea717f91d4796c41642e7"}, @generic="a6b7df9405497491200b93be2c8e41fa716207e5f8691f73e36600d90ab632f9c8d07b187bb911eb21ddb2991f98d42f593d19d94648ae4a620fff635503b662f663d3cc21dda381aaeb99db5df49988ea6d30e31ba47a2475c69bf7a9ba8d25f6df9addd5171363a08214b13a13e4e2c93c12b41c42664546d840806ec4c2d38f1bf163bae47ca8e40427055dc5aae088c871545fcde3c451c2061017c5fe692b9262d0573d577a", @typed={0x8, 0x37, @str='+{+\x00'}, @typed={0x8, 0x25, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @generic="1d41767a9c88e0b423512fada95dd7e1c9197dd3edb7c571a2f10f45a0c109714fdb4f7a8fa0f90e341cc4c77e9388b1a369377b1098af0b5a66a8833d70ed700d9a708295a56828072e41eccb07a4f4ddf569f08dd69bea16de69bb014b304c41d87d4af9cac4d92c16e00bd6874e2ccf6c8b1736f459f35c297bffb5030e30ee5734b8149516e647b6a7796a148ff02447786d920f90842fd61987eb97b33ff042d0a6df37fef573d0518eda8ec1f9e356dcff1f0cbedbe57219060ffc06182823e6c55c75ff84d641a6915991e7c40592cdb193890d135ba94066f5e5d5a318", @generic="49479d65ba26dbcffcca9f22a003d11f3ddef3befcd3081ebc2b58d69a8ac1c73eaf47bf4d207552ad5e0620cbac1eb37a8ad5a685026f4270074ba4f9349bc23b899d52cf583ee85f26383b8d1ccbac6e3ec8a8a9671c64d860508a4a00d03ef52a31e84a4628f862c6a151b144d21b801c51a9c3f49499ccda5cc51bde5c645c6085043b0b0a0268dc32634b2ff83bc41de99a6c6a484c11342e6525edb322db4c3741d00ed222", @typed={0x8, 0x5b, @fd=r4}, @generic="885944ba5bd493e89b3a61cfe15867b02ef9012ef18491d11d8d48ffabccf467084292a03f0f1f7014df9cd4106ae3c828f6cca590b1f5505c796fc991ff8a7403697fb742782f81b7cde8ce374590c3abba2c07f62a5ef9d7789f09a40b0f7fbc64064817f77d5e6183bfa7983aad8e12ba1632a5cb65b4a484f800fe1a1fb266edaf717075809aec6b846c9ad4d3d8a2e150aefb18a8750919a89cab324013071df57003886ade3ab7a1034e080300ce8356baab8fbdff43c57b975f289aa8be9328be6ea361d174fbf2a23df7a4bc25de98b14a1c21d128f64b51abc3724e813e9baa88dcbd2b1eb73132c6e09ae5d2ce5d68c4ba8a5891", @typed={0x14, 0x52, @ipv6=@local}]}, 0x470}, 0x1, 0x0, 0x0, 0x40000}, 0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000c00)={0x0, 0x870}, &(0x7f0000000c40)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000c80)={r6, 0x800}, 0x8) fremovexattr(r4, &(0x7f0000000cc0)=@random={'btrfs.', 'GPL\xdcuser\x8fuser%,\'em0*GPL(securityselinuxvmnet1^\x00'}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000d00)={r6, 0x7ff, 0x4}, 0x8) ioctl$RTC_PIE_ON(r4, 0x7005) ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, &(0x7f0000000d80)={0x0, 0x3, 0x323, [], &(0x7f0000000d40)=0x1000}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000dc0)={r6, 0x1, 0x45, "be2fbb746bb2db38f8790756776a3413454249b559795bedd4ba73a1803433b0d1fbaddb9e094818c6a465d585d3960a27302430d29f9c5deeeb73a2d8d072f5d733f6b7ea"}, 0x4d) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000e40)=@assoc_value={r6, 0x9}, 0x8) fchownat(r4, &(0x7f0000000e80)='./file0\x00', r3, r1, 0x1000) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000f80)={&(0x7f0000000ec0)=""/173, 0x38000, 0x1000, 0x2}, 0x18) creat(&(0x7f0000000fc0)='./file0\x00', 0x0) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000001000)) setxattr$trusted_overlay_upper(&(0x7f0000001040)='.\x00', &(0x7f0000001080)='trusted.overlay.upper\x00', &(0x7f00000010c0)={0x0, 0xfb, 0xc4, 0x1, 0x100, "e1a8ad2f9a5d6abc83dc308d846b2764", "bc88e404054e37b0fdd9347b3a60de64e330f14354311c4d2e23563c8d86cf399983a8f68ec6ba52060d2a40ddad9ab558fa6d077393b18beae95e0f7b01456538e8647096a924dc2251b9936673dbe30509e71de42b060875749549c48d491de065f1e503cbd10e0dd082a4df1d7789219e0e28fea7878c4a2b1bee2f381e6f309a907ff18ae0a8efa9c76cc0d187f24446e613a2231a662544b27ae06a055c2f6af9fce12a9bcb878ecd71c49a09"}, 0xc4, 0x1) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f00000011c0), &(0x7f0000001200)=0x8) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000001240)=0x7) ioctl$VIDIOC_G_INPUT(r4, 0x80045626, &(0x7f0000001280)) [ 232.157480][ T7991] team0: Port device team_slave_0 added [ 232.165353][ T7991] team0: Port device team_slave_1 added [ 232.315453][ T7991] device hsr_slave_0 entered promiscuous mode 03:59:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040)={0x2ca, 0xfffffffffffffffc, 0x6, 0x5e}, 0x10) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c, 0x800) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000100)={0x0, 0xc20, 0x400, 0x100000000, 0x8, 0x0, 0x86, 0x70d, {0x0, @in6={{0xa, 0x6, 0x7fff, @rand_addr="eaa88748866bf8037cdc340e5259be6e", 0x6}}, 0x9, 0x4, 0x3, 0x8839, 0x41ef}}, &(0x7f00000001c0)=0xb0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e20, 0x2, @empty, 0x7c3}}}, 0x84) r4 = accept$ax25(r0, 0x0, &(0x7f00000002c0)) getsockname$ax25(r4, &(0x7f0000000300)={{0x3, @netrom}, [@null, @netrom, @remote, @null, @default, @null, @rose, @default]}, &(0x7f0000000380)=0x48) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@empty}}, &(0x7f0000000500)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) lchown(&(0x7f00000003c0)='./file0\x00', r5, r6) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r7, 0x80247008, &(0x7f0000000600)) bind$alg(r7, &(0x7f0000000640)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000006c0)={r3, 0xfffffffffffffff9}, &(0x7f0000000700)=0x8) ioctl$PPPIOCSFLAGS(r7, 0x40047459, &(0x7f0000000740)=0x8000000) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000780)=@assoc_value={r8, 0x1}, &(0x7f00000007c0)=0x8) ioctl$DRM_IOCTL_RES_CTX(r7, 0xc0106426, &(0x7f0000000840)={0x5, &(0x7f0000000800)=[{}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r7, 0x4010641c, &(0x7f0000000980)={r9, &(0x7f0000000880)=""/241}) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f00000009c0)={r2, 0x7}, 0x8) ioctl$EVIOCGID(r7, 0x80084502, &(0x7f0000000a00)=""/91) ioctl$EVIOCSABS0(0xffffffffffffff9c, 0x401845c0, &(0x7f0000000a80)={0x3, 0x7, 0x20, 0xffffffffffff0000, 0x100000001}) r10 = request_key(&(0x7f0000000ac0)='pkcs7_test\x00', &(0x7f0000000b00)={'syz', 0x0}, &(0x7f0000000b40)='rng\x00', 0x0) keyctl$describe(0x6, r10, &(0x7f0000000b80)=""/161, 0xa1) accept$ax25(r4, &(0x7f0000000c40)={{0x3, @netrom}, [@remote, @null, @bcast, @netrom, @netrom, @remote, @default, @null]}, &(0x7f0000000cc0)=0x48) pipe2(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bind$inet(r7, &(0x7f0000000d40)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000d80)=0x4, 0x4) ioctl$CAPI_NCCI_OPENCOUNT(r12, 0x80044326, &(0x7f0000000dc0)=0x80000000) write$cgroup_type(r11, &(0x7f0000000e00)='threaded\x00', 0x9) [ 232.363232][ T7991] device hsr_slave_1 entered promiscuous mode [ 232.494588][ T7996] IPVS: ftp: loaded support on port[0] = 21 [ 232.567416][ T7991] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.574624][ T7991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.582247][ T7991] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.589372][ T7991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.608363][ T7994] chnl_net:caif_netlink_parms(): no params data found [ 232.650410][ T7999] IPVS: ftp: loaded support on port[0] = 21 03:59:49 executing program 4: utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{}, {0x0, 0x7530}}) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x4001, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) getitimer(0x3, &(0x7f00000000c0)) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000100)={0x1ff, 0x0, &(0x7f0000ffc000/0x4000)=nil}) prctl$PR_GET_FP_MODE(0x2e) getitimer(0x1, &(0x7f0000000140)) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0x9) ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)=0x1) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000200)=0x200000, 0x4) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = gettid() perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x1, 0x762, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa, 0x0, 0x5, 0x200, 0x2, 0xff, 0x0, 0x401, 0x3, 0x100, 0x7, 0x1000000, 0x6, 0x3, 0xfa, 0x6, 0x1, 0x8001, 0x605, 0x5, 0x4, 0x401, 0x10000, 0x6, 0x6, 0x3, 0x0, 0x5, 0x0, 0x0, 0x100000001, 0x7, @perf_bp={&(0x7f00000002c0), 0xb}, 0x2001, 0xffff, 0xa58, 0x1, 0x8, 0x6, 0x4}, r2, 0x1, r0, 0xb) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000380)={0x0, 0x10000}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000400)={r3, 0x4e486ec9}, &(0x7f0000000440)=0x8) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r4, 0x863bd4123dfedea6, 0x40, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f00000005c0)={0x3f, 0xfffffffffffffff9, 0x1}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000600)={r1, 0x0, 0x1, 0x8bc, 0x6}) r5 = msgget$private(0x0, 0x80) msgctl$IPC_STAT(r5, 0x2, &(0x7f0000000640)) prctl$PR_SVE_SET_VL(0x32, 0x2cc3b) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000680)="a8a942eb43dc8abf6cd07da42ec53f5eab79e22c49840d7ee845505469d4dc1054b3287a7881c5eafcd694208fc32a50a3e00361b94d8a90987eb2487c91eab208f12f", 0x43) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000700)=0xf6c2, 0x4) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) renameat(r0, &(0x7f0000000740)='./file0\x00', r0, &(0x7f0000000780)='./file0\x00') r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xb8, r6, 0x102, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x61d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xca1e943}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x8) [ 232.724896][ T7994] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.734190][ T7994] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.751120][ T7994] device bridge_slave_0 entered promiscuous mode [ 232.789923][ T7994] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.813885][ T7994] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.822528][ T7994] device bridge_slave_1 entered promiscuous mode [ 232.911327][ T7991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.936932][ T8002] IPVS: ftp: loaded support on port[0] = 21 [ 232.954542][ T7994] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 232.964947][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.976401][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.986730][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 233.017688][ T7991] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.043301][ T7994] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 233.055214][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.066020][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 03:59:49 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x30000, 0x0) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f00000000c0)={0x0, 0x1, @start={0x3}}) r2 = gettid() ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x5, 0x1, 0x1, 0x80000000, 0x81, r2}) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000001c0)={0x0, 0x7, 0x5, {0xfff, 0x6}, {0x1796, 0x7fff}, @rumble={0x1}}) ioprio_get$pid(0x2, r2) recvfrom$rxrpc(r0, &(0x7f0000000200)=""/166, 0xa6, 0x1, &(0x7f00000002c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000300)={0xffffffff, 0x32315241, 0x3, @stepwise={0x2, 0x6, 0x7f, 0xfc0, 0x6, 0x400}}) unshare(0x10000000) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0xfff, 0x800000000000, 0xa5, 0xfff, 0x1ff, 0x5, 0x10000, 0x3, 0x1, 0x1, 0x6}, 0xb) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000380)=0x7, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000003c0)={{0x8000, 0xff}, {0x200, 0x4}, 0x6, 0x6, 0x100000000}) r3 = syz_open_procfs(r2, &(0x7f0000000440)='net/ip_vs_stats_percpu\x00') setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000480)={0x649}, 0x4) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f00000004c0)=0xa1, 0x4) ioctl$VT_RELDISP(r0, 0x5605) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000500)={0x40, 0x9}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={r3, 0x3, 0x1, 0xfff, &(0x7f0000000540)=[0x0], 0x1}, 0x20) ioctl$BLKRAGET(r3, 0x1263, &(0x7f00000005c0)) r4 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r5 = request_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)='/dev/vga_arbiter\x00', 0xfffffffffffffffb) keyctl$unlink(0x9, r4, r5) syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x3f, 0x200000) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000780)={@local, 0x19, r1}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$TCFLSH(r3, 0x540b, 0x4) [ 233.159719][ T7994] team0: Port device team_slave_0 added [ 233.198389][ T3470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.208354][ T3470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.216788][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.223919][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.233580][ T3470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.242378][ T3470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.250625][ T3470] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.257717][ T3470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.266486][ T7994] team0: Port device team_slave_1 added [ 233.295654][ T7999] chnl_net:caif_netlink_parms(): no params data found [ 233.315603][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.334746][ T7996] chnl_net:caif_netlink_parms(): no params data found [ 233.406734][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.475167][ T7994] device hsr_slave_0 entered promiscuous mode [ 233.562473][ T7994] device hsr_slave_1 entered promiscuous mode [ 233.622168][ T7999] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.629227][ T7999] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.637112][ T7999] device bridge_slave_0 entered promiscuous mode [ 233.645893][ T7999] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.653325][ T7999] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.661014][ T7999] device bridge_slave_1 entered promiscuous mode [ 233.685640][ T8008] IPVS: ftp: loaded support on port[0] = 21 [ 233.706444][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.715139][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.726618][ T7999] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 233.742955][ T7996] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.750012][ T7996] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.758359][ T7996] device bridge_slave_0 entered promiscuous mode [ 233.768349][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 233.782714][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.791711][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.801595][ T7999] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 233.818746][ T7996] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.825972][ T7996] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.833873][ T7996] device bridge_slave_1 entered promiscuous mode [ 233.856676][ T7996] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 233.890428][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.899120][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.909034][ T7996] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 233.925469][ T7999] team0: Port device team_slave_0 added [ 233.955244][ T7991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.966969][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.985993][ T7999] team0: Port device team_slave_1 added [ 234.009395][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 234.017804][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 234.034335][ T7996] team0: Port device team_slave_0 added [ 234.103767][ T7999] device hsr_slave_0 entered promiscuous mode [ 234.172239][ T7999] device hsr_slave_1 entered promiscuous mode [ 234.217146][ T7996] team0: Port device team_slave_1 added [ 234.240956][ T8002] chnl_net:caif_netlink_parms(): no params data found [ 234.314083][ T7996] device hsr_slave_0 entered promiscuous mode [ 234.352123][ T7996] device hsr_slave_1 entered promiscuous mode [ 234.429527][ T7991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.510593][ T8008] chnl_net:caif_netlink_parms(): no params data found 03:59:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0xf758d37fc4173455, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x12, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}]}, 0x4c}}, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) [ 234.601097][ T8002] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.610411][ T8002] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.618837][ T8002] device bridge_slave_0 entered promiscuous mode [ 234.641072][ T7994] 8021q: adding VLAN 0 to HW filter on device bond0 03:59:51 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x5, 0x4200) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x1, 0x0, 0x0, 0x5, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x5, 0xffffffffffffffe0, 0xffff, r2}, &(0x7f0000000600)=0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') tee(r3, r0, 0x5, 0x2) gettid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) perf_event_open(&(0x7f0000000240)={0x7, 0x70, 0x0, 0x8, 0x20, 0x3f, 0x0, 0x40, 0x0, 0x8, 0xfffffffffffff7d7, 0x8000000000ffff, 0x0, 0x0, 0x3, 0x40, 0x6, 0x2, 0x2e, 0x0, 0x0, 0x4d2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x2, 0x7fff, 0x0, 0x0, 0x7fffffff, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x6, 0xb0b6, 0x7, 0xc399, 0x400, 0x7}, 0x0, 0x1, r0, 0x9) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x1, 0x2000000000002) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1a4c49e670000000000000000000000000000000000000020000000000000000000000000000000000024876a0c18374927f9c49dd83000000000000000000000000000000000404c00000000000000000000000000000000000000000000000000000000e346fe69e044298b68355dfe87b6273d45f2a98443041980ba5f2f78c64795d4af35c7853affffffffffffffffc330cc"]], 0x1) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) epoll_create(0xb2f8) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000780)={{0xd002, 0x10001, 0x9, 0x0, 0x0, 0x0, 0x80000001, 0x1, 0x10001, 0xff, 0x4, 0x4}, {0x2000, 0x0, 0xa, 0x80000001, 0x9, 0x28000000000, 0x1f, 0x3, 0xc36, 0x1ff, 0x0, 0x1}, {0x5000, 0x100000, 0x1c, 0x249, 0x100, 0x8000, 0x0, 0x3, 0x1ff, 0x8, 0xffffffff, 0x7}, {0xd000, 0xf000, 0x1a, 0xffffffffffff8447, 0x7, 0x0, 0x3, 0x1, 0x6, 0x80, 0x400, 0x6}, {0x10f000, 0x2, 0x0, 0x8, 0x8, 0xcc6, 0x100, 0x1, 0x80000001, 0x397, 0x25c, 0x2d4}, {0x0, 0x6000, 0x0, 0x2, 0x23, 0x140, 0x81, 0x1, 0xc8, 0x4, 0x3f}, {0x6000, 0x100000, 0x3, 0x10000, 0x200, 0x1, 0xffff, 0x1f, 0x0, 0x101, 0x0, 0x400}, {0x2000, 0x0, 0xf, 0x7, 0xfffffffffffffffc, 0x80000001, 0x0, 0x6, 0x1, 0x40000000000000, 0x100000001, 0x6}, {0x0, 0x3000}, {0x2, 0x10000}, 0x80000000, 0x0, 0x100000, 0x2000, 0x3, 0x2000, 0x17006, [0x101, 0x4, 0x9, 0x200]}) [ 234.683570][ T8002] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.690636][ T8002] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.709443][ T8002] device bridge_slave_1 entered promiscuous mode [ 234.767592][ T8008] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.778172][ T8008] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.779820][ C1] hrtimer: interrupt took 25753 ns [ 234.791567][ T8008] device bridge_slave_0 entered promiscuous mode [ 234.806803][ T7994] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.819914][ T8022] mmap: syz-executor0 (8022) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 234.849698][ T8008] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.857628][ T8008] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.868513][ T8008] device bridge_slave_1 entered promiscuous mode [ 234.884882][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.898977][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.926627][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.940582][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.951887][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.958972][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.973516][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.982472][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.990934][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.998058][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.031389][ T7996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.080531][ T8002] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 235.090495][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.107260][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.118557][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.131604][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.147423][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.157306][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.171263][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.190050][ T7999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.211463][ T8008] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 235.228785][ T8008] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 235.265255][ T8002] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 235.280765][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 235.300153][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.308319][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.327524][ T7996] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.370597][ T7994] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 235.382491][ T7994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.422998][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.431702][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.441326][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.456797][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.468159][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.480215][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.490466][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.506252][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.525000][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.532110][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.546641][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.555504][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.563945][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.570981][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.578718][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.587245][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 235.594959][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.604714][ T8008] team0: Port device team_slave_0 added [ 235.641296][ T7999] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.660679][ T8008] team0: Port device team_slave_1 added [ 235.676851][ T8002] team0: Port device team_slave_0 added 03:59:52 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x200000000000007, &(0x7f0000000000)) close(r0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) close(r1) [ 235.687322][ T8002] team0: Port device team_slave_1 added [ 235.708454][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.737636][ T7994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.746022][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.754843][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.766358][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.775126][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.783899][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.792240][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.801079][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 03:59:52 executing program 0: r0 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000700)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53c3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5288cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r2) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000080)={&(0x7f0000000140)={'sha512-generic\x00'}, &(0x7f0000000180)}) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000380)={0xb80000, 0x7, 0x0, [], &(0x7f0000000340)={0x0, 0x0, [], @p_u16=&(0x7f0000000300)=0xb295}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r4, &(0x7f0000000280)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000440)=0x0) tgkill(r5, r6, 0x3) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2) [ 235.848410][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.886650][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 03:59:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x7) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000080)={{0x8}, 0x20}, 0x10) r3 = syz_open_pts(r0, 0x22102) ioctl$KDENABIO(r3, 0x4b36) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) ioctl$TIOCGPGRP(r3, 0x540f, 0x0) 03:59:52 executing program 0: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000140)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='\x00', 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x3) prctl$PR_SVE_SET_VL(0x32, 0x6cef) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8000, 0x400000) openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) [ 235.898168][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.905320][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.921492][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.937721][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 03:59:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) unshare(0x40600) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000000000), 0x492492492492494, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x200000, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000040)=0x9) [ 235.995500][ T8008] device hsr_slave_0 entered promiscuous mode [ 236.045602][ T8008] device hsr_slave_1 entered promiscuous mode 03:59:52 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0xb756, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r1, 0xff}, &(0x7f0000000140)=0x8) [ 236.102982][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.176249][ T8002] device hsr_slave_0 entered promiscuous mode [ 236.232537][ T8002] device hsr_slave_1 entered promiscuous mode [ 236.313032][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.321658][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.330517][ T178] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.337619][ T178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.346197][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.354811][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.363370][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.371750][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.382817][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.410170][ T7996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.418036][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.427495][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.452127][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.460955][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.469717][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.478426][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.498103][ T7999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.558375][ T8002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.593582][ T8002] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.601331][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 03:59:52 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@random="175b4b359e98", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "bb5615", 0x44, 0x2f, 0x0, @remote, @local, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0) [ 236.610431][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.623801][ T7999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.659546][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.677679][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.694382][ T8000] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.701447][ T8000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.710100][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.718639][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.727617][ T8000] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.734737][ T8000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.751388][ T8008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.782349][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.795195][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.820798][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 03:59:53 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x8000, &(0x7f0000488000/0x4000)=nil, 0x4) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000072f000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) timer_create(0x6, &(0x7f0000001240)={0x0, 0x3c, 0x0, @thr={&(0x7f0000000140)="595ee197e52b004b12e5ce95d1b177448e10a809639cee9f7048053a2c37b3950b6144acfbe66cc2f2f4288326d7afa02f04be08c50bed0e75c1c92efd1bb15aec6d4ba7852d09760655d9980ebe99cf58d4b46ac6d2b8fc06be4a438396a8d05581d670b43ddcd837a3e67aff15b64becfa0be7e4309208f36c9fea7cf50334868e21f30e831f3e70dc54edb801835931163f84db5d36e3acdef79a9be36455e39e01d211a57f8eb6d20a98a3285f3885bdf96b6d99fc2a3884795e562feca6446dca88e65e03e5a36b80bcfb0cb5341bb509dec2810b307aa8cecb5e8bd457f3554946afd3f8e3b9cca576", &(0x7f0000000240)="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"}}, &(0x7f0000001280)=0x0) timer_getoverrun(r1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x208000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f00000000c0)={'ah\x00'}, &(0x7f00000012c0)=0x1e) sigaltstack(&(0x7f0000ba0000/0x2000)=nil, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x1d000}) [ 236.837164][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.845984][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.855577][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.877742][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.915576][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.936190][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.944749][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.953251][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.961451][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.969805][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.977577][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.992970][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.002946][ T8008] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.036216][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.046406][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.055901][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.063022][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.072330][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.080875][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.089794][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.096900][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.106169][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.116446][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.126575][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.146244][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.156500][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.166766][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.177471][ T8002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.190101][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.199477][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.213334][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.222936][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.235723][ T8008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.247684][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.256588][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.265932][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 03:59:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) r2 = syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0x9, 0x40100) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000003c0)={0x0, 0x2, 0xac, &(0x7f0000000380)=0xb61}) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x68, &(0x7f0000000200)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e24, 0x3, @mcast2, 0x6}, @in6={0xa, 0x4e21, 0x8, @mcast2, 0xb1a}, @in={0x2, 0x4e22, @remote}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r4, 0x1, 0x4}, 0xc) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x18\x00\xa9[\x00`\x00\x06\x00', @ifru_mtu=0x1}) [ 237.315133][ T8008] 8021q: adding VLAN 0 to HW filter on device batadv0 03:59:53 executing program 5: lseek(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x0, 0x73d}, 0x29b) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 03:59:53 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpgrp(0xffffffffffffffff) sched_setscheduler(r2, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x32, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f00000000c0)=0xc) ioctl$EVIOCGPHYS(r0, 0x80044584, &(0x7f0000000000)) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 03:59:53 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x8b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffee1, 0x2, 0x0) clock_gettime(0x7, &(0x7f0000000fc0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001080)=[{{&(0x7f0000000ac0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x35d, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/246}, {&(0x7f00000007c0)=""/240}, {&(0x7f00000008c0)=""/163}, {&(0x7f0000000980)=""/234}], 0x6b, &(0x7f0000000680)=""/31, 0x1f}}], 0x3f747b8cbf977b6, 0x0, &(0x7f0000000b40)={0x0, r2+10000000}) 03:59:53 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$setregs(0xf, r0, 0x100000001, &(0x7f0000000040)="51d8cc983834c1192db61b79cbe8adf053ab887fe3b5f51f3c3d9c8afd05f3cdebac317e9e7e4d237346260c7bff6e111fa99e0d329106271497de13f49a0c418e13d0e197a92b4ee4899f82efe0d3717910872a998e260bdafe52f5520e88fb2a89ac5cd7cba810558a167ee33e27") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000100)) 03:59:53 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0xfffffffffffffffe, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x7, 0x100, 0x7, {0x3, 0x7, 0x8, 0x1}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x1}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc02c5625, &(0x7f0000000040)) 03:59:54 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv6_newroute={0x30, 0x18, 0x201, 0x0, 0x0, {}, [@RTA_ENCAP={0xc, 0x16, @typed={0x8, 0x0, @u32}}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x1}]}, 0x30}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)) 03:59:54 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xfffffffffffff801, 0x301300) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000240)={{0x3, 0xfffffffffa5c58ec}, 'port1\x00', 0x80, 0x100010, 0x1, 0x1, 0xcda2, 0x8, 0x8, 0x0, 0x1, 0x6}) syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x997d8adc41c128f3) getpeername$unix(r2, &(0x7f0000000300)=@abs, &(0x7f00000000c0)=0x6e) read$eventfd(r2, &(0x7f0000000180), 0x8) bind$isdn(r2, &(0x7f0000000040)={0x22, 0x7, 0x1, 0x4, 0x9}, 0x6) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r1, 0x0, 0x4) connect(r2, &(0x7f0000000100)=@x25={0x9, @remote={[], 0x3}}, 0x80) 03:59:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000240)={0x400000000002f, {0x0, 0x0, 0x80000}}) r1 = dup3(r0, r0, 0x80000) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000100)="7a879be893f6af31f0b1a4d7122d67fb14e508f9d3a4e13355476383a43a0d4361c6e438ee3f93ecd89c6fd9a2b3e5980a027b9cd9b1da2dbdfe5c1cf2cbb776f0d75e2ab371fb88e8f001c199cf570bb47748d8df0bfa66b8836dcb281979b00ce1155378b58ea62f2e89c4cc84d79f8dc9db6ee147722b719d869f28a9e6b45c", 0x81) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000200)=@fragment={0xba, 0x0, 0x6, 0x4, 0x0, 0x8, 0x68}, 0x8) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x3}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 237.783746][ T8114] binder: 8113:8114 ioctl c018620c 200001c0 returned -1 [ 237.862114][ T8116] binder: 8113:8116 ioctl c018620c 200001c0 returned -1 03:59:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) ioctl$SG_IO(r1, 0x2285, &(0x7f00000013c0)={0x53, 0xffffffffffffffff, 0x62, 0x3, @scatter={0x3, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/144, 0x90}, {&(0x7f0000000480)=""/115, 0x73}, {&(0x7f0000000500)=""/145, 0x91}]}, &(0x7f0000000300)="8eada8cf7262793c3012c0ba2286e678666e11773400e4be13f6f7d4a8d6c0a38bd773f8897e831c49c57da8ab91ca4878ecdc6fc5b6976bbbcfc7e1b0d91fff2ea83c6ac79937cf061511b76493018be4a830cea923f9692ae02d57a051aaa19990", 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000700)=0xfffffffffffffffc) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000200)=0x0) sched_setparam(r3, &(0x7f0000000240)=0x7) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001840)={0x0, 0x46, &(0x7f00000017c0)="fc3aef401f8dcc2754c77bd45aadab14fe5438c3b3f184bb4f1908fda8936bda100413a8b82a13a51805b3f7268cb564546bdfa19bcb491f4d59b3c7edaa1d9a996bdf04a910"}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r4 = socket(0xa, 0x1, 0x0) r5 = syz_open_dev$audion(&(0x7f0000001480)='/dev/audio#\x00', 0x5, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000280)=0x5, 0x4) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2, 0xffffffffffffffff, 0x0, 'lblcr\x00'}, 0x2c) r6 = socket$l2tp(0x18, 0x1, 0x1) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000680)={[], 0x7fffffff, 0x400, 0x8001, 0x2, 0x1, r3}) connect$l2tp(0xffffffffffffffff, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0xfffffffffffffe0c) syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x6, 0x0) sendmmsg(r6, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) ioctl(r0, 0x8, &(0x7f0000000640)="3ee26bffc95efa90540000") ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000005c0)={0x9, 0x8, 0x8, {}, 0x5, 0x4}) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x823) r7 = dup2(r0, r0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000001740)={0x0, 0xfea8, 0xfa00, {0x200000004, &(0x7f0000001700), 0x13f, 0x100b}}, 0x20) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x80001, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x100000000003, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x800452d2, &(0x7f0000000000)) 03:59:54 executing program 5: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0xffffffff, 0x4, {0x1, @raw_data="4200a8033f3fc9a858be866e2b6ed09a6d2dde57450f85f05a3f480a066d14ba15335c16d831a53785d3353dd666e78197694adf37510c855aafc2bad262eddf346be852abf0cc12b74d9a79bd6dd646eee9f9911509df80ec28b60c4ea604196b90933ef08a2c7efcdbff0b514595954887ba81af6c904e4cf995904a359f4f5f6d4ac085c4c7e7e9f3b5cf92a4c822b355d4618b7b849ee49e726a87ef2f16a860855e72dfe5852e7d9bed16b7911a69cf10ffdf40453c631cdfd5ee94df9b8c9b444162d01d64"}}) 03:59:54 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0), &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x3f, @remote, 0x4e24, 0x4, 'nq\x00', 0x2, 0x2, 0x61}, 0x2c) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) [ 239.777322][ T8110] netlink: 'syz-executor3': attribute type 21 has an invalid length. [ 239.789086][ T8112] netlink: 'syz-executor3': attribute type 21 has an invalid length. 03:59:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) r2 = syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0x9, 0x40100) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000003c0)={0x0, 0x2, 0xac, &(0x7f0000000380)=0xb61}) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x68, &(0x7f0000000200)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e24, 0x3, @mcast2, 0x6}, @in6={0xa, 0x4e21, 0x8, @mcast2, 0xb1a}, @in={0x2, 0x4e22, @remote}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r4, 0x1, 0x4}, 0xc) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x18\x00\xa9[\x00`\x00\x06\x00', @ifru_mtu=0x1}) 03:59:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x418800, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9, 0x400000) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=r2) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000006}, 0x1c) 03:59:56 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0), &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x3f, @remote, 0x4e24, 0x4, 'nq\x00', 0x2, 0x2, 0x61}, 0x2c) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) 03:59:58 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x42801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RXATTRWALK(r0, &(0x7f0000000040)={0xf}, 0xf) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000003ff8)=0x40000) 03:59:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x2, 0x2) bind$rxrpc(r1, &(0x7f00000002c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0xff, @local, 0x7f08000000}}, 0x24) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000140)={0x40, 0x2, 0x7f, 0xaf, &(0x7f0000000040)=""/175, 0xa9, &(0x7f00000001c0)=""/169, 0x37, &(0x7f0000000100)=""/55}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000300)='trusted.overlay.upper\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="00fb45020501b9f434f38571a8d9159da378707bd367212efb350fa2ad1af793c82854dee6d75b9ab1d17a23a2d0946c63a4332ddd1c7f72ee820355d411df2466a8a3368f"], 0x45, 0xeadc7dcbd4d9cea1) lseek(r0, 0x0, 0x3) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000180)) r3 = add_key(&(0x7f0000000480)='encrypted\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500)="98b5a3b10df2e6a466ab587b5ebf8a16e0c630f41c07f87e6cbb4ca1ff95901cd81f8d54f54854ad8001471f5248657b293a80596a9656d8a878c5b84ad3986e65af8d72ff3ffe4ee5c1b6856b219086d4afb8e314fe587a783cca6cb351e26666efdee55a5cffc7370b4a430779af24ae65f9e2da180e65477d86c5b0c7105fca78dcb66f5cb81525f648371e30db136b1cdfea15a858bb0c5e81cc32a2357e9c7821cf1d3f8b28e1ca601978a7c15998c0b961f7f34d964891c0a741e824579dbbcc542a", 0xc5, 0x0) request_key(&(0x7f00000003c0)='id_legacy\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)=']\x00', r3) 03:59:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0x0, "daf2c82ef0a4a7fc37bd440c2ea6593f9e24d66405bb48bcfa18288ee8607032d55e3c40da1ab81fef5b37f7d17e608c345d496f6975ffe9d2166bb2e38910798fc7454ae92070dbaa7e5e92da221017"}, 0xd8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6}]}, 0x10) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x1014c0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000000080)=0xc) lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r3, 0xcae, 0x1000, 0x5b8, 0x16a, 0x500}, 0x14) close(r1) 03:59:58 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0), &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x3f, @remote, 0x4e24, 0x4, 'nq\x00', 0x2, 0x2, 0x61}, 0x2c) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) 03:59:58 executing program 0: accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x121) fallocate(r1, 0x0, 0x40000, 0xfff) 03:59:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r1 = gettid() ioprio_set$pid(0x1, r1, 0x7) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r1) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x2}) 03:59:58 executing program 1: r0 = socket$inet(0x10, 0x3, 0x80000000c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[0xffffffff, 0x3]}) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="240000000a0a07041dfffd946fa2830020200a0009000108000000680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f00000000c0)={r3, 0x1}) 03:59:58 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0), &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x3f, @remote, 0x4e24, 0x4, 'nq\x00', 0x2, 0x2, 0x61}, 0x2c) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) 03:59:59 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001c40)=[{0x0}, {&(0x7f0000001880)=""/129, 0x81}], 0x2}}], 0x1, 0x120, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="e180db4e3b23cdde86a3b7ae4fdb9619", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x11, 0x4) accept$alg(r1, 0x0, 0x0) [ 242.619857][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 242.619872][ T26] audit: type=1804 audit(1548907198.946:31): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir282164195/syzkaller.hPUeMJ/12/file0/file0" dev="sda1" ino=16561 res=1 03:59:59 executing program 4: sched_setscheduler(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0xffffffff, 0x1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x6}, 0x8) 03:59:59 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x40}) read(r0, &(0x7f0000000040)=""/128, 0x80) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x6) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x100, 0x0) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="9e00000040004585ff01b829a379f5990db9e6bbef4dac7feedd37489afee7c357eda585a502983b9373ecb4eeca4bf45d3cbce1e822cfc3383cbc05898830c8fc9c7654f9fe261b619e380d0066a6d87f34e3e44d3333464a6d9fa56aca232106ee3ee9da95831fd421ce61f743eede3dbd7e6882c44ac7228257d897d8888e1771bda2f629a41544a037b6dc543ed4922df11089df83bc65f6076d8809953df5740925ae1f287d3c1810d0526f363b30526650f9ce60b225fdc1a789012f31"]) r3 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x0, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f00000000c0)={0x2, {0x1cf, 0x40, 0xfffffffffffffffa, 0xa8}}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x2, 0x0) fcntl$getflags(r4, 0xb) syz_open_dev$cec(&(0x7f0000000ac0)='/dev/cec#\x00', 0x1, 0x2) syz_mount_image$reiserfs(&(0x7f0000000340)='reiserfs\x00', &(0x7f0000000000)='./file0\x00', 0x55e, 0x8, &(0x7f0000000940)=[{&(0x7f00000003c0)="ad9511e958a3ccf097603f625e159810ae666103f637c9078f2a78912258f5b729482e1b445f4dc61a5460c0f4e6302a5919a43632b5a2727b75e3d78ee4b57d9981f8abd5195f60f419395f0d9b7c89439e1c41c5eca66d5bce0512eae942c2b3657e7e9efee56971a98e41b467f21251bed38f3db393c9cba993386904c9c5bc3e445169f2773579bee5ad272fee851b4e14c79ebfab7baba99196015470090e1aa0cfa1afd83668705eb480defaa31ec6ff38a16d793de4e08260b3362b1b79daa93920c878c273b33239dfc42da2ddbabc3e1cea9677c5c78c", 0xdb, 0x8}, {&(0x7f00000004c0)="6f55046915a27fc9aba272e691580cd767596e0dee387215efdf3d54dd21954fe38bba38b55f90d7491dbb710075153378f54c70016940c8843ab240fdc5d8f5b580b520f9c04a4c19acee6f029fec7a454ce79410a66723151bebb76ab5dba47911236ee9601d", 0xffffffffffffffdc, 0x8}, {&(0x7f0000000540)="dfc651b773c06288f0589e1b7ce3e80485636461c7784bb498bece07ca148cbcb7352635d5d6527e762b904a31011372012ef51b293c9a5621b84e19de6c9d0458302bf93f343d6c92b57ac7964affb1", 0x50, 0x10000}, {&(0x7f00000005c0)="481fe590007a8c6bad52add00756b0b69d534202b31241ed8c65a5a36c909b44d21e6b3b49ba4af09ba80b3163b757ff30329abca40ff4c4601294d6f57224a137852e9909b94908429e263159a7ea35acbbbc2b52694ebe02ded5e278a22c2ee61e158e5c7d5a5eae5fb4de2a6ff190e33d99178ad2b3", 0x77, 0x3}, {&(0x7f0000000640)="33e3953768123cc6d204ff05ccc0e771836ba98560594a018cfec8403c434ebb0df6bdabeb5eab44251b349c08196e14d9a2a4151f9d4e1edbe5f0afa95b3fb1f9e82fbafd3014f3976be6665b999080dadf1050f15fc0cbb604e6506a94229c6dd2d6ec8431612c6d8ba56528d1cbaf16cc048fdcfd93e9368651dc00129f943285cc14876212d34250d999d007f7954a427c5a0aced3c32ef1e92cf1acb671", 0xa0, 0x4}, {&(0x7f0000000700)="c663ffc01ba35836365b45d70b8870040e768835ec12fda8993015e5de59caaa292b43d927b05381701ecd32cd87830a13c763a91240d60a8f105a93613c9a26f58714be3b80425cb5870cb147d14cb977f63408e8807c57ece2a5c21d1d5e442cb06d5751110a15c565fb6f39177d4601683974540936d68af04c174bf846eba30e636522af4931872e23e69ce9403bcdda74ffc05741cfcea4b0ebc2d0909dc4340f5de5fc195da9f2c26c696d3e2ddacb8d21671c7b9250ca27f8bd3e60625fb730493337ffa5c90490e8f2d73c9b16081105b78896ba2cccc6cf026d1f2ae4c8fdd7084fc17527848a24e7906b4b1759a6b4", 0xf4, 0x3}, {&(0x7f0000000800)="1084241e5b8f7b6318", 0x9, 0x9}, {&(0x7f0000000840)="eb8f1009bd66c791f5dc45e0f38d571493f0eaf40e0966a7b32e2c463b152ce68fac75a4c95ce7834ef378d843f4e866ed175e88fe967e75b657e2482dbb46adaed663efac67e2137963dfecd3f8f95a2a1d821a06046891dd1319e334aeec13d75cd9c26d39f1107feb28077d39679c819ed220378f0aaad89a8663ddc0bf9d08d3774ab0396111423b0528ec5db61441fc2b45bd952c89d4b39f81b0c05e88ee85d95b63505f47047d644ab9908c88f9d57caa0400dfca92ed2804ec15bc73ac58178862ee5d8070867686bab2bfc13cd3508381c1323cad0dd0f7ab93ce70dbee9fbb3e06c9b8ad80638f736f0fb4452218a5", 0xf4, 0x1}], 0x4000, &(0x7f0000000a00)={[{@jdev={'jdev', 0x3d, './file0'}}, {@usrquota='usrquota'}, {@errors_ro_remount='errors=ro-remount'}, {@barrier_none='barrier=none'}, {@notail='notail'}, {@data_writeback='data=writeback'}]}) 03:59:59 executing program 5: clock_gettime(0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x100) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040)) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000200)=""/195) 03:59:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1149, 0x10000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc0020}, 0xc, &(0x7f0000000140)={&(0x7f0000001380)={0xb4, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2ba}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffffff00}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf4}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20000000000000}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6000000000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',lowerdir=.:file0,workdir=.']) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000380)=""/4096, 0x1000) [ 242.770941][ T26] audit: type=1804 audit(1548907199.016:32): pid=8190 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor0" name="/root/syzkaller-testdir282164195/syzkaller.hPUeMJ/12/file0/file0" dev="sda1" ino=16561 res=1 03:59:59 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x47, 0x4000) setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f00000001c0)=0x1777, 0x4) r2 = syz_open_dev$media(0x0, 0x0, 0x101000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000200)='/dev/capi20\x00', 0x800, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0) syz_open_pts(r3, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x1, 0x8, 0xae2, 0x800, 0x19, 0x1f, 0x80, 0x8435, 0x5, 0x80, 0x4, 0x3}) ioctl$TCFLSH(r3, 0x540b, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003a80)={'hsr0\x00', 0x0}) sendmmsg(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="60000000000000000000000002000000f200e2687af24ea576166abd753a023f53b16da991cd859436ced50e977ba29e006578ce75578bf58521d1aa0b7317b1380289dcacec2f080fb41e68af4b0caa3381682f6c55a634913fdafdaeb3be00"], 0x60}, 0xaccd}, {{&(0x7f0000001e00)=@in={0x2, 0x4e22, @local}, 0x80, &(0x7f0000002200)=[{0x0}], 0x1}, 0xda}, {{&(0x7f0000002700)=@nfc_llcp={0x27, 0x1, 0x2, 0x0, 0x3, 0x0, "bcc3ae177d8aa307452421e0da6bd3baf20664dcb8646aa61eacbeb16b23af7d548962c3ad362bb2866b109711bd8ac0f432047df3d2c851b54aa7fad224c6", 0x24}, 0x80, 0x0}, 0x2}, {{&(0x7f0000003ac0)=@ll={0x11, 0xff, r4, 0x1, 0x1}, 0x80, 0x0}, 0xaf}, {{&(0x7f0000003e00)=@llc={0x1a, 0x3, 0xff, 0xfffffffffffffffd, 0x1, 0xfffffffffffff51d, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000004300)=[{&(0x7f00000042c0)}], 0x1}, 0x5}], 0x5, 0x4011) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, 0x0) kcmp(0x0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000002003fefa6bd86a09e0000000000000ed300479ef1aa624e44fdbb131e69cfb96823ed568ae2acfd66a18cb75fcedfbb1e626931c691f4b11dbf7dec0eae6cab7756dd31ac889c127cfd3be800c484e626115ae0f01019f0039ee73864cb775acdda09122da29cc6f0552b39c604997ffa612f8a0afa"], 0xa) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000100)=0x9ff, 0x4) 03:59:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000580)) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x7}) sendto$inet(r0, 0x0, 0x0, 0xa19b252962e9431e, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x30f) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0x3e0, 0x4) fstatfs(r2, &(0x7f0000000500)=""/88) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x4081) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) fsetxattr$security_selinux(r2, &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:crash_device_t:s0\x00', 0x24, 0x2) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x0, @dev={[], 0x1c}, 'ip6tnl0\x00'}}, 0x1e) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000280)={{0x2, 0x4e20, @local}, {0x0, @local}, 0x14, {0x2, 0x4e20, @local}, 'teql0\x00'}) [ 242.872739][ T8210] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 03:59:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020f00001000000000000000ff7f00000800120000000100000000000000ca7017dba17c40c3515b1c000006000000010000000000000000000200e00040010000000000000000000044000000ada80080bf620f05200000000000030006000000000002000080ac14ff9af00003000000000003000500000040000200423b1d"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x20000, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x50000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140), 0x4) [ 242.972590][ T8210] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 03:59:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40, 0x0) getdents(r2, &(0x7f00000000c0)=""/43, 0x2b) ioctl$SIOCRSACCEPT(r2, 0x89e3) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000100)=r2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x6) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 243.203155][ T8227] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 03:59:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740), 0x0, 0x0, 0xffffffffffffff1b}, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7dc, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x3ff, 0x3) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000200)=0x8) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000040)={0x0, 0x7}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) 03:59:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x40, 0x0) connect$rose(r1, &(0x7f0000000300)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, [@default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null]}, 0x40) r2 = socket(0x11, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) personality(0x0) r5 = openat$vsock(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000140)={0x9, 0x3, 0x8}) ioctl$ASHMEM_SET_SIZE(r4, 0x40087705, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000340)={{0x3, 0x2, 0xbf2b, 0x3, 0x3}, 0x7fffffff, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) setsockopt$inet_int(r2, 0x0, 0x21, &(0x7f0000000080)=0xffff, 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000490000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000000)="66b9ad0300000f320f01c8d926bd580f0054080f21ffba200066ed0f01cf0f30d9fe8e03", 0x24}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000400), 0x1000) ioctl$KVM_RUN(r8, 0xae80, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0xfffffffffffffffd}) [ 243.394981][ T8236] syz-executor5 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 03:59:59 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x400, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000044000)=0x0) timer_settime(r3, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r2, 0x401104000000016) 03:59:59 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x47, 0x4000) setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f00000001c0)=0x1777, 0x4) r2 = syz_open_dev$media(0x0, 0x0, 0x101000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000200)='/dev/capi20\x00', 0x800, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0) syz_open_pts(r3, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x1, 0x8, 0xae2, 0x800, 0x19, 0x1f, 0x80, 0x8435, 0x5, 0x80, 0x4, 0x3}) ioctl$TCFLSH(r3, 0x540b, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003a80)={'hsr0\x00', 0x0}) sendmmsg(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="60000000000000000000000002000000f200e2687af24ea576166abd753a023f53b16da991cd859436ced50e977ba29e006578ce75578bf58521d1aa0b7317b1380289dcacec2f080fb41e68af4b0caa3381682f6c55a634913fdafdaeb3be00"], 0x60}, 0xaccd}, {{&(0x7f0000001e00)=@in={0x2, 0x4e22, @local}, 0x80, &(0x7f0000002200)=[{0x0}], 0x1}, 0xda}, {{&(0x7f0000002700)=@nfc_llcp={0x27, 0x1, 0x2, 0x0, 0x3, 0x0, "bcc3ae177d8aa307452421e0da6bd3baf20664dcb8646aa61eacbeb16b23af7d548962c3ad362bb2866b109711bd8ac0f432047df3d2c851b54aa7fad224c6", 0x24}, 0x80, 0x0}, 0x2}, {{&(0x7f0000003ac0)=@ll={0x11, 0xff, r4, 0x1, 0x1}, 0x80, 0x0}, 0xaf}, {{&(0x7f0000003e00)=@llc={0x1a, 0x3, 0xff, 0xfffffffffffffffd, 0x1, 0xfffffffffffff51d, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000004300)=[{&(0x7f00000042c0)}], 0x1}, 0x5}], 0x5, 0x4011) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, 0x0) kcmp(0x0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000002003fefa6bd86a09e0000000000000ed300479ef1aa624e44fdbb131e69cfb96823ed568ae2acfd66a18cb75fcedfbb1e626931c691f4b11dbf7dec0eae6cab7756dd31ac889c127cfd3be800c484e626115ae0f01019f0039ee73864cb775acdda09122da29cc6f0552b39c604997ffa612f8a0afa"], 0xa) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000100)=0x9ff, 0x4) 04:00:00 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x13f, 0x41) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 04:00:00 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x4, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x6, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x5c}, @dev}}}}}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$netlink(0x10, 0x3, 0x1f) ptrace(0x10, r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x220042, 0x0) connect$caif(r1, &(0x7f0000000080)=@dbg={0x25, 0xe1, 0x4}, 0x18) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[@ANYBLOB="070000000000000000200100000000001a00000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000002000000000000004000000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000f0000000000000de00000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000f01100000000007100000000000000", @ANYPTR=&(0x7f0000001500)=ANY=[@ANYBLOB="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"], @ANYBLOB="000000000000000002000000000000006600000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000100000000000010000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000001000000000008700000000000000", @ANYPTR=&(0x7f0000001340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) wait4(0x0, 0x0, 0x0, 0x0) 04:00:00 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @rand_addr=0xffffffffedddb9a5}}}, 0x88) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r2 = dup(r1) sendto$inet6(r1, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000007c0)=0x80, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x40000003, 0x0, &(0x7f0000000c80)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e21, 0x8, @remote}}, [0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x8765]}, &(0x7f0000000a00)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000a40)={r3, 0xfffffffffffffffe, 0x4000007}, 0x8) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000d80)={0x0, @loopback}, &(0x7f0000000dc0)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000001400)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000c030}, 0xc, &(0x7f00000013c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="e00fc0c4bebd946b0000000000000000000000000000390000007e00000000"], 0x1}, 0x1, 0x0, 0x0, 0x8040}, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000080)={0x2000, 0x1000, 0x80000001, 0x9, 0x8001}) openat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in=@broadcast}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) ftruncate(r4, 0x2007fff) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000), 0x2) sendfile(r2, r4, &(0x7f0000d83ff8), 0x87ff7) close(r0) 04:00:00 executing program 1: r0 = syz_open_dev$mice(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(0x0, 0xd4cc, 0x98840) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000040)={0x3d, 0x3231564e, 0x401, 0x0, 0x3, @stepwise={{0x0, 0x6}, {0x86}}}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x2, {0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, [], 0xe}, 0xfff}, r3}}, 0x38) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000300)) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x0, 0x1, 0x0, 0x0) close(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x6, 0x87f2, 0xfffffffffffffff8}}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 04:00:00 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) fcntl$getflags(r0, 0x401) sysinfo(&(0x7f00000007c0)=""/154) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x11b400, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000000000000ffffffff0900df0d541beac3bc5c01503f010e6f"]) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x0, 0x6, 0x3}) ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x20000004e23, @dev}, 0x10) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x8c0f, 0x6}, &(0x7f0000000440)=0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000480)=@assoc_value={r4, 0xffff}, 0x8) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x8) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) openat$dsp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dsp\x00', 0x10180, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1], 0x0) gettid() ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000540)=&(0x7f0000000500)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x12) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) getsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty, 0xc}, 0x1c) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x410000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newpolicy={0x1dc, 0x13, 0x0, 0x70bd26, 0x25dfdbff, {{@in6=@rand_addr="556359b13308e3d2042c21fa27705a85", @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x800000000, 0x4e21, 0x711, 0x0, 0xa0, 0x80, 0x9f, 0x0, r6}, {0xfffffffffffffff7, 0x7, 0x623e87a4, 0x5, 0x5, 0x2, 0x8, 0xfffffffffffffffb}, {0x9, 0x1, 0xdfc9, 0x31}, 0x1, 0x6e6bb8, 0x3, 0x0, 0x1, 0x3}, [@algo_auth={0x11c, 0x1, {{'crct10dif\x00'}, 0x690, "75a2ec328d48e1d968c87bd435fc25f3a8a72841f200fdd007c21f92b76a2f12f8640246cdc91f9d98f9cd240ac78df143c3ecdfd12b865e9a732ff6758fabaf7a0deb6ddc09abf71e6483a24fae9e3c27dcf6ad192506f91838f1ff80166c0844a5e9f65650e90fa5b59005ef259ecf9ef63aac1d23c6bbb8743ea8f3f23ac70a7080354865f51f77e41a9bd10fcc6dba618191ad49a2c13e3f44502d7dd40b3948577aece7a349fd880b5e8876f8fa8b383917d07390952e4b4499bcd64009083feb890f0556329a94da67684a41aac3c5"}}, @etimer_thresh={0x8, 0xc, 0x3}]}, 0x1dc}}, 0x884) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r7, 0x106, 0x1, &(0x7f0000000200), 0x4) 04:00:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x20, 0xc6, 0x3f, 0x1f, 0x1}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)) r2 = inotify_init1(0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000340)=""/155) r4 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000280)="cba4c1fa786ad02f63", &(0x7f00000002c0)="8d89eb8b384b11a381b34751eb6d176d1473994593c9293d43cdcb81"}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001680)={0x2713, 0x0, 0x3000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f0000000100)={0x0, 0x2710}, 0x10) tkill(r4, 0x1000000000016) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x20008000) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@int=0x6, 0x4) [ 244.363596][ T8267] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:00:00 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000400)={0x0, 0x8000000000000013, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) shutdown(r2, 0x0) tkill(r0, 0x1004000000016) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x24000, 0x0) sendto$llc(r3, &(0x7f0000000100)="66457c04109caa55e0726b6f340cdf2f9b000e5e00ea5c06d13ac2e4aec2db35315457e5f6b18a46d1252151bca8f4e6d6627cc819398c719b35f7c16582c06ea3952efa9cd4bb2042311afa7a1f72440f7bd46c1af01f66d31f4fa001921f0d5e87aea82dddacf51db22087f47cdd69e25b535cad4d59243ac66cd0db3c96875db51b62cc8de8e403574fe84d20199586fa3707e6110d8b4d96d23d696825ac207cf9397ad7b01451a5e297b1e4eeb7433fca6e3cb3ed", 0xb7, 0x40000, &(0x7f00000001c0)={0x1a, 0x207, 0xdcf, 0xffff, 0x100000000, 0x7, @broadcast}, 0x10) lsetxattr$security_smack_entry(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000300)='/dev/vhost-vsock\x00', 0x11, 0x3) 04:00:00 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0xfe91) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0505350, &(0x7f00000003c0)={0x0, 0x0, 'client1\x00', 0x0, "b5101d9f913155eb", "d1a9a3f311b5023c79791ecc2d6604d6d2d68195db16f437a28d39335a2e7010", 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x408c5333, &(0x7f0000000300)={0x0, 0x0, 'client0\x00', 0x0, "76145181b5e6de55", "bd4535e96a92c597e30c7bb48247e076e68021d56c2b9efc50d356f793bb76b5"}) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000180), &(0x7f0000000200)=0x4) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{r3, r4+10000000}, {r5, r6+30000000}}, 0x0) tkill(r1, 0x1000000000013) 04:00:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x800, 0x0) write$P9_RSETATTR(r3, &(0x7f00000000c0)={0x7, 0x1b, 0x2}, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000180)={0x4, 0x0, [{}, {}, {}, {}]}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x400ffffe}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="c9"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:00:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) close(r1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r2 = inotify_init() mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x4400, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r4, 0xc0104320, &(0x7f0000000240)={0x10001, &(0x7f0000000140)="c1862b8f69d38b3393b1b23019122aa29fa5298421c41867f01c7d9a13f1e229e2d146b0711140b2ff96bcb499a95bd0f2e9531ceb49674c9e0f29a60541a99ebeda371d0f421cbb24d5f55b26784e9d427feab37f6186412634dbf4b1a7900174f82cc74617872af0a6481e4f1009cd91ba04b258fc5d4f181307cc3b564f0ab57b7a75c04a6cf2df438cf769c60f1dd2c8bb84f2e1547911a624e941e3b1c830ca151362f1ae2e29bcc91b72c2a034ac8aac6bc72e7da20e14da325702c3a95a5e8e6ac78d77908dd18d84e7eb71a30d0b56da13fb2af4f8a214c42a09b92e165446aaae3f8ea9e00acade0276"}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x401, 0x4, 0x1, 0x101]}) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x140, 0xfffffffffffffffe, 0xc1, 0x3], [0xc0010058, 0x2]}) 04:00:01 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x4000) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '\x00'}, 0x6) syz_emit_ethernet(0xd4, &(0x7f0000000180)={@dev={[], 0xc}, @dev={[], 0x26}, [], {@generic={0x88f8, "1c24691d0ac7d0d3dd5dea95c6c3396473d3e093ea2e8a0be453e69764a129b2d4d0af1e8e41acef98d8a4197519bd87cc0ac1554af4b2a57c2286d31d91206e0d4a71a8a882d935a152add22ac44b2da5e13b62e405b9acb6edd1f78801336ba52eab6f648cccf51235ba05b6ddb16f82b5647555184647ab5ca3df3a8079baf092e01e8063ae43c680a5ff551a6f3a061b469cdc630048250a4dd5aa5b878cb37e8757967c8307521af0750c213871cec8b7a5b911206e018b8e0f05b2116a8bc078b18ed5"}}}, 0x0) 04:00:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2080, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)=""/23, &(0x7f00000000c0)=0x17) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000001c0)={r3, 0x2f3}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000026c000)=ANY=[@ANYBLOB="852a627700000000", @ANYPTR=&(0x7f00004edf8a)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000000000000000000000"], @ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) [ 245.237794][ T8323] binder_alloc: 8322: binder_alloc_buf size 576460752303423488 failed, no address space [ 245.247854][ T8323] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 245.262262][ T8323] binder: 8322:8323 transaction failed 29201/-28, size 576460752303423488-0 line 3056 04:00:01 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x38, &(0x7f0000000080)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000016ba0100000000000000000000"], 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 245.279457][ T8323] binder_alloc: binder_alloc_mmap_handler: 8322 20000000-20002000 already mapped failed -16 [ 245.290330][ T8329] binder: BINDER_SET_CONTEXT_MGR already set [ 245.296626][ T8329] binder: 8322:8329 ioctl 40046207 0 returned -16 [ 245.303874][ T8323] binder_alloc: 8322: binder_alloc_buf, no vma [ 245.310043][ T8323] binder: 8322:8323 transaction failed 29189/-3, size 576460752303423488-0 line 3056 04:00:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x4201, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0x10) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x20) tkill(r2, 0x6) ptrace$cont(0x18, r2, 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x0, 0x10001, 0x0, 0xaf4, r2}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) 04:00:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000100)={0x4000000000007b, 0x0, [0x571]}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) 04:00:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x4, 0x4, 0x9}, 0x2c) close(r2) 04:00:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_init() mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x24, &(0x7f0000013e95), 0x4) close(r2) close(r1) 04:00:03 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = geteuid() r3 = getegid() write$FUSE_ATTR(r1, &(0x7f0000000080)={0x78, 0x0, 0x6, {0x6, 0x8, 0x0, {0x0, 0x5, 0x8, 0x6, 0x7, 0xdce0, 0x4, 0x80000000, 0x5, 0x33b40000, 0x7fff, r2, r3, 0x2, 0x7}}}, 0x78) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7198b3f8, 0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000040)={0x4, 0x7fffffff}, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000700)='/dev/audio\x00', 0x140206, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r5, &(0x7f0000000480), 0xffffffcd) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x8, 0x0, 0x2}}, 0x50) dup2(r0, r1) 04:00:03 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xc0000, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000014c0)={&(0x7f0000000080)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001400)=[{&(0x7f00000000c0)="91f47c46ba92c4a40d237e87", 0xc}, {&(0x7f0000000100)="acf584cbf3e550bcf248e5c79486e4fda6a2a3fe3e64adbf9041e0adbd67615b17e11f993757c3643e02d6483156675fa29e70304bf5cc9a1abcc9", 0x3b}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="d3f8601bcff1a09328cfb3ca7c48ad81893ac7ef1ce7452168e6f1b2d03f797f1a41e627d73a10017534df79b1d8f9e606fbd4b6bd8c324273ee717b58e8c5f22f0d7441a3f4a20882e2a60696bacc23faae7c0499fdb89472bb77627849064e597bb58ee714fdcd869dfd58024cb5edcb0a3117767b1be093fd13d263c1fd27d80a443a2278b5f9dd534ef68b6c07eb6272dbc5f6124eae42dcb1bf9e8cda435e49d9bdd6e88914235d2f47db469f6ad11ffaeb1307a0bd0649", 0xba}, {&(0x7f0000001200)="841456fb1cff0ab2941ae1b8c36a53a3bc61c86f362806eda8e82f0d7aeb94332ce7e467ea0c286759b4b70c4302555e52aef0dffc876dfdc65977221262994ee2c637bb5c20f68a515c0d6a4b75e8e19e9ca0e1f592950df33a67d382d4a3a1c62faddae1cbc77f4e8787f4d4a620f63e", 0x71}, {&(0x7f0000001280)="728f0456d90fa7cb321815960326dffdfd35b4b33ce4613943267c0180c40605641d8305acbbebd9a8414056b0df414c1d5a5f1382ef894337bcfb978eff16f9b8cb4924e2cf536e623c2065bdb9", 0x4e}, {&(0x7f0000001300)="c34479ec40e3961df326128458149a83573adda2d81d80e2f8af3411292fc1335a8e5c44066acc6dfafcfb2cafada4504c3f206189d79ae2ad819aefdeaa80a7c4ab1223243976b554873d2a0dc47a3fea6c3176d417f6a41b690b6e3726b745bcab60465fa52f8a000eb54d7f7d467fc46a8b4901ebf00bf634a6373cce9fc7469a972618dc77ffbfc516393b1833ccc4f2133a88ba11a4a739e47965d87b1812bdf36d7eb582816f86da8395c1e6003a844d016d27ea673581cf9c64b65d78bbbf2a2e059aacd736ed0e31418862115fe65f0c969689e730e4a6c53b98", 0xde}], 0x7, &(0x7f0000001480)=[@init={0x18, 0x84, 0x0, {0x1000000000000, 0xc066, 0x7, 0x6}}], 0x18, 0x20004000}, 0x8000) read(r0, 0x0, 0x0) 04:00:03 executing program 3: ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) 04:00:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x805, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4002}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) pkey_alloc(0x0, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f00000000c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\x94r\x00\x00\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&N\x03\xb2K\xac\xe6x\x05\x98\xe5\x8b\xa5\f\x00\x81[K\xa6yfF\xfb\xceJ\xf2\xc0\x85\xc9l\vf\xcd\x97\xb9\xab\xb8\xa0A\f-\xd0\a&g') write$tun(r0, &(0x7f0000000400)={@val, @val, @eth={@random="352f07cd3704", @random="a7faec8b3e46", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast}, @icmp=@info_reply}}}}}, 0x38) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x20}) finit_module(r0, &(0x7f0000000000)='-keyringppp0vboxnet1system-#)vmnet0)@[,%posix_acl_accessvmnet1md5sumppp1\x00', 0x3) 04:00:03 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1ff, 0x200) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x280, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x814) getpeername$tipc(r1, &(0x7f0000000080)=@name, &(0x7f0000000280)=0x10) bpf$PROG_LOAD(0x5, &(0x7f000000c780)={0x7, 0x4, &(0x7f0000000580)=@framed={{}, [@jmp={0xb, 0x0, 0x103c, 0xe1}]}, &(0x7f0000001740)='GPM\x00\x95\xe6j\xb3\x14\x9aW_\x04\xa7a\a\x10\xf8\x8bl\xa1@\xc4\xcah\x04\x85:/\x03a\x99[^2\x9f\xfa{\xf4\xe9\xc50\xd4\x9c\t\x7f\'*\xd7\x0ed<6&\xfa\xf4\x84\xcb\x8b\x18\xb2\xac\xf6<\x88\xc36\x06\xe8\x8e4\xff\x18{4\x12\xaf\xeaA`$K\x85\xcbH\xff\x94\xa5K9-\xdf\xc5X~z,\x94_I8\xbe:\xe5O\x1c}[\x12bC\x81\x1d\xad\r\x85-\xea\xbc@\xad\x0e\xcbP@k\xacV\xb47\xe0o\x95\x10\xf1J\xb5\xb2i\x91-bUMt\xc0\x7fd+\xef\xd4\x9a\x1c\xa2A\x9b\xfb\x9b\xdf\xbe\xe6\x18\xe6\xeb\xf6\xbb\xb5I\xd5\xa5:\xb5j\x84\xcc3\x9b\xaa\x81{:\x95;;', 0x5, 0xe2, &(0x7f0000001640)=""/226}, 0x48) 04:00:03 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = geteuid() r3 = getegid() write$FUSE_ATTR(r1, &(0x7f0000000080)={0x78, 0x0, 0x6, {0x6, 0x8, 0x0, {0x0, 0x5, 0x8, 0x6, 0x7, 0xdce0, 0x4, 0x80000000, 0x5, 0x33b40000, 0x7fff, r2, r3, 0x2, 0x7}}}, 0x78) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7198b3f8, 0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000040)={0x4, 0x7fffffff}, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000700)='/dev/audio\x00', 0x140206, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r5, &(0x7f0000000480), 0xffffffcd) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x8, 0x0, 0x2}}, 0x50) dup2(r0, r1) 04:00:03 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0046d00, 0x0) 04:00:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0xffffffffffff4836, 0x0) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000380)={0x40000, 0x0, [0x8, 0x2, 0x4, 0x0, 0x0, 0x80, 0x100000000, 0x7fffffff]}) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000000100)}], 0x1, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x1, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000500)=0x100002) r4 = socket(0x1e, 0x4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001480), 0x0, 0x0, &(0x7f00000015c0)) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x400000000000224, 0x0) accept4(0xffffffffffffffff, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003700), 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000480)={&(0x7f0000000280)=@alg, 0x80, &(0x7f0000000340)=[{&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f0000000300)=""/52, 0x34}], 0x2, &(0x7f00000006c0)=""/193, 0xc1}, 0x2000) sendmmsg(r0, &(0x7f0000005f00)=[{{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001500), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001a010000010000007d0000000000000040f63309ca5a26bd538d3a3105fa8f8972bd60dd41b80638afabe90abbfa896120daaa624b245360d5122c6f5678fc5122219818583a12bbe1971b9cc285023a533a007e14ebcdb56c7ef637e49df78076dc86b9cccb33d2c91ced9f2f81a0be3205482fc03dd9d1d04f"], 0x82}}], 0x1, 0x0) connect(r0, &(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @dev, 0x3}, 0x80) 04:00:04 executing program 4: syz_mount_image$gfs2(&(0x7f00000001c0)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{@statfs_quantum={'statfs_quantum', 0x3d, 0x80000000}}]}) socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200900, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x1, 0x43353039, 0xe3, 0x7f, 0x3, @stepwise={{0x100000000, 0xed0}, {0x1, 0x101}, {0x9, 0x80}}}) 04:00:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1000000005) ioctl$TCFLSH(r0, 0x8925, 0x73fffa) 04:00:04 executing program 1: bpf$MAP_CREATE(0x2, 0x0, 0x34c925bfcda04296) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60ec, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x10001) epoll_create1(0x80000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={r1, 0x0, 0x1, 0x6, 0x0}, 0x20) openat$cgroup_ro(r2, &(0x7f0000000680)='pids.current\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r3, &(0x7f0000000080), 0x297ef) unlink(&(0x7f0000000240)='./file0\x00') [ 247.777620][ T8371] device nr0 entered promiscuous mode 04:00:04 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = geteuid() r3 = getegid() write$FUSE_ATTR(r1, &(0x7f0000000080)={0x78, 0x0, 0x6, {0x6, 0x8, 0x0, {0x0, 0x5, 0x8, 0x6, 0x7, 0xdce0, 0x4, 0x80000000, 0x5, 0x33b40000, 0x7fff, r2, r3, 0x2, 0x7}}}, 0x78) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7198b3f8, 0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000040)={0x4, 0x7fffffff}, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000700)='/dev/audio\x00', 0x140206, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r5, &(0x7f0000000480), 0xffffffcd) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x8, 0x0, 0x2}}, 0x50) dup2(r0, r1) [ 247.874313][ T8385] gfs2: statfs_quantum mount option requires a non-negative numeric argument [ 247.902039][ T8385] gfs2: can't parse mount arguments [ 248.003211][ T8385] gfs2: statfs_quantum mount option requires a non-negative numeric argument [ 248.042613][ T8385] gfs2: can't parse mount arguments 04:00:04 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000001c0)={{0x8, 0x824, 0x800, 0x7, 0x8, 0xb59f}, 0x1000}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000cc0)) ftruncate(r1, 0x208200) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) getresgid(0x0, 0x0, &(0x7f0000000900)) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x602200, 0x7ffffe, 0x4002011, r2, 0x0) 04:00:04 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = geteuid() r3 = getegid() write$FUSE_ATTR(r1, &(0x7f0000000080)={0x78, 0x0, 0x6, {0x6, 0x8, 0x0, {0x0, 0x5, 0x8, 0x6, 0x7, 0xdce0, 0x4, 0x80000000, 0x5, 0x33b40000, 0x7fff, r2, r3, 0x2, 0x7}}}, 0x78) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7198b3f8, 0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000040)={0x4, 0x7fffffff}, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000700)='/dev/audio\x00', 0x140206, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r5, &(0x7f0000000480), 0xffffffcd) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x8, 0x0, 0x2}}, 0x50) dup2(r0, r1) 04:00:04 executing program 1: bpf$MAP_CREATE(0x2, 0x0, 0x34c925bfcda04296) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60ec, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x10001) epoll_create1(0x80000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={r1, 0x0, 0x1, 0x6, 0x0}, 0x20) openat$cgroup_ro(r2, &(0x7f0000000680)='pids.current\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r3, &(0x7f0000000080), 0x297ef) unlink(&(0x7f0000000240)='./file0\x00') 04:00:05 executing program 5: r0 = getpid() perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0xd9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x510c}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mq_open(&(0x7f0000000080)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00') write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x8, 0xfff, 0x9}, 0xa) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000100), 0x4) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000140)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000006c0)={{0xa, 0x4e24, 0x1, @ipv4={[], [], @multicast1}}, {0xa, 0x4e23, 0x0, @mcast1}, 0x4, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x5c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') lstat(&(0x7f0000000600)='./file0//ile0\x00', &(0x7f0000000640)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x101000, 0x0) connect$ax25(r1, &(0x7f0000000800)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@null, @null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null]}, 0x48) renameat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x7) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000240)='./file0\x00', 0x4, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000380)="247fc566a7e00de7e5d9049a4e2e8050", 0x10, 0x3}, {&(0x7f0000000480)="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", 0xfd, 0x200}, {&(0x7f0000000740)="461d8224cb290b9c0d7956a44768bcc62fe7398f730f52c0c37eba90e070eef3a976646a8115821510c03709e53fe549501d71d2748bf363b26dba6198e22442bbe39799e26f27dc2c687ee1c67b00858b557b186860c7ad2f67fc83dba8680f0112953925b24c37e95d5ce37433d8b39d029421df84c423abdcc0099cbb3c37b729a56e9c4fb6523609187e533bbaf7", 0x90, 0x1}], 0x8, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x5) 04:00:05 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = geteuid() r3 = getegid() write$FUSE_ATTR(r1, &(0x7f0000000080)={0x78, 0x0, 0x6, {0x6, 0x8, 0x0, {0x0, 0x5, 0x8, 0x6, 0x7, 0xdce0, 0x4, 0x80000000, 0x5, 0x33b40000, 0x7fff, r2, r3, 0x2, 0x7}}}, 0x78) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7198b3f8, 0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000040)={0x4, 0x7fffffff}, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000700)='/dev/audio\x00', 0x140206, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r5, &(0x7f0000000480), 0xffffffcd) dup2(r0, r1) 04:00:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0xffffffffffff4836, 0x0) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000380)={0x40000, 0x0, [0x8, 0x2, 0x4, 0x0, 0x0, 0x80, 0x100000000, 0x7fffffff]}) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000000100)}], 0x1, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x1, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000500)=0x100002) r4 = socket(0x1e, 0x4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001480), 0x0, 0x0, &(0x7f00000015c0)) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x400000000000224, 0x0) accept4(0xffffffffffffffff, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003700), 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000480)={&(0x7f0000000280)=@alg, 0x80, &(0x7f0000000340)=[{&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f0000000300)=""/52, 0x34}], 0x2, &(0x7f00000006c0)=""/193, 0xc1}, 0x2000) sendmmsg(r0, &(0x7f0000005f00)=[{{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001500), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001a010000010000007d0000000000000040f63309ca5a26bd538d3a3105fa8f8972bd60dd41b80638afabe90abbfa896120daaa624b245360d5122c6f5678fc5122219818583a12bbe1971b9cc285023a533a007e14ebcdb56c7ef637e49df78076dc86b9cccb33d2c91ced9f2f81a0be3205482fc03dd9d1d04f"], 0x82}}], 0x1, 0x0) connect(r0, &(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @dev, 0x3}, 0x80) 04:00:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x400, 0x14000) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) sendmsg$can_bcm(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x7, 0x800, 0xfffffffffffffff8, {}, {0x0, 0x2710}, {0x2, 0xfffffffffffffffd, 0xbf, 0x8fe}, 0x1, @can={{0x3, 0x0, 0x20, 0x100000000}, 0x5, 0x1, 0x0, 0x0, "943daf3fc6ff5896"}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 04:00:05 executing program 1: bpf$MAP_CREATE(0x2, 0x0, 0x34c925bfcda04296) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60ec, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x10001) epoll_create1(0x80000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={r1, 0x0, 0x1, 0x6, 0x0}, 0x20) openat$cgroup_ro(r2, &(0x7f0000000680)='pids.current\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r3, &(0x7f0000000080), 0x297ef) unlink(&(0x7f0000000240)='./file0\x00') 04:00:05 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = geteuid() r3 = getegid() write$FUSE_ATTR(r1, &(0x7f0000000080)={0x78, 0x0, 0x6, {0x6, 0x8, 0x0, {0x0, 0x5, 0x8, 0x6, 0x7, 0xdce0, 0x4, 0x80000000, 0x5, 0x33b40000, 0x7fff, r2, r3, 0x2, 0x7}}}, 0x78) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7198b3f8, 0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000040)={0x4, 0x7fffffff}, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000700)='/dev/audio\x00', 0x140206, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r5, &(0x7f0000000480), 0xffffffcd) dup2(r0, r1) [ 249.171661][ T8446] MINIX-fs: unable to read superblock 04:00:05 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x2ea, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, @in={0x2, 0x4e23, @rand_addr=0xfffffffffffffffe}, @in6={0xa, 0x4e22, 0x9, @mcast1, 0x7fff}], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8b2b, &(0x7f0000000300)='wlan0\x00\xd3\xeb\x180x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) sendmsg$can_bcm(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x7, 0x800, 0xfffffffffffffff8, {}, {0x0, 0x2710}, {0x2, 0xfffffffffffffffd, 0xbf, 0x8fe}, 0x1, @can={{0x3, 0x0, 0x20, 0x100000000}, 0x5, 0x1, 0x0, 0x0, "943daf3fc6ff5896"}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 04:00:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x3, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000480)) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000006000000", @ANYRES32=r1, @ANYBLOB="0000000000f0ffff000000000020000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000001000000000080000000000100", @ANYRES32=r1, @ANYBLOB="0000000000000100000000000000000001000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000000000000000100000000", @ANYRES32=r0, @ANYBLOB="00007157615d01010000750000f0ffffffffffff977d64035a22700e6243", @ANYRES32=r1, @ANYBLOB="0000000000800000000000000000000000000100"]) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@window={0x3, 0xacc, 0x3}, @window={0x3, 0x81, 0x5}, @timestamp, @sack_perm, @timestamp], 0x5) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000200)=0x9, 0xfece) mlockall(0x7) getsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 04:00:05 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = geteuid() r3 = getegid() write$FUSE_ATTR(r1, &(0x7f0000000080)={0x78, 0x0, 0x6, {0x6, 0x8, 0x0, {0x0, 0x5, 0x8, 0x6, 0x7, 0xdce0, 0x4, 0x80000000, 0x5, 0x33b40000, 0x7fff, r2, r3, 0x2, 0x7}}}, 0x78) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7198b3f8, 0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000040)={0x4, 0x7fffffff}, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000700)='/dev/audio\x00', 0x140206, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r5, &(0x7f0000000480), 0xffffffcd) dup2(r0, r1) 04:00:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x6}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xf000, 0x10000}) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000100)=0x4, 0x4) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 249.827170][ T8478] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:00:06 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = geteuid() r3 = getegid() write$FUSE_ATTR(r1, &(0x7f0000000080)={0x78, 0x0, 0x6, {0x6, 0x8, 0x0, {0x0, 0x5, 0x8, 0x6, 0x7, 0xdce0, 0x4, 0x80000000, 0x5, 0x33b40000, 0x7fff, r2, r3, 0x2, 0x7}}}, 0x78) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7198b3f8, 0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000040)={0x4, 0x7fffffff}, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000700)='/dev/audio\x00', 0x140206, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x8, 0x0, 0x2}}, 0x50) dup2(r0, r1) 04:00:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x400, 0x14000) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) sendmsg$can_bcm(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x7, 0x800, 0xfffffffffffffff8, {}, {0x0, 0x2710}, {0x2, 0xfffffffffffffffd, 0xbf, 0x8fe}, 0x1, @can={{0x3, 0x0, 0x20, 0x100000000}, 0x5, 0x1, 0x0, 0x0, "943daf3fc6ff5896"}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 04:00:06 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x20000, 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x7f, 0x40000) getsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000100)={@multicast1}, &(0x7f0000000140)=0x8) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d91563190408000340000000fb120001000e00da1b40d819a9060002000000", 0x2e}], 0x1}, 0x0) 04:00:06 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r0, 0x400, 0x3) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000280)={0x0, 0x6}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000340)) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000300), 0x4) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) write$P9_RATTACH(r4, &(0x7f00000000c0)={0x14, 0x69, 0x2, {0x24, 0x2, 0x2}}, 0x14) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000000000004"]) 04:00:06 executing program 1: bpf$MAP_CREATE(0x2, 0x0, 0x34c925bfcda04296) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60ec, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x10001) epoll_create1(0x80000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={r1, 0x0, 0x1, 0x6, 0x0}, 0x20) openat$cgroup_ro(r2, &(0x7f0000000680)='pids.current\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r3, &(0x7f0000000080), 0x297ef) [ 250.223110][ T8493] sched: DL replenish lagged too much [ 250.229273][ T8494] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 250.315320][ T8499] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 250.350757][ T8493] kasan: CONFIG_KASAN_INLINE enabled [ 250.356525][ T8493] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 250.364926][ T8493] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 250.371872][ T8493] CPU: 0 PID: 8493 Comm: syz-executor5 Not tainted 5.0.0-rc4-next-20190130 #22 [ 250.380786][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.390933][ T8493] RIP: 0010:relay_open_buf.part.0+0x7cb/0xb40 [ 250.396991][ T8493] Code: c1 ea 03 80 3c 02 00 0f 85 4c 03 00 00 49 8d 7d 58 4d 89 ac 24 90 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1b 03 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 250.416599][ T8493] RSP: 0018:ffff8880555976f0 EFLAGS: 00010202 [ 250.422669][ T8493] RAX: dffffc0000000000 RBX: ffff8880a5866a80 RCX: ffffc90010884000 [ 250.430626][ T8493] RDX: 0000000000000008 RSI: ffffffff81833b80 RDI: 0000000000000042 [ 250.438605][ T8493] RBP: ffff888055597768 R08: 0000000000000006 R09: ffff888055588e88 [ 250.446568][ T8493] R10: ffff8880555885c0 R11: 0000000000000000 R12: ffff88808b7ef300 [ 250.454542][ T8493] R13: ffffffffffffffea R14: 0000000000000000 R15: 0000000000000279 [ 250.462528][ T8493] FS: 00007f518cc31700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 250.471444][ T8493] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.478028][ T8493] CR2: 0000001b30223000 CR3: 00000000a01b3000 CR4: 00000000001406f0 [ 250.485995][ T8493] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 250.493955][ T8493] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 250.501910][ T8493] Call Trace: [ 250.505194][ T8493] relay_open+0x5f3/0xaf0 [ 250.509516][ T8493] ? relay_open_buf.part.0+0xb40/0xb40 [ 250.514993][ T8493] ? __debugfs_create_file+0x301/0x400 [ 250.520447][ T8493] ? debugfs_create_file+0x5a/0x70 [ 250.525636][ T8493] do_blk_trace_setup+0x50d/0xdb0 [ 250.530683][ T8493] ? blk_tracer_print_line+0x60/0x60 [ 250.535960][ T8493] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 250.542228][ T8493] ? _copy_from_user+0xdd/0x150 [ 250.547085][ T8493] __blk_trace_setup+0xe3/0x190 [ 250.551925][ T8493] ? do_blk_trace_setup+0xdb0/0xdb0 [ 250.557157][ T8493] ? mark_held_locks+0xf0/0xf0 [ 250.561960][ T8493] blk_trace_setup+0x4f/0x70 [ 250.566627][ T8493] sg_ioctl+0x392/0x2f40 [ 250.570865][ T8493] ? add_lock_to_list.isra.0+0x450/0x450 [ 250.576520][ T8493] ? sg_new_write.isra.0+0xa70/0xa70 [ 250.581834][ T8493] ? exit_robust_list+0x290/0x290 [ 250.586911][ T8493] ? __might_fault+0x12b/0x1e0 [ 250.591671][ T8493] ? find_held_lock+0x35/0x120 [ 250.596446][ T8493] ? __might_fault+0x12b/0x1e0 [ 250.601204][ T8493] ? lock_acquire+0x1db/0x570 [ 250.605884][ T8493] ? lock_downgrade+0xc40/0xc40 [ 250.610724][ T8493] ? lock_release+0xc40/0xc40 [ 250.615396][ T8493] ? sg_new_write.isra.0+0xa70/0xa70 [ 250.620712][ T8493] do_vfs_ioctl+0x107b/0x17d0 [ 250.625387][ T8493] ? ioctl_preallocate+0x2f0/0x2f0 [ 250.630491][ T8493] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.636733][ T8493] ? __fget_light+0x2db/0x420 [ 250.641399][ T8493] ? fget_raw+0x20/0x20 [ 250.645564][ T8493] ? put_timespec64+0x115/0x1b0 [ 250.650404][ T8493] ? nsecs_to_jiffies+0x30/0x30 [ 250.655273][ T8493] ? do_syscall_64+0x8c/0x800 [ 250.659954][ T8493] ? do_syscall_64+0x8c/0x800 [ 250.664624][ T8493] ? lockdep_hardirqs_on+0x418/0x5d0 [ 250.669940][ T8493] ? security_file_ioctl+0x93/0xc0 [ 250.675047][ T8493] ksys_ioctl+0xab/0xd0 [ 250.679197][ T8493] __x64_sys_ioctl+0x73/0xb0 [ 250.683794][ T8493] do_syscall_64+0x1a3/0x800 [ 250.688377][ T8493] ? syscall_return_slowpath+0x5f0/0x5f0 [ 250.694021][ T8493] ? prepare_exit_to_usermode+0x232/0x3b0 [ 250.699735][ T8493] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.705306][ T8493] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.711194][ T8493] RIP: 0033:0x458089 [ 250.715081][ T8493] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 250.734686][ T8493] RSP: 002b:00007f518cc30c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.743118][ T8493] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458089 [ 250.751082][ T8493] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 000000000000000c [ 250.759055][ T8493] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 04:00:07 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = geteuid() r3 = getegid() write$FUSE_ATTR(r1, &(0x7f0000000080)={0x78, 0x0, 0x6, {0x6, 0x8, 0x0, {0x0, 0x5, 0x8, 0x6, 0x7, 0xdce0, 0x4, 0x80000000, 0x5, 0x33b40000, 0x7fff, r2, r3, 0x2, 0x7}}}, 0x78) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7198b3f8, 0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000040)={0x4, 0x7fffffff}, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000700)='/dev/audio\x00', 0x140206, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x8, 0x0, 0x2}}, 0x50) dup2(r0, r1) 04:00:07 executing program 1: bpf$MAP_CREATE(0x2, 0x0, 0x34c925bfcda04296) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60ec, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x10001) epoll_create1(0x80000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={r1, 0x0, 0x1, 0x6, 0x0}, 0x20) openat$cgroup_ro(r2, &(0x7f0000000680)='pids.current\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r3, &(0x7f0000000080), 0x297ef) [ 250.767013][ T8493] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f518cc316d4 [ 250.774985][ T8493] R13: 00000000004bf54d R14: 00000000004d0e38 R15: 00000000ffffffff [ 250.782947][ T8493] Modules linked in: [ 250.788975][ T8493] ---[ end trace cf9e571bd2ac7dc6 ]--- 04:00:07 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = geteuid() r3 = getegid() write$FUSE_ATTR(r1, &(0x7f0000000080)={0x78, 0x0, 0x6, {0x6, 0x8, 0x0, {0x0, 0x5, 0x8, 0x6, 0x7, 0xdce0, 0x4, 0x80000000, 0x5, 0x33b40000, 0x7fff, r2, r3, 0x2, 0x7}}}, 0x78) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7198b3f8, 0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000040)={0x4, 0x7fffffff}, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000700)='/dev/audio\x00', 0x140206, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x8, 0x0, 0x2}}, 0x50) dup2(r0, r1) [ 250.815964][ T3866] kobject: 'loop1' (00000000d94d7b61): kobject_uevent_env [ 250.823203][ T7991] kobject: '0:44' (00000000e412e02f): kobject_uevent_env [ 250.828010][ T3866] kobject: 'loop1' (00000000d94d7b61): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 250.830279][ T7991] kobject: '0:44' (00000000e412e02f): fill_kobj_path: path = '/devices/virtual/bdi/0:44' [ 250.880193][ T7991] kobject: '0:44' (00000000e412e02f): kobject_cleanup, parent (null) [ 250.883074][ T3866] kobject: 'loop3' (000000006057d911): kobject_uevent_env [ 250.908582][ T7991] kobject: '0:44' (00000000e412e02f): calling ktype release 04:00:07 executing program 4: accept4$llc(0xffffffffffffff9c, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x10, 0x800) r0 = syz_open_dev$amidi(&(0x7f0000000680)='/dev/amidi#\x00', 0x80000001, 0x101840) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000180)={{0x1, 0x6d50}, 'port1\x00', 0x5, 0x100000, 0x0, 0x1, 0xfffffffffffffffc, 0x2, 0x40, 0x0, 0x2}) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x84282) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x41) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000b00)) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000900)) sched_setaffinity(0x0, 0x3, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000a80)={0x4, &(0x7f0000000a40)=[{}, {}, {}, {}]}) getpgid(0x0) getpgid(0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000240)=0x0) ioprio_get$pid(0x2, r4) r5 = shmget(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000580)=0x4c) getresgid(&(0x7f00000002c0), &(0x7f0000000600), &(0x7f0000000840)) shmctl$IPC_SET(r5, 0x1, &(0x7f00000006c0)={{0x9, 0x0, 0x0, r6, 0x0, 0x0, 0xa1}, 0x0, 0x0, 0x5}) chdir(&(0x7f0000000340)='./file0\x00') ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x101, 0x1ff, 0x0, 0xa, 0x5, 0x10, "11f04d70ac0d7f67b435d0051f34290283cdaa4d9e914ba1c886f720e997a3c538176f686c085d0b1d00c58c748e9b545abcd7fab06a8a10c251c1a45797024d", "753390fcc58d8752290564dce3f1bdabd602ac371f394daf7e0fb1edcbf87dacc3e1ff5dac5ea7e1e252cb85ae3794a0707c2e573c54f2d8f011d23515c01e35", "655acb4b60a47a1011d92436d84740411e20bd662899cf1d740ce5f0e55ada9b", [0x7, 0x8c]}) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) umount2(&(0x7f0000000880)='./file0\x00', 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uinput\x00', 0x802, 0x0) r7 = getpgid(0xffffffffffffffff) sched_setscheduler(r7, 0x6, &(0x7f00000005c0)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syncfs(r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000380)=""/4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4001, 0x0) [ 250.925282][ T8505] kobject: '0:45' (00000000fa9f4386): kobject_add_internal: parent: 'bdi', set: 'devices' [ 250.940019][ T3866] kobject: 'loop3' (000000006057d911): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 250.942570][ T7991] kobject: '0:44': free name [ 250.968500][ T8505] kobject: '0:45' (00000000fa9f4386): kobject_uevent_env [ 250.974985][ T3866] kobject: 'loop4' (000000000361324d): kobject_uevent_env [ 250.995087][ T3866] kobject: 'loop4' (000000000361324d): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 251.016100][ T8505] kobject: '0:45' (00000000fa9f4386): fill_kobj_path: path = '/devices/virtual/bdi/0:45' [ 251.026006][ T3866] kobject: 'loop0' (00000000ea787e00): kobject_uevent_env [ 251.053487][ T3866] kobject: 'loop0' (00000000ea787e00): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 251.075602][ T8493] RIP: 0010:relay_open_buf.part.0+0x7cb/0xb40 04:00:07 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = geteuid() r3 = getegid() write$FUSE_ATTR(r1, &(0x7f0000000080)={0x78, 0x0, 0x6, {0x6, 0x8, 0x0, {0x0, 0x5, 0x8, 0x6, 0x7, 0xdce0, 0x4, 0x80000000, 0x5, 0x33b40000, 0x7fff, r2, r3, 0x2, 0x7}}}, 0x78) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7198b3f8, 0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000040)={0x4, 0x7fffffff}, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000700)='/dev/audio\x00', 0x140206, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x8, 0x0, 0x2}}, 0x50) dup2(r0, r1) 04:00:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x400, 0x14000) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) sendmsg$can_bcm(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x7, 0x800, 0xfffffffffffffff8, {}, {0x0, 0x2710}, {0x2, 0xfffffffffffffffd, 0xbf, 0x8fe}, 0x1, @can={{0x3, 0x0, 0x20, 0x100000000}, 0x5, 0x1, 0x0, 0x0, "943daf3fc6ff5896"}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x69, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 251.084741][ T8493] Code: c1 ea 03 80 3c 02 00 0f 85 4c 03 00 00 49 8d 7d 58 4d 89 ac 24 90 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1b 03 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 251.105465][ T8493] RSP: 0018:ffff8880555976f0 EFLAGS: 00010202 [ 251.128030][ T8493] RAX: dffffc0000000000 RBX: ffff8880a5866a80 RCX: ffffc90010884000 [ 251.138134][ T8493] RDX: 0000000000000008 RSI: ffffffff81833b80 RDI: 0000000000000042 [ 251.151930][ T8493] RBP: ffff888055597768 R08: 0000000000000006 R09: ffff888055588e88 [ 251.159997][ T8493] R10: ffff8880555885c0 R11: 0000000000000000 R12: ffff88808b7ef300 [ 251.168493][ T8493] R13: ffffffffffffffea R14: 0000000000000000 R15: 0000000000000279 [ 251.191442][ T3866] kobject: 'loop0' (00000000ea787e00): kobject_uevent_env 04:00:07 executing program 3: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41) ioctl$int_in(r0, 0x80000080045010, 0x0) 04:00:07 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = geteuid() r3 = getegid() write$FUSE_ATTR(r1, &(0x7f0000000080)={0x78, 0x0, 0x6, {0x6, 0x8, 0x0, {0x0, 0x5, 0x8, 0x6, 0x7, 0xdce0, 0x4, 0x80000000, 0x5, 0x33b40000, 0x7fff, r2, r3, 0x2, 0x7}}}, 0x78) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7198b3f8, 0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000040)={0x4, 0x7fffffff}, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000700)='/dev/audio\x00', 0x140206, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x8, 0x0, 0x2}}, 0x50) dup2(r0, r1) [ 251.198670][ T8493] FS: 00007f518cc31700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 251.207863][ T8493] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.217065][ T7999] kobject: '0:45' (00000000fa9f4386): kobject_uevent_env [ 251.224191][ T8493] CR2: 0000001b2f723000 CR3: 00000000a01b3000 CR4: 00000000001406f0 [ 251.232750][ T8493] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 251.240776][ T8493] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 04:00:07 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 251.252948][ T8493] Kernel panic - not syncing: Fatal exception [ 251.259959][ T8493] Kernel Offset: disabled [ 251.264278][ T8493] Rebooting in 86400 seconds..