[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 83.063832][ T31] audit: type=1800 audit(1571785811.115:25): pid=12026 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 83.086823][ T31] audit: type=1800 audit(1571785811.145:26): pid=12026 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 83.122510][ T31] audit: type=1800 audit(1571785811.175:27): pid=12026 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.116' (ECDSA) to the list of known hosts. 2019/10/22 23:10:26 fuzzer started 2019/10/22 23:10:30 dialing manager at 10.128.0.26:34203 2019/10/22 23:10:31 syscalls: 2415 2019/10/22 23:10:31 code coverage: enabled 2019/10/22 23:10:31 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/10/22 23:10:31 extra coverage: enabled 2019/10/22 23:10:31 setuid sandbox: enabled 2019/10/22 23:10:31 namespace sandbox: enabled 2019/10/22 23:10:31 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/22 23:10:31 fault injection: enabled 2019/10/22 23:10:31 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/22 23:10:31 net packet injection: enabled 2019/10/22 23:10:31 net device setup: enabled 2019/10/22 23:10:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 23:14:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)={0x9, 0x20000000001, "eb"}, 0x0) syzkaller login: [ 342.426988][T12192] IPVS: ftp: loaded support on port[0] = 21 [ 342.569531][T12192] chnl_net:caif_netlink_parms(): no params data found [ 342.626405][T12192] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.633609][T12192] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.642361][T12192] device bridge_slave_0 entered promiscuous mode [ 342.652491][T12192] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.659709][T12192] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.668537][T12192] device bridge_slave_1 entered promiscuous mode [ 342.701925][T12192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.714860][T12192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.748810][T12192] team0: Port device team_slave_0 added [ 342.758241][T12192] team0: Port device team_slave_1 added [ 342.838968][T12192] device hsr_slave_0 entered promiscuous mode [ 343.074548][T12192] device hsr_slave_1 entered promiscuous mode [ 343.346698][T12192] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.353960][T12192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.361685][T12192] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.368950][T12192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.447534][T12192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.467607][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 343.480450][ T3691] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.493988][ T3691] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.507220][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 343.526028][T12192] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.550492][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 343.559795][ T3691] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.567028][ T3691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.575488][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 343.584671][ T3691] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.591833][ T3691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.633130][T12192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 343.644031][T12192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.661416][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 343.671866][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 343.681780][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 343.692564][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 343.702073][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 343.712315][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 343.721891][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 343.731060][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 343.740631][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 343.749844][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 343.759865][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 343.769653][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 343.802264][T12192] 8021q: adding VLAN 0 to HW filter on device batadv0 23:14:32 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x800000003, 0x81) bind(r1, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 23:14:32 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") 23:14:32 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() socket$inet6(0xa, 0x0, 0x0) [ 344.805571][T12213] devpts: called with bogus options [ 344.816236][T12215] devpts: called with bogus options 23:14:32 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x400100000001, 0x4) syncfs(0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 23:14:33 executing program 0: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 344.925064][T12221] devpts: called with bogus options 23:14:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0) 23:14:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x17}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\v\x00\x03\x9b;\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6?\x00\x00\x01\x00\x00\x00\x00\x00I\x80\x0fX\x97\x01\xa4\x00', 0xa9824f69d13766f5, 0x10000a, 0x8000000, 0x7, 0x0, 0x1, 0x400, 0x0, 0x2, 0x400}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x2000)=nil) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000180)=0x6) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, r5, 0x20, 0x0, 0x25dfdbfc, {{}, 0x0, 0x8002, 0x0, {0xfecb, 0x11, 0x4}}}, 0x9}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40598e0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0x14, 0x13, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4) read(r0, &(0x7f0000c7c000)=""/136, 0x88) 23:14:34 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfc, 0x101000) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000040)=0x7) socket$nl_route(0x10, 0x3, 0x0) rt_sigpending(&(0x7f0000000080), 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x2000, 0x0) ioctl(r1, 0x7f, &(0x7f0000000100)="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") r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001100)='/dev/vcs\x00', 0x80101, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001140)='/dev/cachefiles\x00', 0x28000, 0x0) write$FUSE_OPEN(r2, &(0x7f0000001180)={0x20, 0x0, 0x8}, 0x20) rt_sigreturn() r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/zero\x00', 0x20800, 0x0) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000001200)) r4 = syz_open_dev$vcsa(&(0x7f0000001240)='/dev/vcsa#\x00', 0x1, 0x4000) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001280)=0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000012c0)={[], 0x80, 0x4, 0x5, 0x8, 0x9, r5}) r6 = openat(r0, &(0x7f0000001340)='./file0\x00', 0x8101, 0x8) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000001380)={@broadcast, @loopback, 0x0, 0x6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x2a}, @broadcast, @remote, @remote]}, 0x28) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$getown(r7, 0x9) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000001400)={'syzkaller1\x00'}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000001440)={0x0, 0x173}) r9 = syz_open_dev$vcsa(&(0x7f0000001480)='/dev/vcsa#\x00', 0xe7a4, 0x32b040) r10 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f00000014c0)='/dev/snd/pcmC#D#c\x00', 0x0, r10) r11 = syz_open_dev$vbi(&(0x7f0000001500)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r11, 0x84, 0x7, &(0x7f0000001540)={0x1}, 0x4) lstat(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)) r12 = openat(r8, &(0x7f0000001640)='./file0\x00', 0x0, 0x0) getpeername$inet(r12, &(0x7f0000001680)={0x2, 0x0, @empty}, &(0x7f00000016c0)=0x10) 23:14:34 executing program 0: syz_usb_connect(0x4, 0x5, &(0x7f0000000000)={{0x12, 0x1, 0x688, 0xc0, 0x8b, 0x80, 0x8, 0x4a5a, 0x3bf4, 0x3a31, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x17, 0x0, 0x0, 0x2, 0xd}}]}}]}}, 0x0) [ 346.490934][T12237] IPVS: ftp: loaded support on port[0] = 21 [ 346.664949][T12237] chnl_net:caif_netlink_parms(): no params data found [ 346.721565][T12237] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.728856][T12237] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.737867][T12237] device bridge_slave_0 entered promiscuous mode [ 346.748031][T12237] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.755265][T12237] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.764116][T12237] device bridge_slave_1 entered promiscuous mode [ 346.796837][T12237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.809627][T12237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.843371][T12237] team0: Port device team_slave_0 added [ 346.852617][T12237] team0: Port device team_slave_1 added [ 347.028976][T12237] device hsr_slave_0 entered promiscuous mode [ 347.075337][T12237] device hsr_slave_1 entered promiscuous mode [ 347.234792][T12237] debugfs: Directory 'hsr0' with parent '/' already present! [ 347.265981][T12237] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.273199][T12237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.281122][T12237] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.288397][T12237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.375591][T12237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.398129][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.411173][ T3691] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.421344][ T3691] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.434972][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 347.457231][T12237] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.476465][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.485468][ T3691] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.492632][ T3691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.551596][T12237] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.562483][T12237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.580651][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.590535][ T3691] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.597772][ T3691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.608657][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.618764][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 347.628243][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.637732][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.675586][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 347.684137][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 23:14:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYPTR, @ANYPTR, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRESOCT, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYPTR64], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES16], @ANYRES16=r3, @ANYRES32], @ANYRES16=0x0, @ANYRES64, @ANYBLOB="8fbed8d4039767d7", @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYPTR64, @ANYRES64, @ANYPTR64], @ANYPTR]], 0x6}}, 0x20040011) [ 347.721882][T12237] 8021q: adding VLAN 0 to HW filter on device batadv0 23:14:35 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x80000000000ff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000000}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180da0000de77f624da1dce64dd606d570e0014ff0000000000000000000000000000000000df0200000000000000000000ef0000010000000078d6e63972e11b83c8ac844ca4e55f611ed9f5c79f49aeac0b8a7fb35555821bc687cf23930d722e37c9745b2a51c49c5796ca", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 23:14:36 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x800000004}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x10041}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400, 0x0) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7, r4, &(0x7f0000000100)="84205a5e38140b8b33c092f8bd9bf1f9146424b5a735b67975f34e654ada615820f917fb69c066d08674134f010d5f26bf8db269cb3522c7f5a129612c643ba582baa15934d3c95b7a56161482bc57d22bdb551a48f102a6e99a1495d2f750e0319390", 0x63, 0x2, 0x0, 0x5, r5}, &(0x7f00000001c0)) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) ioprio_get$uid(0x3, 0xffffffffffffffff) dup3(r1, r2, 0x0) 23:14:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_usb_connect$cdc_ncm(0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYRESHEX, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="07928e596fb36d12", @ANYRES32=r0, @ANYRESOCT=r5, @ANYRESHEX], @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r2], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESOCT], @ANYRESDEC=r3, @ANYRESHEX=r4, @ANYBLOB="7437572d3912946b0eb26e7cbb9f35643ef6c358ccbe71517ce43b64979ed40e486d3d0ef856954f7ef3295b9eb65ce25ac81d77c7282e394e43dcd7d1441f7c5e21155dccb57349bd"]], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x3c) ptrace$cont(0x18, r7, 0x0, 0x0) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r7, 0x0, 0x0) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000000)=r7) 23:14:36 executing program 0: ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000040)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd6, 0xf4, 0x30, 0x20, 0xe20, 0x101, 0x1773, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa9, 0x68, 0x62, 0x0, [], [{{0x9, 0x5, 0x9, 0x1e}}]}}]}}]}}, 0x0) [ 348.624216][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 348.865002][ T12] usb 1-1: Using ep0 maxpacket: 32 [ 348.986045][ T12] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 348.995972][ T12] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=17.73 [ 349.005176][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.045270][ T12] usb 1-1: config 0 descriptor?? [ 349.088291][ T12] pegasus_notetaker: probe of 1-1:0.0 failed with error -12 [ 349.290842][ T12] usb 1-1: USB disconnect, device number 2 [ 350.074923][ T12] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 350.314926][ T12] usb 1-1: Using ep0 maxpacket: 32 23:14:38 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400, 0x40) sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001400070089e29fcdc9f59862b2bd64692cbd70000000000003030006459197f87be365d5147d7d6001c88c924181a7965f9a4fbe243304540163fa488ec3f7a1"], 0x44}}, 0x0) [ 350.374158][ T12] usb 1-1: device descriptor read/all, error -71 23:14:38 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x28, 0x1a, 0x70, 0x8, 0xe9c, 0x0, 0x6de9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2a, 0x0, 0x1, 0x86, 0x81, 0xb0, 0x0, [], [{{0x9, 0x5, 0xb}}]}}]}}]}}, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="8d1e8e29", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r3, r4, 0x80000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e22, 0x4, @local, 0x5}}, 0x101, 0x400, 0x5, 0x400, 0x2}, 0x98) [ 351.054930][ T12] usb 1-1: new high-speed USB device number 4 using dummy_hcd 23:14:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[]}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xfffffffffffffee5, 0xc6342bed7966f913, 0x0, 0xfffffffffffffe75) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x1f, 0x10000) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000440), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = socket$kcm(0x2, 0x3, 0x84) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x8, {{0x2, 0x4e24, @empty}}}, 0x88) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x44) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x3) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) r8 = perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffcf2, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = dup(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r9, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0xaa0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x5, 0xfffffffe}, 0x0, 0x0, &(0x7f00000000c0)={0x1, 0x10, 0xa92, 0x9}, &(0x7f0000000100)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x8}}, 0xfffffffffffffe54) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r10}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, r8, 0x0, 0x22, &(0x7f0000000300)='ppp0{)wlan1-proccpusetlomd5sumGPL\x00', r10}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r10}, 0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 351.280281][T12274] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 351.294919][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 351.415684][ T12] usb 1-1: config 0 has an invalid interface number: 42 but max is 0 [ 351.424037][ T12] usb 1-1: config 0 has no interface number 0 [ 351.430406][ T12] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=6d.e9 [ 351.439635][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.450842][ T12] usb 1-1: config 0 descriptor?? 23:14:39 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/arp\x00') setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x0, 0x472, 0x7, 0x80}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9a, 0x2, 0xb5, 0x8, 0xf11, 0x1011, 0xce68, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf8, 0x0, 0x1, 0xbf, 0x71, 0x8, 0x0, [], [{{0x7, 0x5, 0x81, 0x2}}]}}]}}]}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 351.499060][ T12] streamzap 1-1:0.42: streamzap_probe: endpoint doesn't match input device 020b 23:14:39 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x96, 0x0, 0x7f, 0x8}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x50, 0x45, 0x20, 0x0, 0xff}, 0xcc, &(0x7f00000000c0)={0x5, 0xf, 0xcc, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "38d2fa3655d81e0f090bbe306e14d30d"}, @generic={0x94, 0x10, 0x4, "3a2ad79c95743c041fb4e1578fa1b7f11f50ed391b86570dcda9638cef0eaa83f8a6100438723a86e3e1f9058c02ad83aef61a7eab66af1794aa25617088aae8336abb6d061705dd6efa79f3bcd386adcd93cd8cbf536d48837404192bc9458fae4a49528e4ccabbd6d14e1489a2033c75e4e76a221db344a71391977f9a85bf2f15bf6fce02731bdd6ed5e9a8dff664b4"}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "b7dbc0eacb95e3d685a0fc07aae388ef"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x80, 0xc0, 0x80, 0x7}]}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x424}}, {0x61, &(0x7f0000000280)=@string={0x61, 0x3, "d0164de9cb99887c4fe09e09349eab03dc58f8653a0445d8490fd0d9e1986123c580daff8e11ca4333270d49c76388346dca90053581b01285690d06d7724055f52b30b6226170462f39ae8bd1be8783992d4cd6f38b43b5c8c97129ec2d16"}}]}) r0 = socket$inet6(0xa, 0x802, 0x73) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@flowinfo={{0x14, 0x29, 0x43}}], 0x18}, 0x0) [ 351.702597][ T12] usb 1-1: USB disconnect, device number 4 23:14:39 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000080)='vboxnet0@eth0self\')$\x00', &(0x7f00000000c0)='wlan0\x00'], &(0x7f0000000180)=[&(0x7f0000000140)='eth0C\x00'], 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000001c0)={0x80000000, 0x7}) r1 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000480)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000005c0)=0xe8) fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = geteuid() getresuid(&(0x7f0000000680)=0x0, &(0x7f00000006c0), &(0x7f0000000700)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000840)=0xe8) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0, 0x0}, &(0x7f0000000980)=0xc) r11 = getegid() getgroups(0x3, &(0x7f00000009c0)=[0xee01, 0x0, 0xee00]) fstat(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f0000000a80)=[0xee00, 0xee00, 0xee00, 0x0, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01]) getresgid(&(0x7f0000000ac0)=0x0, &(0x7f0000000b00), &(0x7f0000000b40)) fstat(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000c00)={{}, {0x1, 0x5}, [{0x2, 0x2, r1}, {0x2, 0x1, r2}, {0x2, 0x4572c8664a3e9f97, r3}, {0x2, 0xa, r4}, {0x2, 0x0, r5}, {0x2, 0x4, 0xee00}, {0x2, 0x6, r6}, {0x2, 0x4, r7}, {0x2, 0x4, r8}, {0x2, 0x2, r9}], {0x4, 0xa}, [{0x8, 0x0, r10}, {0x8, 0x0, r11}, {0x8, 0xc, r12}, {0x8, 0x1, r13}, {0x8, 0x7, r14}, {0x8, 0x1, 0xee01}, {0x8, 0x5, r15}, {0x8, 0xe, r16}], {}, {0x20, 0x4}}, 0xb4, 0x2) r17 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/sequencer\x00', 0x400000, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r17, 0x0, 0x487, &(0x7f0000000d00)={{0x32, @multicast1, 0x4e23, 0x4, 'nq\x00', 0x0, 0x4, 0x67}, {@local, 0x4e23, 0x3, 0x15, 0x1f, 0x1}}, 0x44) openat$cgroup_subtree(r0, &(0x7f0000000d80)='cgroup.subtree_control\x00', 0x2, 0x0) r18 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp\x00', 0x40, 0x0) ioctl$VIDIOC_STREAMON(r18, 0x40045612, &(0x7f0000000e00)=0x6) r19 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/autofs\x00', 0x410000, 0x0) ioctl$KDDISABIO(r19, 0x4b37) r20 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000003480)='/dev/btrfs-control\x00', 0x183000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003500)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000003600)=0xe8) sendmsg$nl_generic(r20, &(0x7f0000004980)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0xc}, 0xc, &(0x7f0000004940)={&(0x7f0000003640)={0x12f0, 0x2b, 0x10, 0x70bd2a, 0x25dfdbfe, {0xc}, [@nested={0x1298, 0x96, [@generic="796b8d9ae481c71c2d6ecceee25f16d805bde0468b596524234dfa96d9bf1448a5", @typed={0x8, 0x13, @uid=r21}, @generic="930d161b96e14529de3918a211e3d387745e7c3047ea152badd0357c2a0a94d09561fc13e54168a838e2bc5cce101919a829204dd083e47e287c74cc31a4e361ac3d641a26f46685303b226ea7f31703520c31cd2a9733df080dd72d8a4f1e336535f9448ed7c4e5e34887bde6c55bd9c63a6ab17d80d011aeaba39e40ab9840a9c626aea4ede8bbf5a12cfe0c9f19badabd05b901e91bfc88aeea8c4b5dd8849903f99c2dfa85f3f8b403d48d0423b4", @generic="36e6da6b2fd3bd6d69ebeb7f2e7486a23f24ed1d555bdbf5464f956d9450b7ebe63842fdf173ea067d75a603fc3aca476b023ccf428b03c5c9e38375946ba4861e4313ca935ace9aa0e61603dcc4a272b8c0c86b94d5ed4c435142b3cf07bb1cbb80ea4ce24d2e7b538d564bdf33c26b2d17f020d73eff851a514ad295bc86796d74d8150ad8bb820104d9dee2f8d02a7e1d6e96566ce308eaf65991aa449d62ed86e61b93876f4081cd47aafd471999dae10fa0db05570ccf57a7a08a31ce66283f2d7d6df754d51be8c1c26417cb2bd7202e7a3de72a2e5876abda6fac", @typed={0x8, 0x8c, @u32=0x3}, @typed={0x8, 0x35, @u32=0x20}, @generic="66d85f2fd00038aa28699af713a1398490bef27f7cbdd7b6c4f671e29f6554e9ad7fad643ef7d142f5", @generic="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", @generic="dc3b5097ba1bc0f68c8aca24a150c3269cca4994b7bbee01bab599cbd3f16a5ce7344afc53f1dafbb08532064ec9bd6d0cc84628eb7147e28bf08354ddfdb6a33ec9b4ab4e152e9d23429ddddf8d38a1c3917b", @generic="76273afd7130c18b3460fbad05d9ee386171619e0df2fe2b872cbd6b1cd9dd1ce75f392e4368f39597d8cffa621687e2faed21217000a3a751d189e55c76b6f76201eac74fd3e4cfbe86b5455114a28e"]}, @typed={0x8, 0x7c, @fd}, @typed={0x8, 0x70, @fd=r17}, @nested={0x20, 0x66, [@generic="fa1359ba601db494bd3fff7212351511ac8979998c6b0fae682e84"]}, @typed={0x14, 0x1d, @ipv6=@remote}]}, 0x12f0}, 0x1, 0x0, 0x0, 0x4010000}, 0x2040001) [ 351.934186][ T3691] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 352.193926][ T3691] usb 2-1: Using ep0 maxpacket: 8 [ 352.281811][T12285] IPVS: ftp: loaded support on port[0] = 21 [ 352.431082][T12285] chnl_net:caif_netlink_parms(): no params data found [ 352.443235][ T3691] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 150 [ 352.453289][ T3691] usb 2-1: config 1 interface 0 has no altsetting 0 [ 352.495815][ T12] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 352.508928][T12285] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.516276][T12285] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.525096][T12285] device bridge_slave_0 entered promiscuous mode [ 352.536534][T12285] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.543706][T12285] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.552495][T12285] device bridge_slave_1 entered promiscuous mode [ 352.590665][T12285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.604325][T12285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.637489][ T3691] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 352.646754][ T3691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.655635][ T3691] usb 2-1: Product: Ф [ 352.659807][ T3691] usb 2-1: Manufacturer: ӿ [ 352.664444][ T3691] usb 2-1: SerialNumber: ᛐ駋粈ঞ鸴Ϋ壜旸кཉ飡⍡胅ￚᆎ䏊✳䤍揇㒈쩭֐脵ኰ榅؍狗啀⯵똰愢䙰㤯议뻑莇⶙홌诳땃질⥱ⷬ [ 352.679769][T12285] team0: Port device team_slave_0 added [ 352.690178][T12285] team0: Port device team_slave_1 added [ 352.734193][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 352.758954][T12285] device hsr_slave_0 entered promiscuous mode [ 352.825858][T12285] device hsr_slave_1 entered promiscuous mode [ 352.854202][ T12] usb 1-1: config 0 has an invalid interface number: 42 but max is 0 [ 352.862401][ T12] usb 1-1: config 0 has no interface number 0 [ 352.868726][ T12] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=6d.e9 [ 352.877884][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.889833][ T12] usb 1-1: config 0 descriptor?? [ 352.938439][ T12] streamzap 1-1:0.42: streamzap_probe: endpoint doesn't match input device 020b [ 352.965927][T12285] debugfs: Directory 'hsr0' with parent '/' already present! [ 353.020223][T12285] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.027505][T12285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.035305][T12285] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.042522][T12285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.094598][ T3691] usblp: can't set desired altsetting 2 on interface 0 [ 353.118265][ T3691] usb 2-1: USB disconnect, device number 2 [ 353.176828][T12285] 8021q: adding VLAN 0 to HW filter on device bond0 23:14:41 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x28, 0x1a, 0x70, 0x8, 0xe9c, 0x0, 0x6de9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2a, 0x0, 0x1, 0x86, 0x81, 0xb0, 0x0, [], [{{0x9, 0x5, 0xb}}]}}]}}]}}, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="8d1e8e29", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r3, r4, 0x80000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e22, 0x4, @local, 0x5}}, 0x101, 0x400, 0x5, 0x400, 0x2}, 0x98) [ 353.228129][ T30] usb 1-1: USB disconnect, device number 5 [ 353.229146][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 353.252077][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.295928][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.323519][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 353.345164][T12285] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.369121][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 353.378254][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.385512][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.394884][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 353.404030][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.411186][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.459556][T12285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.470419][T12285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.517570][T12285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.533562][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 353.544359][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 353.553998][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 353.563588][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 353.583535][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 353.593179][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 353.714007][ T30] usb 1-1: new high-speed USB device number 6 using dummy_hcd 23:14:41 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x4, 0x53c4, 0x3ff}) r1 = socket$kcm(0x2, 0x3, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f00000000c0)=""/10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="230000001a0081aee4050c00000f00fe0a8bc36f16000002000000bfd77ea14af3a311", 0x23}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40043, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x44) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x1f) r6 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1203}, 0x0) recvmsg$kcm(r7, &(0x7f0000002bc0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890c, &(0x7f0000000000)) [ 353.774297][ T3691] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 353.964057][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 354.035007][ T3691] usb 2-1: Using ep0 maxpacket: 8 [ 354.104425][ T30] usb 1-1: config 0 has an invalid interface number: 42 but max is 0 [ 354.112662][ T30] usb 1-1: config 0 has no interface number 0 [ 354.118918][ T30] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=6d.e9 [ 354.128197][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.139406][ T30] usb 1-1: config 0 descriptor?? [ 354.188514][ T30] streamzap 1-1:0.42: streamzap_probe: endpoint doesn't match input device 020b [ 354.285179][ T3691] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 150 [ 354.295283][ T3691] usb 2-1: config 1 interface 0 has no altsetting 0 [ 354.401373][ T12] usb 1-1: USB disconnect, device number 6 [ 354.495103][ T3691] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 354.504414][ T3691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.512493][ T3691] usb 2-1: Product: Ф [ 354.516903][ T3691] usb 2-1: Manufacturer: ӿ [ 354.521513][ T3691] usb 2-1: SerialNumber: ᛐ駋粈ঞ鸴Ϋ壜旸кཉ飡⍡胅ￚᆎ䏊✳䤍揇㒈쩭֐脵ኰ榅؍狗啀⯵똰愢䙰㤯议뻑莇⶙홌诳땃질⥱ⷬ 23:14:42 executing program 1: syz_usb_connect(0x0, 0x26, &(0x7f0000000000)=ANY=[@ANYBLOB="1201020000000000000083006291000100010902140001000000000904000000020201000200697452ef43ef6334f7448204e660f693dcacb588014d40c7e793cd4c45a4ce7c8b4c85922b711866efe5f7c23b420e6ad5a9a0e142331859be33685f80ec3cad5edb0137bfa90a2ec8524ba10d40922a65444d8e5aa847522577435e3aa4fc07210d1b4d7a79e77e97c7c6feae8ed7f8c388bff130308f4cf6202e96739a390500ee7582887574797484b8bfe7b02e138056be8f07a12456275c98737cb4e515d59b54a3462b406e5c58da8272f2664a331be58524086f62ac4e64f129339e8389995938518442f816d4cd59905d10ce93c0b17bde0fc586790aa1e88032f7ec47f956327d5e1af9b83142807d293bd18cb9bf080514d70000000000"], 0x0) 23:14:42 executing program 2: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0xb}, 0x70) [ 354.755409][ T3691] usblp: can't set desired altsetting 2 on interface 0 [ 354.779035][ T3691] usb 2-1: USB disconnect, device number 3 23:14:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000004200fd03eff904f8ffffffffffffff0000000000"], 0x14}}, 0x0) r2 = socket(0x10, 0x2, 0x5) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x200000000000007}, 0x10) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 23:14:43 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/dev/nullb0\x00'}, {0x20, '/dev/nullb0\x00'}, {0x20, '/dev/nullb0\x00'}, {0x20, '/dev/nullb0\x00'}, {0x20, '/dev/nullb0\x00'}, {0x20, '!)selfwlan1em1eth0user,securityuser@cpuset.'}, {0x20, '/dev/nullb0\x00'}], 0xa, "04d935875c4fee1cfdda9cdd59d6c3256f3f6578a717e7bce7c5f8a910529f6f1eff446a0b6108cff978c2d235d7188c3a06531419f09793936d81ff7d72c48d04f748cd49e37f2317a50bd106d4b99aa635c583dad5087a286e1724845ab67687211ed2aff9fb2a845eec4a531f4e27417835accbf00741a1ce2b32066d5af215d9d6fba84973089f584c5c527ab90818e56ea0abf9e5b9d2aa5c2020158c5150ea3ca1be799f87782ff057d61ce41de36c2c9add872cc18061474eb57f56ec27f3a9ee8d351e415c30e03a0c"}, 0x152) getsockopt$inet_buf(r0, 0x0, 0x29, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000040)={&(0x7f00003e2000/0x3000)=nil, 0x2, 0x4, 0x80, &(0x7f000047b000/0x2000)=nil, 0x1}) write(r3, &(0x7f0000000280)="c78c1538b97504796a4486985cd2f5ddac5065d1a774dbdc1c1fc266ddaf50fdff3b226516595e3e1e95419303bac1a338893f3cd54989b81b6e65f648bbeb06c9a21f87287050a6a3b97afd4f4e8e2d3f8029fbc1a6ac68510caaf54437cb69cdf8980c06b6373728a16be29ca85eae94d72b134bb7e6a29ddfb10d1e1e43f03b935eb0248d43f4b90f82dde999d0ae6e90eeadea59e4214d", 0x99) 23:14:43 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000000)={0x0, @bt={0x7fffffff, 0x5, 0x0, 0x1, 0x7, 0x400, 0xfffffff9, 0xef, 0x7, 0x1, 0x40, 0x80, 0x401, 0x3b, 0xa, 0x163435e85665e72a}}) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000940)=0x7b) read$char_usb(r0, &(0x7f00000003c0)=""/100, 0x64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 23:14:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000000c0)) r2 = socket$kcm(0x2, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(r3, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{r4, r5/1000+10000}}, 0x5572a7f8d1758360) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000080)={0x7, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffd6e, &(0x7f0000000200)=[{&(0x7f0000000040)="2e0000001e000507ed0080647e6394f26b31d2000900120111404b480f0001000080020000000300f88000f01700", 0x2e}]}, 0x0) [ 355.155027][ T3691] usb 2-1: new high-speed USB device number 4 using dummy_hcd 23:14:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1f, 0xba86cc9b727608c8) write$P9_RSTATFS(r0, &(0x7f0000000040)={0x43, 0x9, 0x1, {0x10000, 0x9, 0x2a, 0x5, 0xf9a, 0x7, 0x6, 0x1, 0x7}}, 0xfffffffffffffead) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000540)={0x7, 0xc, [0xfffffff9, 0xfffffff9, 0x7]}) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @rand_addr=0x9}, 0x4, 0x3, 0x0, 0x4}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="c8ebeeb4b75cb7386bb08b200d220a2685e7cc2ef4e35621a913010abd", 0x1d}, {&(0x7f0000000240)="b1ba9617483601cdf217d6ba7a5b9b290f50647507837defd31a2ff7811191f5122b1c2030df07811f6b25591ba9b2076d5f630bfc645205ba7f1f372aac5d98d8ec18cde4ccc257cb3dbeb083ab8fba51cfcb77b7add29a15b9a388db782dff1d9f328336766c40de14ba8a0871129ee30335d01a9121dd8fd942a1518903f2b88e6e679604956e5f3d5941eb1a2eb9297f434ddcc359b7020f1bda7ee5c5fe46d46b4668e5d859d106723206ac19b7c117b301340b0d03fd7dca208ef19f7672dd8a4e4d27f2a86b7560381d83322bca7b7bcb33f9c198f2a3275ab7e9377b040324174a4933753b748233502b7b", 0xef}], 0x2, &(0x7f0000000380)=[{0x48, 0x325, 0x7ff, "7b1c67a4c89e6ccdf985ebe8d7af67271812cc3a8413188e15ceb214c7e331ff5c58c745ada36c644301f1179f2df786e5b3dbcc7a0c78"}, {0x68, 0x10e, 0x8, "c371da1dc75c1b4f0b90d69018cdc3cad04375dd0a713b8ce9f42ebe9e24ecdb04dd73457b20671d2b1c2eeb72c559de55877be6eb464cf22b61f840c50a7e1888ff29c290c2670429932a15c1f99410f5fd18"}, {0x10, 0x109, 0x20}, {0xa0, 0x107, 0x8001, "e1948f076d54752d869e180c2bb5f423e80393258a4f4cb00c00d800327caf605c94bef8af53ef151e774b5b28b3616221ec22ed988fb3b104952d00539765c81ab46f6b3016cf038c32f40e5ab75d118de46725b1088636ea048473f8fbe4dfc5ec1aa182b7d2a7930ab814735ecc5424b60811462f9e57d0cea05e1b2bd68b50e0c94fc748467bfc0a"}], 0x160}, 0x4008084) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r2, &(0x7f00000000c0), 0x8) 23:14:43 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @mcast2, 0x8}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) [ 355.424939][ T3691] usb 2-1: device descriptor read/64, error 18 23:14:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x1}, 0x20}}, 0x800) r1 = socket$kcm(0x2, 0x3, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) 23:14:43 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @mcast2, 0x8}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:14:43 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x70e0e6a9142aeabf, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001080)={0x0, 0x16, 0x401, 0x246, 0x1000, 0x10000, &(0x7f0000001100)="b58bd2f00b440ddfedaac38c02145a5f079d2f075ce49b5f54aa1155b8855b71e5d16800fb7f398e7d8e9caff9d9193a67e70ae91a2b4646be8e7b209e3fdd3981cff476ac704c1ff882621b42cf5801a8476e37c689fab4c6ad20cf6c6a8596d59c9ff114ab69910e30d9d60d414f0d6b8868e7e23fdf8489b0ec4071c323d554692cc8540a3ae6ece05db3211635e66735241ff327ee22ec808a65f4e33ddc528234966de20b1a6ca06e7bd78b2e44d259d32b74e47d58a3df9e387a62b28690401379a98419b3dce65b69ed1db9b3f9f27e2755df0724ebf240be47eef52b5c4f1662419ffdf16939146e2a639f27566e4702963d3ffda17f94f626a567db071590baa102eec923487d8b0d86d6ba273a7ecf7315be637422a426bc7eae6be644ac60250001218d29db2511e0368016107e61f843d7e8aa8b84a3b0509799b9cf55df7a6fcd5e9ca6af8b48a9ffa6f254d917ed80d4bd67942aa7409892d1d6d89f4eb987e8aa3b172fbea2a77de70c52c18e799e6ee3668662689b7e66352744cd19d5ca877bf5ff09afa22184b7cad0db0d2fb53889e5bb44b5f89245d948ab6e71a100ce94d6acc671f922f6caa13f0d1b29e86740d16d8f02b3c0b410a7acf06d3dca516dd519bf1598511ce478c81f75dfb9ce8b399917165472b6985fe60005339c73ea5049faa7b70ea905765a37a895b64a15ba380986c69dfe0b2a474a8ad700d1e8499f9b5bbb4361b7e63400c5e7ee3ac7bf40d66ec4abb18850200bf485dc9eb16ff859c0350b28ac012286ddb56f6cf4e07e2e8434a7e90b3a4101103a1d0282b456b44fcea777934be7b903e370beab316ff8b9585cf5b432c445e45cfa60c2672a202cbb9bf8996e05e0fc3255e63c554d6de743fd1963b87553bd0eb32deb7202355c42b5b9cd1c312ee8451b11450a7120a8ee805a0687be46887d7cd5310b48d786855193ed21b7e234fa9cb49442f67b33dc7fb8cc67413021c6927a7671aa449c4403cd20990f93d3ad1c4edb1ec25931d8bb27714ea490737f19a0bb6c964d392d8a591ecd8305f32c22be5f6bdbafef8af4eafc87abf0a58aa0d0b7b629b4e112f5e1d065fe73bf6e555875c7e8d715be6dcaf2f7f9aea94a01a117ad1aaac38b7d5eab7acf4760d38c0189a4b0b6a1ae2b3785fb1784c87cb260d62df5ec59e7d4cf40798243984d7a1ba402484ddaf436827ea8dca25b05d23ae2f3aefa05402e171defb094b8fa1a5dd5e50c51ddaa6a06dfdd1b6506fc3476746530737ec87a7e307337d74b01e59cd777f7a5e6adda4e729d7211a957137aadecb9fc6852ee264c5b60d6330952393cc635f0171f172269c6c0069cbbe246f0ac71b51eda5966c51f28cfaac03576e0fcd413df1bab38f5656629689e349844db2871fc525d73f14129b1c028b8a28576b04c46cb7263a2c93cf5a7f3fbb7950c324ca81181bf8c3b94c7198df2e1a124452c67a1c705887c566bb089c0c22e8e87fe6f67da5142ba176e8d63188ddab1c531fe364216be917ad47bfd477752d39f576daf5830addf33c0197fc6c81b0f377cb3f7e5e0f988c40d1b991e6264439da3081e55ed69b2a8a189493f99f923c91dbeb0f1b6673dfaa5199599cccdcd3ecd87e8d316070164f91a75692857f294b5a726b286b971754711690367502e2b46738d246d9a5a5675f41916beac1ce47254c547a25910a045322e6915a167e762abb217b1916fa6bc39f1a21f9c3d1959f91bf4bd1f3b72e5dd5ded21e8e232315594d5785427934e6f84b079a2b6fcd0607dac64fab088b22f3cfdeaadce4e37d1975f60855aac71ef43a890fa8b88652928ca4e26ce6cb68eac0868534c69e2716b6fe79e98102a18ccd89ce0f1e8b8d62b8e4ca0e74b8aeea603d3f971fffe5e889060e442976e019ebba6e22d828ee2629a55b859d0d84aba4f7d7e45c3188ea8d8b545f7fb837b70f2932a4d1bb36275e847e5636152eb8beb574714cd8da83c0f9d3136855b79a69623717d84df7cb22058121e852c75cdd63f554ddfee9c7cf5f3003cb50e958c84a86a997b053aaa10a21576fcb27ac754f9b15b17eab282dc65920aa559404c8c3efaaeb9c40d15b9f78fadd4acb96d671685ccb09821739a24305612bee6c2fac498df8718de2fe24816c6383ca682ff5d665bb264224ea4f8bf5a86bcbb81763ab0e3be6656e9bac8264660482dd28a983c6b40a640828f906d4f9d1776c322e865276049fe1ca3644c05c279c84c651c780863e50b349e808eca990bb3a748894aaabd45c9d1ec322a20373e61fc5650b3147a2b9f632127914d20ea663d9bf1a2c4712bba56ad61329c63ab0c3c332122b24b8a1a3dc72b02fcd1eeb50319c6080c46ccc3eb52cd2fab0b0058c01de9f710d5f28fd4e3ce3845de9fab3c95f14f8dc992e5825cee7bc449d0a7b4efe9eb073c832390977a55be1786fbba614e1c7b78d69ba43944a28cafbeeed919590c387b40ade02cc0f8f4a6ef222295bf09198158bfd4fa5496a69e2427ea2a4af2c325fba6029d7da26d3b2d56bc41ac7a4bce072a6af1fd09609fb9ea249617a297466a196e9a4b37cd029939cff126d656c539c23440aecbdf357b7464e40aca9758b5ddd394f78be05331fe79c607d274d9c362b7989831167cc848b191f65798e18edd2832728dd7912682098c50dc3b7aa3546ab148f5fd04ae966ea5ee3e0ba6e296293d4cfa42c67b78e4d914120b6b22b6a98967124d87bf95b8d71337080aa555534c360fc6190c9f1467ff167a9eb7542a2a9c27091d2959fbb9143613a5583abe37a2e67647c54199481a3606ba9ff90cd77cddb7100311e611a862e9082112aa416a7a27e7296485fd8ad79017f7f2cd393ede7e201cbdf862eb0ce8081ed5b4c7fa904bb433b1ab9395e36ec960a5b6a5b3f39e1fb5f4aab5f2079135818a07cf8307aebae006776390c55b5c5380d2652af90c7abc07a1e677f287efe6ad5c597005de9d1b3e6e287de952af36e5c01cabbdc31cf9b4fdd62c6385d9fc1207af58f3b7d2374abeeb42da16fe377797f159b8ed1fbff90ca2c9bc1ce1ba26e3fa1f9793157b71b9570a159e54a5ff398e8a51bcbc8fc7de01511d75f07657542a1731ac593a66dd4121bdf44dd4774286775746057b08f5641a1491a63e1b7651bbe947f48466f4ed5cd8a83e60aee81f6a3e4922540274bb6acc8291d5dcc137da79aea5c5072bac1ab5a9b6cb0c6578701686283fea816ef49aad82a7ccd69b7283bd1dcc5852eab278d67aeea031a342beda1c5ce8a0957e9c20f1ecf03d31fb710b251a6f55f8d26e8068d125c34b720fb76da9b91fd170c9419b0933ac925e1e9ffc9dde9c60ef9074e0aebaa7b1ef17a402c50669b91b400f4e5539833dbe180db773b6f5aa5077318d04670404b9b99370bd5ce1d68ed9208017a612e32926bb87588feb3279208156a3ef6691c6ffcc0e89df56c321a26e5432799431196ba5eeba088de5d4c6f739532ef0ed5b2dae74a1ebf8d499ba9e832bfda9b4134ee96d8785954541568e35faa8cdbe47b9eef68af30ce32b687e8bd589ec351aac05c59b38db88cd7538a5487f65294a27006e3a7ede3ee422c04e0b1f589c87373092c8535281856e3964d7d1f672c37ba1e677c8116720c51e2eb5acd8d489b906a05df630bacb8557bfebf9c8ba0eb2820e360181fe5bbc76a17a7c672ec69af7e0d12fb6a9a800e1388ed66deb71dc3fbbb99541886dd89992b56281a2423bcbd8b37199fe9d890a6ff40cdf36305d37afe51d6ce8b1e2adb2170b36870c6774737634c0719ce9357301e90b3ddc36a1778ffa756224010f68030048d797a49de84df808d3ad7451a53af3953fefdd889fa3b7deba4859a0f34b5add49e01300e6bf60d73aaeafb8d6fbc2ee026d016da86693285e015e37485bdda3ed55dace6968444a17f8cabd248a0f177787d669948c79392da54366aefc9da97d5bf6803ad518c000fbd97094c54da5cff4ce3dab9abdb86d95171477804d22b25c0a6f264d6bb66d3fc9047edc9dcc4213d3dc5aa2d1b19b864e172d9cac30a233bd58481562ae9bb3047242aee0f4d8444cc236cb539dab44558388046472df6f2efa0c130c7ff30143538733e706c4601c5728c05406189abd7bf760313ddaa83c82521e3b163f57324a7ed8db57a997c3d41d2d9606303bdd853fa7ad7c6a5b7c323e562b5b65f399e1be23abb138ee3ba662eeb6b22314bcc2a7debd315457e9cefb5699622f317ae6a55a4f5e97027384be43a0366514cf30d07c0ea518292889c63752c5a27e83b4db38c26f69ec21e95849be076bb9671eef9d1e4131e22cc5239c1a5f0df49c7cb9dcec8a05ab096a2226ceed59ba995c9b926e01b91ddd3cc4312f03f9c3234c0f204e0b6a6b4a01fa19594ee1d6be55d908c8d2e6ef189877927d5a7e11bff35fac01d67aca332c93c6f4a092be74527d61077d7c1075de8b8a1dd5231a7dba5a59fad7355b101571d52573a0b91f7108340bbc8f7d67bcb41ef10ed29ef27d67f028ec4c8c2a4ab953a03a72fbcdd4c5fa40091d438ea4a64ce440ae311c1513161599ed479b38ebd498b4c83d8c2c9721a54df374ba135ad388b44fad1e2cb7b4bdf362b18f98b419c2811312df2dfeb091d76afe77e6fbf30312d34f4a4232ba884b824ecba018c0adb4eaa38eebb8db8199060d890a36515192b5e00b0d59e3325e300f6acb68db7bd4a8679490c813ba356b18abef2a82fe089b097370585e81716ebb8b86a358598d0557fa6ca7ecc43b61443ab4693e637147ac93e2e0e91f3f59bd58ad25f1ccab00c1776deffc567f31704b6e02ab86f59b6c2f0817ca07d7714b4d217948428a6b3a2ff53ba87cac3340cb3663dd8b93b269bd9e4ea6014dcf635ac15f86cf8c9520b51f191421cb1f0ae573601b023bed766d0f82a6ef184e6a06c56ffaea8f8404b5a41a7888f4081c41a74cf8538cb50c90145f7f2769ae10cbe2d4aed9a14f0d29168ce9f2989b9e34e1b7ef2f01d8465c5d06d9073a6f2ed3941491f9344db0d489eadf36f2a7fe800af7441b12a784854d0e648cb98842b4ebf8ec0375a771a2b2ec161486b519dd6521013dab06224e3aea17725138df9c6a32cab9631c6a3a43ec6604999a974451bef51dfb0c880cd5a46a5b2d27822d92fd2746cf2aafca837ffe2a512286827b493f50da9f9d3e314adc875b2a3bdb6d95d099e0af35c8cb9a86ccc1f44f871152a84b3c4d8f863e1689b3e6187e41c64fbd2c6d6971bf97a61779e83de8fcd254dde04e9d541414cc1bea9b955336783955bc95fa62c9ea7189236b28c34891508cd00da902bf10fd144fbe501832b37d716cf345d57e99496b3bb7e716cd8000c5bcac3f418b9006b4d53e25c6e8ee35572aa1fda61a225846e3257efed27ae1f8d1a86669c6e89fff78233942376cde8ff8e45034b01d6eb3b2802e43560fbf81a15323c69d5a66aa0a773845b1927ee48351bde5504cea7cefdc50afc6975d36dc8db367ad6cfe74b186e766385c126ba9089f9a73c4b12604623bb08c64e34ebafbaf36bc2466b25d5a608c52ea56c514f942342d06440511f273d62a06f093d834e922a520291cf73b7c80d52b69ac36519448fb2e2adac5142b5232aa04b32e7419fd539f80c657d3a5959521c32188e01015c20311229a1c0ce0c23824c04a5801296be1b5786095b776e4c1da92163b48d9f8fbb87ac182fe1b4f959108051f5d0273cc3f4ab90b1b41d7"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x101000, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x0, 0x0, @pic={0x9, 0x1, 0x8, 0xfc, 0x50, 0xa4, 0x4, 0x3, 0x0, 0x3f, 0xeb, 0x9, 0x1, 0x8, 0x1, 0x2}}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x206001, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f00000000c0)={0x10, 0xfffffffffffffff5, 0x8}, 0x10) r3 = socket$inet(0x2, 0x3, 0x2000000002) setsockopt$inet_int(r3, 0x1f00000000000000, 0x400000000000d4, &(0x7f0000000000)=0x1, 0x4) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f00000010c0)) 23:14:43 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @mcast2, 0x8}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) [ 355.814449][ T3691] usb 2-1: device descriptor read/64, error 18 [ 356.084070][ T3691] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 356.353975][ T3691] usb 2-1: device descriptor read/64, error 18 [ 356.753994][ T3691] usb 2-1: device descriptor read/64, error 18 [ 356.874334][ T3691] usb usb2-port1: attempt power cycle [ 357.594137][ T3691] usb 2-1: new high-speed USB device number 6 using dummy_hcd 23:14:45 executing program 0: unshare(0x2060000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00\x97\x93!l{\xb9\x80\x16\x97\xb8\x86\xae@\xd40x0, 0x6b, "a8af78426eca99655971af45cfabed8387afb84fb496929343b622888fe00591950158f7a0e539d3d0e677f8cfeb0a80aceb0bbb61dd7e18ddeb48c338da83ea4092f1552beaa55b32adea9cd4ced870a5a7d72aed6d7e30a7536e88db1ad29fe93e5d9a348679169508b0"}, &(0x7f0000000180)=0x73) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000001c0)={r2, 0x1, "da"}, &(0x7f0000000200)=0x9) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x14) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xa0b}}}, 0x84) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x101400, 0x0) ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f00000003c0)) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000580)={0x1, 0xa361cb711272924b, 0x1000, 0x90, &(0x7f0000000400)="6ab608c2b719e462511afca1d17948d734003e43ac21f1506133e7ee5c18081c54dc34719007085a14803930574c5b7b410084dd7c32101dced948d90035c046701d73170595cecffa048d600e874e839fe4e0139e698a38c5fa6f665097876c2ab017fab59411b6ef1e7a43cef92e98207ffad7bf2a62c125be93577d719b98f9a5975bc35a928800f2f8532c7d8002", 0xb3, 0x0, &(0x7f00000004c0)="bbf2c00c22012513a1f92c1de759b338b3060a0ef3f160f3d402a9fa07c48ae51e7b513441e70f945fb063146cff422ccf5082eb3c6f25ce2b60f7f4fb6691b126772f0514812d13ad71f987c2af2b072da212ee605bf367281b1b07a87acfedb9e8ec22d43975eb44654397e9ff44e9a337b2e43a865e507fbe16409300b296651d13690ff62cbccfe598f0f319e828903d45e5a4b0a42144587d079406e7359cd6fc93bed523e5be005b641d27b117cf4916"}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000600)='/dev/hwrng\x00', 0x420400, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000640)=@assoc_value={0x0}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000006c0)={r6, 0x6}, &(0x7f0000000700)=0x8) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000740)='/dev/null\x00', 0x84000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000780)={0x0, 0x101}, &(0x7f00000007c0)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000800)={r8, 0x3}, 0x8) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000840)='/proc/self/net/pfkey\x00', 0x8000, 0x0) accept(r7, &(0x7f0000000880)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000900)=0x80) bind$packet(r9, &(0x7f0000000940)={0x11, 0x7, r10, 0x1, 0x7, 0x6, @random="cfcedcc044ac"}, 0x14) r11 = syz_open_dev$vcsa(&(0x7f0000000980)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x488000) ioctl$EVIOCSABS2F(r11, 0x401845ef, &(0x7f00000009c0)={0x10000, 0x62, 0x7, 0x3, 0xeaa3, 0x4}) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/hwrng\x00', 0x9bcd869e58916b57, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r12, 0x800443d3, &(0x7f0000000a40)={{0x0, 0x0, 0xf6, 0x7f, 0x3, 0x1}, 0x9, 0x5, 0x4}) getsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000a80)=""/4096, &(0x7f0000001a80)=0x1000) socket$nl_route(0x10, 0x3, 0x0) r13 = syz_open_dev$mouse(&(0x7f0000001ac0)='/dev/input/mouse#\x00', 0x7ff, 0x16000) ioctl$KIOCSOUND(r13, 0x4b2f, 0x1) 23:14:45 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x1ad, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0xfffffff8, @local, 0x7}}, 0x47f1, 0x401}, &(0x7f0000000180)=0x90) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x22, {0x22, 0x0, "5cdba0a7b4fb7dc385924188655e925daab1f564b9605d68bdf1cbd052f37fec"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 357.826387][T12365] IPVS: ftp: loaded support on port[0] = 21 23:14:46 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @mcast2, 0x8}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:14:46 executing program 0: unshare(0x2060000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00\x97\x93!l{\xb9\x80\x16\x97\xb8\x86\xae@\xd40xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0xc000000, 0x0, 0x3f00000000000000]}}, {0x2, 0x0, 0x0, @local}, r4}}, 0x48) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}, r4}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{0x0, 0x0, [0x228c, 0x8, 0x1, 0x800, 0x2, 0x29, 0xffffffff, 0x9, 0x0, 0x78, 0x7, 0x4, 0x1, 0x8, 0xf5a4, 0xffffd249]}, {0x3, 0x0, [0x2, 0x7fff, 0x3ff, 0x20, 0xef, 0x9, 0x4, 0x3, 0x0, 0x3, 0xb26, 0x9, 0xffff, 0x200, 0x25, 0x3]}, {0x4, 0x0, [0x400, 0x4c0ad615, 0x8000, 0x3, 0xd, 0x9, 0x6e41, 0x9, 0x0, 0x3f, 0x9, 0xfffffff7, 0x7, 0xfff, 0x9, 0xfffffff7]}, {0x0, 0x0, [0x7, 0x6, 0x4, 0x6, 0x8, 0x7ff, 0xb0, 0x6, 0x8, 0x3b, 0xce, 0x2, 0x3, 0x2fc7, 0xffff, 0x8]}, {0x1a, 0x0, [0x9, 0x4, 0x80, 0x454, 0x1000, 0x20, 0x50, 0x1f, 0x1, 0x44, 0x5, 0x8, 0x5, 0x9, 0x9, 0x400]}, {0xdbd1a2c73a9e998f, 0x0, [0x9, 0xff, 0x6, 0x7ff, 0x7fff, 0x80000001, 0x3, 0x2, 0x81, 0x0, 0xfffffff9, 0x1, 0x90f, 0x5, 0x3, 0x7]}], r4, 0x1, 0x1, 0x1b0}}, 0x20) [ 358.857550][ T3691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.864681][T12387] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.881659][T12387] device bridge_slave_1 entered promiscuous mode 23:14:46 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @mcast2, 0x8}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) [ 359.001985][ T3691] usb 2-1: config 0 descriptor?? [ 359.041044][T12387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 23:14:47 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @mcast2, 0x8}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4d) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) [ 359.087589][T12387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.180592][T12387] team0: Port device team_slave_0 added [ 359.219478][T12387] team0: Port device team_slave_1 added [ 359.328678][T12387] device hsr_slave_0 entered promiscuous mode [ 359.366313][T12387] device hsr_slave_1 entered promiscuous mode [ 359.494060][T12387] debugfs: Directory 'hsr0' with parent '/' already present! [ 359.527428][T12387] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.534706][T12387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.542435][T12387] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.549758][T12387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.567064][ T3691] hid-picolcd 0003:04D8:C002.0001: unknown main item tag 0x2 [ 359.574733][ T3691] hid-picolcd 0003:04D8:C002.0001: unknown main item tag 0x4 [ 359.644923][ T3691] hid-picolcd 0003:04D8:C002.0001: No report with id 0x11 found [ 359.686695][T12387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.697922][ T2870] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.708097][ T2870] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.725429][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 359.756569][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 359.765512][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 359.788075][T12387] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.802425][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 359.812662][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 359.821698][ T2870] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.828907][ T2870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.881143][T12387] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 359.892089][T12387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 359.908836][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 359.918632][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 359.927741][ T2870] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.934958][ T2870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.943464][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 359.953673][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 359.963828][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 359.973635][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 359.983272][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 359.993130][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 360.002820][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 360.012006][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 360.021651][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 360.030824][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 360.046903][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 360.055878][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 360.087889][T12387] 8021q: adding VLAN 0 to HW filter on device batadv0 23:14:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000400)=""/209) 23:14:48 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x1ad, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0xfffffff8, @local, 0x7}}, 0x47f1, 0x401}, &(0x7f0000000180)=0x90) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x22, {0x22, 0x0, "5cdba0a7b4fb7dc385924188655e925daab1f564b9605d68bdf1cbd052f37fec"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 23:14:48 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x84) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = socket$kcm(0x2, 0x3, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x44) r5 = openat$cgroup_ro(r4, &(0x7f0000003140)='memory.swap.current\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x44) accept$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001440)=0x14) r7 = socket$kcm(0x2, 0x3, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x44) lsetxattr$trusted_overlay_redirect(&(0x7f0000003180)='./file0\x00', &(0x7f00000031c0)='trusted.overlay.redirect\x00', &(0x7f0000003200)='./file0\x00', 0x8, 0x3) r9 = socket$kcm(0x2, 0x3, 0x84) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f00000002c0)=r10, 0x44) accept$packet(r10, &(0x7f0000002e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002ec0)=0xfffffffffffffef8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) getsockopt$sock_int(r12, 0x1, 0x5, &(0x7f00000030c0), &(0x7f0000003100)=0x4) sendmmsg$inet(r1, &(0x7f0000003000)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="01d13455644aeaa6f647345242a3e514b3cac4c90fbadd79437f1d0baef306527b9b4314255fc532d7bb2fa966a13abf3de29d72e7d76b196fce586d6da495166dfcc833dc3812008e3527736335e84bd8016c20b047f19b1eb0e7eee3c159132c1c43cb45c37d8343abf09eddae5a64485fae32182c391c287eef5695a108ecead23fac11959f7c6ccf292579a16ba917c1f3ea92f03dc2be4b8172965cfc7efb1766d4971ed94502db0b30b8691d17f96820abe0c72a1742542e5703dbe278e2eaa5648946a81cdb", 0xc9}, {&(0x7f0000000300)="2af7ee14a08ff5c22f8758c2df4be3f13ccee188f229b4ea25e69f96764e88f1ea66062c595258e90218de13e2073749583f4fb0b208cb62578c17a879cd8d6f3176d3f4f037510af11b115436e5a6242adaad2751fb6f8148f9ee8e42c0d8c573d7d3ee093e44cf27ec1798f529321c078eac110f79db14e148bbee35dbb50c7ed5715c58686842e540a04db0", 0x8d}, {&(0x7f0000000440)="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", 0x1000}], 0x3, &(0x7f0000001480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast2, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3b89}}, @ip_retopts={{0x80, 0x0, 0x7, {[@cipso={0x86, 0x1a, 0x5, [{0x5, 0x9, "b2965a7e901e92"}, {0x5, 0xb, "f2d53ceb4b5ac887eb"}]}, @rr={0x7, 0x17, 0x5, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty, @rand_addr=0x187]}, @cipso={0x86, 0x11, 0x7, [{0x7, 0xb, "7ea27ebcd0a77e3875"}]}, @timestamp={0x44, 0x18, 0x18, 0x0, 0x1, [{[], 0x9}, {[@dev={0xac, 0x14, 0x14, 0x1c}], 0x3f}, {[], 0x6}, {[], 0x1}]}, @rr={0x7, 0x13, 0x8, [@rand_addr=0x3, @empty, @rand_addr=0xfbc, @local]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0xe8}}, {{&(0x7f0000001580)={0x2, 0x4e21, @rand_addr=0x80}, 0x10, &(0x7f0000001b00)=[{&(0x7f00000015c0)="2cd908d2dbf7928b855baa450e5d09820625b8150825d23bd16cfce0099dfe548a86f7d1531ce8d8c2415dce9302995542c10b82db5982bf7870a62b90f33001f27328a00c5f9de1a79e626084cde650a21dd03fcdbe1ff71635636fe8e59736d1d07aabcf1680f0d2819e7ffc", 0x6d}, {&(0x7f0000001640)="afd435b55d4da798c3398d363e8a1a2d462f48805e77d0558a089a0e240926f7e2fcad2bd1a491a82a7f3814711fbdbbcfdb2e8322b07212fee42628808e95bc494ee566337580062056b08415214b3fa80e5c97a6b02e01dbc0dd4a11c8984b61ecd41f75ba3401502ef57db668b1a686b9fcb3dae79ef0b823f0d7bb0fc55b4202d0ec32e982077971ba88b5ef0b7ece00314260c93781ed42ddfe0ab982f542", 0xa1}, {&(0x7f0000001700)="a7956b5c16ae0cd395c6d509422c814a4edf474a4b3dcdc46f69b7b6391ac1e0736f73bb22991e5db0990a1144293c42d348b990e93b4d99cb98710fb401a7382ffe4e449aa72acd9e6016f4390b9f87fad537c06ec747", 0x57}, {&(0x7f0000001780)="3e04c8e7953f80cde69bf9870a6c04f14de7143b9d407adca3b5d5c77f7bf78cb227ff3938a6556613e230a0b5a3a3fdadf4aab7996bf95278da3c3a2fd49bd261ab2c2e8e3b7e9d530754ced5d2da17e9134c67e0887748317a742f4985c1006da6072ffac64a0cdc972c03d6e2b76f2e23bd7c7edb50d8c87e9ee95384982dd7df3357b3af721ed170653dd56e7a39cb9602c03b45a8e0deb5f102f3e07ee7c2cc4d76d3840a62dd775318359dc024778f4f364e7335b5d4d9f58d5696fc0fe70869697317d59052eca7dded", 0xcd}, {&(0x7f0000001880)="ab38928250fbc60f80c4287e02b336b58d40da00bb3d0d098082d589d46260ae069ee8bdd38230c289d39f44ed382ba8e31d1af121a7adcd11092d6ba750e3c722c98bc0b9e85c68a6a9dc56569d6f9d478fa820bd789afc9c1b257cf2106e278da59a27d94405f347ba8193003a70894e50127af7662a184a8e0f9faa18ba3309337ba7d95e52ff8e2688f24ed1a131b998e8821d3ed51ee0f4b302658810db2eb4d650b0583d1a6266a0c612fbecdd6610206ba85080e181f3fdd7fdc4a455e8a6ba62dad55fe430d0548c6656fd10f614e4e7276ebb28e7fe0ca2860902ca276bdba90e7a353864b93831634665596fd87c23", 0xf4}, {&(0x7f0000001980)="69b72408ea0a0cfeaeb66ec2651c4dff74810a0f98b5a8f01f4fed3b626f82e54816f936e307b8a341345c410b", 0x2d}, {&(0x7f00000019c0)="448a6ec5b387", 0x6}, {&(0x7f0000001a00)="a4482a6d157a189b1ea081ab1882ff01b126499b3b6f86f4175c46fa2f17b99b7d5be44ca02c58cf24c843fbb306377aaf8bb9e56290c1538d85577316bea8df3742a6426009425337e262ac619f9a877e875cb102f13c62d9b95656e672e6f938d21a10e75a2c399a87ad935e53c3ee18cdd386c2971a79d3b6bc327d5c15c2022ded0ef706bf50fd92065669b5f99ad111c8bad7a1a3f8bbbd2e2dac9997060015d4499d5973b2eb849e295e416de623427cc4709eb6eda25c2d5627470a6f712f9bd56f588611d090bd0f131ab6937d2d54fbffa69bf6e7560d5b6fa239d58de9c5", 0xe3}], 0x8}}, {{&(0x7f0000001b80)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002e40)=[{&(0x7f0000001bc0)="86a0660e81d314904c7ee4bcde87fa5048039273f37e78e04a30ec75142dd8411592e7091b8fbdb311ffd9e1bf3a33dc890b65d30fde3448663bd8944c4746aeeabcc5ba8a8c7522709a42d6630f2bd5776caf7e1f0079c591cbcc27d72650e58c487da598787d59afbf4e6b0624fda7ca3908c2c392d4f843c2d2e377de0330cef10a7dc1ed91ff5c94b695f933ae42eb84a2679d55c753fdf9060b7e260790da3f47eae38bbf2101baee87ca5dd84566cda0397bbcaea7ef5901d87477edfbff72277e0cc49a0345bd97e2555e93de37233823477f4b2ead73e8777157cf0afff81ca49e98fd4c7f881de9e52d0b1f14f8227c484ba04b74739ca13873ae3b0440d8d19939d4e563404bc20baa8233c651c7d2ea2ae18fc585e39df40fea41b5a2736aef16d53c0db3e7107dff37e440c34855cc81ac0ab28581e3f058f0dbcda85b520f714db72daf52d2cb304ffe522bf022fb96ce9129b525b09b16960af05a11f7a88d15f4dd2cea6da9823fd2e48dfaa3ef34b4ede0a4d7aab10153156165b664a60f33005113e79b267291096848a09637a65022c0b0223cec6c496cebcbbce50ee0b6d0965131e86e2a87a72b62bdce47958eb15d6393a7dd21434b2c5f0573548ca409d329f4898607d640bfed8af4529287311dbe914e9e88dbf0f3fa256511567652edfe707b7ec8c1850399c92e6c586f9eef7744da1813daa5b61bf9375191e9f9be275f214062d1efa9ea641a4e5ea9739c50e2a7f061d2ca3d36c2f66dbf9a3915d756735a042305f7491fa0bfea157cd8049b3d1ed96eda1e1651311b41963b76846a682cd65f20be895dad008619651bf1ad5bcdf5f4d69eb93a72f510261a100d7104379566df0e83cd0476216d5f24caa2fe9a81c45565cb971633ace7c6edb98596e5e4dddc20c639c642db57993c29a833e36d217bc52e032b22acc9c1bd0286854b1742c0d99a49dbe588a5479c6378080fbe0f14efa9075646c4ee3d70abce9acbdbc90d843422c8062884e8cca60c6b678938a432ca6b4be2e391e3c6d4548a814ccac7759662c3bad8a9734cf30aefa285589cc44a84adb92c797159ddfe0e37f0594072575574f40039d853bf00d4982e5ed162d06970dfe862ef3034323805844009ed755a0976b9ee48acfe4ec8cb2a0e22fd13edbd39bc369504f5ed816b2af883d34193997dbc8c0baf1325a2dbdb116360965bf7e6d46b7da566b4b8065028bb27668b249dd69feca0f3ab661322d71c8181edbd1b4b5d7b120cda20fdd2660518ad216397dfb69a4c6e9d76eed5c0aa857c184837909285488ffc7364326b74a7b650ffc1f13ef276e2b2229ce222331aea91f268fa7c837486d0228b4f91f4a2e94df68afbb2cee14856809b1ff02a723b99c8d83929d5fbb34132def993a1edd260a3f133065294e81040f7cab9b692317c70a370a940c47ddc781a292d84fe8219cb4248ddd6d4ec85dc307b3b85a077cba90099090d02474986dc6e6f1dbeecc5bc0367197faec182d0c0e175330313db6b5fed0bdb461d7acd908daf12bcc6415a15a85b260c48cf069545cfaf9ecc79e42b66b64a330f356605accbbb4ec5b1a956904808cd870ea51ad81a66f1e95df9e43710b5c3f667066a3627ce65a122ada731c7367fae49f9f96cad851b69df3ca52e1b2d1eb6d6c94c4ef67f34e22918ce51f5ae77f6eac96858090a2ee228450fe80b4f00e8e7eab803c131b6e8ef0814d659a14d16856aa350a4f6bf3aff80a372c2a08867df3b6479fc11f0ab01dca330d265ffa4e625a0ff7558cff0fe834fbbf4c3541b6d5c58398b9350dc0d61f848b845a33d86eb36293e1c2d06d9609031854e82a38751b8f989c0bac340d1d28581d5b40eb2b00f1413a1e72a37a7a0954adf53024c031d8ba9eaca65d69544096057cf500c1c53e929735d4074fb868e19b5040b5707f6ef864107f3416de5653f090a33e3ce94637d2d8cb8359191b880793c00bf142a5ae108dc4bf3d3b2d280bdb312be3330795924e2535e5b6adec6cc2b6d30b523f2ef80c6af035cf8323acb414459b1a55eb2571590da10ed3ace9b142caef01a91133070b907c51cafd5ab42ab4efb0c8f1f43b2a4a50a5372526cad2836823d0a55bda3e09d97605a0c0e0f25ddcd112523818e09f4396c36b51bf5fb174b580b741d0e1fefbf748ead6aa6073d0a3f7b6ca67ee2cf765c75cc2ccc745f113bc71de1067afd635b43ff6797d8232270a923fcfc548b180afb5b7c88f64190aaa2b5017448cd29daa6e7dfc8644343cdd7413c1b47d67906ed4a25d4abc92646806d28f6760cb6446465eea18ae88883327527b9d29d4206ee72415053b9bf3d03813c19517439f8ab382e3bbed180f59f8ee51bb7b653c0bdaec7da2de04fc0e08c15eb24ad7404c605d315fb73c5faf3a18e4d3f932ec3ae7d6dda76aa5e5e7019001cc73931a136439b2223d1c8c934f8041aceb2ecfc2d6498a2aab2b932345d85e4d5514d3b1ba8d11bf72130efea8f7126831d43c67c872ac5e5ef2a1c07a45863b722c38a62e42c11dfc580a36116a2ff3764ffa780ddad528df1f50d01ac238e6deae44cb616194251df0361dfbddd1b06fba0d61de387cf7614889b6cbb14a8fe302f48dd615b206f1be1901ffb84f272cc1de4ce693bfa36c19b7d596b911928a8cfc2be32ee635a97ff50849d9a2ecfd79de7c9b3e79129dba0810cf32feafaa36fc787c4264f0204c8d451a4686651f814ce438b8c3187c1ee0b9f89584bf14dfa5d21147d18e74a3338e953e9565f2034031e7b0adf6c036ab58134a9828eac799302b787a0be453ec1dc9ea5b95259cbe921af7f9ce237fb23ab3cd4500da164bf7dea18ab60dde3328b593fd94331bc2c02e7d33f4bac4522de6b55202ae016750047c86e1e979488ce5ebae83ec70ffe59fdf958c0d0df12b791875b06fc81ae7c2c2059a188fe852d445fc834783e569e23c44179d41c0db79d61bdb89d5cfae22cf3adac4425aebfed491d9c379d66fef8565738ba73ec043c0aa4e23141ac9239104237400016eaffea74e89f05448eebfe62c26cd2c76e65a3152b3333e0e7314ac0b54b4b4aa508ef837512ae6b23044c1c9093af6b895218b1347bd3bbb52253f174cb8fc64cdba5a0216b54e8a747e928e10e90b3a5114a6063166499680d1d94c8f4869c2aa8ee7b1fd0b367064408db597e82424218b7f72d8b51762250eb3e6d622d9ab190588c076162226d44c5468baf9dc3bea1446487b8358231d5fcceb211a738c46db894b459a3c4f26d223f197cf605a2ce7b82226f684641f5201c2a8999140abcac550ef3f9ae1215ceca0c5aba32e3b229341981b459fe703ebb63aac3079c29c4e4dbfc64d8820cf1d89cd7602d52185100405fc2004a2b0a361db85ed403a63c4108e1d9c189408c9d342d4d02c20d8e575eccebbb5ba72e5041c5ceb2844b80aa10cc0951c46f00c0d53ee7b805b9b1edb4a55b8bcd7e25bc377224ce660e448b7d5160a225f01c89b21049e832def4ce48f02d131a95aa43c0e15f14503f3f1a3800fe2d4c509e466f6876938f5a92e81f8f983b2c2d940be02252d3e6ab7f09ef425a9501ae8173005c6ecc230adc49d902be8336ea5cad90bfe88617a8f8a484bbbb54fd3bb569d21cc6286d6def46412eeca67c7a0ee085573ed2a34788cddbed5989f6c191035425ac4451de0cb9f673b276992bc12fa7ef8d468b238c6c65d6adb641d2af8a67a9cca272f14aeec4f17164204b7b1070305f2e8b0d018fc7505d1cfe4483cb06fcca16668a02433d8a8f56eea9992e2632b27a4621d5c2d09d238adf1fe9a7245ed3864fe60939486dc7eb7db71cad04faeca7a54ed74d25510b5a8423d65e77ab5f280b70b226bdbffdf2dc353354c9b32633e81c52dd6d4e35bbfe19f86cb093a8cd7af4546b4d6be1e65f96115492bbb31b9c7fde08fbcdfbbb407849259e8f8ddc26ff5db384c3fd0fb7559ff63e8f23baa7c9aafeb42dea65ca1f133dbc20728d9861095bbbe85524611ad07d5e58b9f1d15be80f17f595f3eb8555685e079a81eb5b3fb5592d637bdae1fffe6681c05ed5a96a141b59951fba5f714ddf44b24ce7d08713259b58df8c3ea1629c0fe1900f2a86ff4768b664d2428a948d663601fd068f23ff30969f111e61ae55a011d5d212df11363638a26cbd74a688e164962d6f56ef4384f621fb1edb4c51e8656faf13cae436ac4549f86f90b98464273fc0f74f17ade85256858e5af316d57f62cf47b1bb079680873268d2678217b5e9417673b1aa590a91622c693a327e452d18fb9e653857bca6555f56e6927a73b8d54d6c92ae5758c83a65358197c25ef4eb6a8adb05e5652200d4df5206887855989b97f3eee24104fb7463d31e1b35c2ccd87b415cb916a17500603fe6d4ec484b6344079faf30c1207f90368ab0db802d6a642ef8b3c265295c54ff5bd44ee468b1f34416d9dccc0a160c010cc7cbc9f4e0750bcfe1ef561b41a8737e63374ffeff71c72d340f33dee0230feccc39d94985d46a1059ba8c60a222b5d402e562b4dfccd685e8acd2cd2eec1b951627f0b9badcbbc5f13a38f4aba843f51e8ad761fa028fd5a7106694747f01e9e393b34cc18716680b04509a095a61f0e1ebe5ecd18aef4597ed6e31cc96f9993592fc0b1638444ecde3e9b14bd48e98060595132135e6d2ff433a5d720c5be17f221907ac9b92e4b9b1dcec10c3ac2cf6eb69659d91479a03d742583429a8062dbb6071eb780441249d3f1ef3e11467c6e8afb72144c9ac3e9f75388754f3fb99f088c7296c3fd59a6a713a69a42ec5188d01808b1ee9f2f6c37abbc952938f7e8ff6ad12afa872003ea7ec1d54c8217f55642afe3c30f424065070ebbe06cc375408aae70e88bdc327fab834498117864d2434883b2d9774d4946e5fa188379460ba0c1ff3e72f1b0767313e7ccc6047620fc040cd02561ed0c676950d4552d7af9a02e7f949f88b0be2a91f090c6820e590badce58647feaa156ffbb7af0101b7bef8cce3c0257e3a5a2ba5731fdafecbc06c61067cc845efdf078c982676fe75b4a9de066b9218493ca9ee2b91c008bee21056c4487b360f376b4703da82ac58bab1165999de1b8a0aaa2b9babc0bc17fcd7e59c225d4cb5ff6c882e1492acf401ab55877c2069e5f5d58f6de76d6e51c5d634bc1a962d63a5d66feb3bf1240c786c0b6624ce5819c34f9a1b591b07d3289244059e8ab3053a1c4ff172e35742223ca63f99ea0ac57c51d12ba5dbb8809f6cefefae38ee854779486ad332f3077b8f99b733e05adafef0c25ffc5d8679c86cff6309c00ce7127e3e4088942c1157ef364b9ce34674ec081e088ba88926ad9a74af267d07beeac3cc2ff6d8a1f92f158e46f6e0018b0bb891b18bb1e7646b9dc5a268a9d250088918c1083601ef847a491dcc6d037de38ab0cf8e4401d6d7aeab6ddb12a37fddb029ef157553bc0ba4976d2c547f86aa40c5a8f4bc6d91458c3b069f30cc8abcd7412435e153b822130f29eaf04135664b4016c71a97420722e03b5a7c64a34367e2ea4e678f87587271c7a0d4480a50b59a1c1732dc8d7116fd530128a69a71f778432186d76844130b4946c327f2232efe635839cc06f943806fecd78a80fd03a6c5263ecb4148c9d92ec448a25fbfb11e7630ecbff58806ad82a92aa4d495c74256ee7aec7c26da1ca7d509ffb3d330d2076208e9903c552b6640c0e997e5d7c725d4c3fd92d194a9fc", 0x1000}, {&(0x7f0000002bc0)="01761e0c4e477d26c52eb850bbde6bb495f96a591ae92011a1708a90acd183b13a824705e521509810afc5474b74eb3ecaf47897f62165f49cd9bfa8f466671e8528fdba3558355ae376e78a1eb42bfe95f6a6f874a9f5742c8a1170fc2c1d6b27b5614a61fe33ac1324841a8cf130df203df3e4668dc5904cebe5284bcd72c5a04c319373aa57267298ae36ba42d7e37f7597b9759ec38b973e886f96311cb3b1459c93", 0xa4}, {&(0x7f0000002c80)="9ed34029af2ea69278275fab5c12f6052dcdb14ecbfd9055bc7f558c708d32959090177c85f3c5f2ac48362f9d5a6854f93862936dd251024367232fe29c72f64e140e6bdfba32890e3acf232145ebb94a0bcce295c5504a8666e8b7036c008d449dffc08357345a6fec7bbe89e0813a84a154c76f849c3845b285bcc956776f99da0e6fee996ddd6bc3b8c0878e7a4e61f000e611e42fbb5f2ad21381239fab8ca1364d6fce726d250949f42db00ef92e8af9042e80feb5b6094d875784269159dfc94fb4d8a5fe6e73b0ce2353970022318d6ea2e6faf4adc3aaeec2", 0xdd}, {&(0x7f0000002d80)="9c68fb9653045e70f1a3517621a8e8fd133117301b630ec15e8ec03b3fad320c55d1237a8f0ec7fea66f8987c0c8055696c0e750529a1ee7c8df739fc2232d8e4735f0928a2579f4f8ffe73777bff5c21de802884426c70dfcfcfdd04cb58c45e26b4e5fe66efaf89cb45f9b730422495f922819b4267e597c3268cd867a7fb7bf434f4d52819cdbca84698e7c2aaa", 0x8f}], 0x4, &(0x7f0000002f00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x68, 0x0, 0x7, {[@end, @rr={0x7, 0x27, 0x40, [@dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0x28}, @local, @rand_addr=0x1000, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast]}, @noop, @lsrr={0x83, 0x1f, 0x81, [@empty, @multicast1, @multicast2, @multicast2, @local, @multicast1, @loopback]}, @lsrr={0x83, 0x7, 0xe, [@local]}, @noop, @generic={0x7, 0x6, "f1bab6b4"}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @rand_addr=0x12, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x192a}}], 0xd0}}], 0x3, 0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r13, 0x44) ioctl$MON_IOCX_GETX(r13, 0x4018920a, &(0x7f0000000080)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/36, 0x24}) syz_emit_ethernet(0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd60766051003c3a00d0aedcf0c873e0de977ea0fc95c21581ff020000000000000000000000000001030090780000000060030200000000008800fe8000000000000000000000000000aafe8000000000000000000000000000bb00000400000000004ad5"], 0x0) 23:14:48 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @mcast2, 0x8}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4d) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:14:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) r5 = socket$kcm(0x2, 0x3, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x44) r7 = socket$kcm(0x2, 0x3, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x44) setsockopt$RDS_GET_MR(r8, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f00000001c0)=""/211, 0xd3}, &(0x7f0000000300), 0x8}, 0x20) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000180)={0x2000, 0xf000, 0x8, 0x1, 0x1}) io_setup(0x4, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r9, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 360.838166][ T2870] usb 2-1: USB disconnect, device number 6 23:14:49 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @mcast2, 0x8}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4d) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:14:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) r1 = socket$kcm(0x2, 0x3, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040), 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xbe, 0x23, 0x58, 0x8, 0xbfd, 0x11, 0xa75f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd3, 0x0, 0x1, 0x62, 0x96, 0xbd, 0x0, [], [{{0x9, 0x5, 0x8c, 0x2}}]}}]}}]}}, 0x0) 23:14:49 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @mcast2, 0x8}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:14:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) r5 = socket$kcm(0x2, 0x3, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x44) r7 = socket$kcm(0x2, 0x3, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x44) setsockopt$RDS_GET_MR(r8, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f00000001c0)=""/211, 0xd3}, &(0x7f0000000300), 0x8}, 0x20) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000180)={0x2000, 0xf000, 0x8, 0x1, 0x1}) io_setup(0x4, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r9, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:14:49 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @mcast2, 0x8}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) [ 361.335354][ T2870] usb 2-1: new high-speed USB device number 7 using dummy_hcd 23:14:49 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @mcast2, 0x8}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) [ 361.534139][ T3691] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 361.574206][ T2870] usb 2-1: Using ep0 maxpacket: 8 23:14:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) r5 = socket$kcm(0x2, 0x3, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x44) r7 = socket$kcm(0x2, 0x3, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x44) setsockopt$RDS_GET_MR(r8, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f00000001c0)=""/211, 0xd3}, &(0x7f0000000300), 0x8}, 0x20) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000180)={0x2000, 0xf000, 0x8, 0x1, 0x1}) io_setup(0x4, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r9, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:14:49 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) [ 361.697841][ T2870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.710161][ T2870] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 361.719460][ T2870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.756306][ T2870] usb 2-1: config 0 descriptor?? [ 361.794456][ T3691] usb 1-1: Using ep0 maxpacket: 8 [ 361.934328][ T3691] usb 1-1: config 0 has an invalid interface number: 211 but max is 0 [ 361.942638][ T3691] usb 1-1: config 0 has no interface number 0 [ 361.949317][ T3691] usb 1-1: config 0 interface 211 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 361.959400][ T3691] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0011, bcdDevice=a7.5f [ 361.968535][ T3691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.033518][ T3691] usb 1-1: config 0 descriptor?? [ 362.076652][ T3691] kvaser_usb 1-1:0.211: Cannot get usb endpoint(s) [ 362.259009][ T2870] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x2 [ 362.266729][ T2870] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x4 [ 362.278819][T12265] usb 1-1: USB disconnect, device number 7 [ 362.345927][ T2870] hid-picolcd 0003:04D8:C002.0002: No report with id 0x11 found [ 363.064094][T12265] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 363.764212][T12265] usb 1-1: device not accepting address 8, error -71 23:14:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={0xba}, 0x8, 0x1800) socket$inet_sctp(0x2, 0x5, 0x84) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) write$FUSE_LK(r3, &(0x7f0000000040)={0x28, 0xfffffffffffffff5, 0x2, {{0x81, 0x1ff, 0x0, 0xffffffffffffffff}}}, 0x28) 23:14:52 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r0 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x4d) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r0, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:14:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) r5 = socket$kcm(0x2, 0x3, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x44) r7 = socket$kcm(0x2, 0x3, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x44) setsockopt$RDS_GET_MR(r8, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f00000001c0)=""/211, 0xd3}, &(0x7f0000000300), 0x8}, 0x20) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000180)={0x2000, 0xf000, 0x8, 0x1, 0x1}) io_setup(0x4, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r9, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:14:52 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2a900, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x381080, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f00000000c0)={0x1, 0x1, 0x40}) ioctl$void(r0, 0x5450) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) ptrace$getsig(0x4202, r2, 0x8, &(0x7f0000000180)) setxattr$security_smack_entry(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.SMACK64\x00', &(0x7f0000000280)='/dev/hwrng\x00', 0xb, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000300)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000340)={0x1}, 0x1) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x3) setxattr$trusted_overlay_redirect(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./file0\x00', 0x8, 0x1) r4 = syz_open_dev$usbfs(&(0x7f0000000440)='/dev/bus/usb/00#/00#\x00', 0x2, 0x480000) ioctl$USBDEVFS_DISCARDURB(r4, 0x550b, &(0x7f0000000480)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x7c, &(0x7f00000004c0)=[@in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e20, @rand_addr=0x10000}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, @in6={0xa, 0x4e21, 0x5, @local, 0xfff}]}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000005c0)={r5, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}, [0x6, 0x9, 0x0, 0x6, 0x7fff, 0x6, 0x80000001, 0x8, 0x9, 0x2, 0x8001, 0x0, 0x8, 0x0, 0x1]}, &(0x7f00000006c0)=0x100) syz_open_dev$rtc(&(0x7f0000000700)='/dev/rtc#\x00', 0x3, 0x0) r6 = open(&(0x7f0000000740)='./file0\x00', 0x4000, 0x100) ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000000780)) r7 = syz_open_dev$amidi(&(0x7f00000007c0)='/dev/amidi#\x00', 0x1ff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000840)={0x2, &(0x7f0000000800)=[{0x0}, {}]}) ioctl$DRM_IOCTL_LOCK(r7, 0x4008642a, &(0x7f0000000880)={r8, 0x20}) syz_open_dev$sndctrl(&(0x7f00000008c0)='/dev/snd/controlC#\x00', 0x1a, 0x20041) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000900)='/dev/dlm_plock\x00', 0x500, 0x0) bind$vsock_stream(r9, &(0x7f0000000940)={0x28, 0x0, 0x2710, @reserved}, 0x10) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FS_IOC_SETVERSION(r10, 0x40087602, &(0x7f0000000980)=0x8) unlink(&(0x7f00000009c0)='./file0\x00') r11 = syz_open_dev$media(&(0x7f0000000a00)='/dev/media#\x00', 0x3, 0x101382) ioctl$VIDIOC_SUBDEV_S_EDID(r11, 0xc0285629, &(0x7f0000000a80)={0x0, 0x4, 0x4, [], &(0x7f0000000a40)}) 23:14:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) socket$inet_udp(0x2, 0x2, 0x0) io_setup(0xb, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x3c) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xe2d8, 0x800) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}]) [ 363.953264][ T2870] usb 2-1: USB disconnect, device number 7 [ 364.117442][ C1] hrtimer: interrupt took 30552 ns 23:14:52 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r0 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x4d) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r0, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:14:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000040), 0x4) ioctl(0xffffffffffffffff, 0x1000008915, &(0x7f0000000000)="11000060379aaac998ae5b696cac5a4bf55ebb422caff24c842d") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 23:14:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) r5 = socket$kcm(0x2, 0x3, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x44) r7 = socket$kcm(0x2, 0x3, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x44) setsockopt$RDS_GET_MR(r8, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f00000001c0)=""/211, 0xd3}, &(0x7f0000000300), 0x8}, 0x20) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000180)={0x2000, 0xf000, 0x8, 0x1, 0x1}) io_setup(0x4, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) io_submit(r9, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:14:52 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r0 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x4d) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r0, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:14:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={0xba}, 0x8, 0x1800) socket$inet_sctp(0x2, 0x5, 0x84) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) write$FUSE_LK(r3, &(0x7f0000000040)={0x28, 0xfffffffffffffff5, 0x2, {{0x81, 0x1ff, 0x0, 0xffffffffffffffff}}}, 0x28) 23:14:52 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:14:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) r5 = socket$kcm(0x2, 0x3, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x44) r7 = socket$kcm(0x2, 0x3, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x44) setsockopt$RDS_GET_MR(r8, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f00000001c0)=""/211, 0xd3}, &(0x7f0000000300), 0x8}, 0x20) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000180)={0x2000, 0xf000, 0x8, 0x1, 0x1}) io_setup(0x4, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) io_submit(r9, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:14:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect(0x0, 0x1, &(0x7f0000000480)=ANY=[@ANYRES64=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0xac, &(0x7f0000000380)=ANY=[@ANYBLOB="0000010000000510809e48d34f5791f3072a8de1201e9cbe"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='huid\xe2\xf0\xf6\xd7\xc6\xb8P\xabn_b\x88tes\x00\xef)\x03\x85e\x9b\xf8\x1aDQ\xa4\xf3@P\x8f\x90j\xa3\xeb\xb9\xd3~\xbe\xea]p1\xd691\xf2\xd4Ab\xc7\x81\xb0\x84s\x80\xd9\xa1\xc8\x00'/83, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80004808}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xbc, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x86}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x95}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7d63}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x44}, 0x20081) r5 = socket$kcm(0x2, 0x3, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='epuset.effective_mems\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x44) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x44, 0x0, 0x8, 0x70bd2c, 0x25dfdbf7}, 0x269}, 0x1, 0x0, 0x0, 0x8000002}, 0x8000) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000500)={0x0, 0x0, 0x2, "d247"}, 0x0, 0x0}) 23:14:53 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) [ 365.215981][T12517] IPVS: ftp: loaded support on port[0] = 21 23:14:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) r5 = socket$kcm(0x2, 0x3, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x44) r7 = socket$kcm(0x2, 0x3, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x44) setsockopt$RDS_GET_MR(r8, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f00000001c0)=""/211, 0xd3}, &(0x7f0000000300), 0x8}, 0x20) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000180)={0x2000, 0xf000, 0x8, 0x1, 0x1}) io_setup(0x4, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) io_submit(r9, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 365.506654][T12517] chnl_net:caif_netlink_parms(): no params data found [ 365.610263][T12517] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.618408][T12517] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.627223][T12517] device bridge_slave_0 entered promiscuous mode [ 365.643489][T12517] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.650892][T12517] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.660229][T12517] device bridge_slave_1 entered promiscuous mode [ 365.702189][T12517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.741175][T12517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.807088][T12517] team0: Port device team_slave_0 added [ 365.816907][T12517] team0: Port device team_slave_1 added [ 365.958913][T12517] device hsr_slave_0 entered promiscuous mode [ 366.034693][T12517] device hsr_slave_1 entered promiscuous mode [ 366.204011][T12517] debugfs: Directory 'hsr0' with parent '/' already present! [ 366.253272][T12517] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.260560][T12517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.268368][T12517] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.275601][T12517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.404953][T12517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.417648][ T2870] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.428614][ T2870] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.442486][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 366.472349][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 366.480927][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.500434][T12517] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.516525][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 366.525985][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.534990][ T2870] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.542154][ T2870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.560970][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 366.570344][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 366.579337][ T3691] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.586530][ T3691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.626723][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 366.636815][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 366.667216][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 366.677185][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 366.686853][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 366.696699][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 366.706285][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 366.715466][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 366.737537][T12517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.750090][T12517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 366.783169][T12517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.791809][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 366.800814][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 366.810031][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 23:14:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f0000006fc0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1, 0xfffffff9}, 0x1c, 0x0}}], 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 23:14:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={0xba}, 0x8, 0x1800) socket$inet_sctp(0x2, 0x5, 0x84) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) write$FUSE_LK(r3, &(0x7f0000000040)={0x28, 0xfffffffffffffff5, 0x2, {{0x81, 0x1ff, 0x0, 0xffffffffffffffff}}}, 0x28) 23:14:55 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:14:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) r5 = socket$kcm(0x2, 0x3, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x44) r7 = socket$kcm(0x2, 0x3, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x44) setsockopt$RDS_GET_MR(r8, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f00000001c0)=""/211, 0xd3}, &(0x7f0000000300), 0x8}, 0x20) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000180)={0x2000, 0xf000, 0x8, 0x1, 0x1}) io_setup(0x4, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r9, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:14:55 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0x4, 0x2, 'syz1\x00'}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffc0}]}]}, 0x20}}, 0x4000080) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x2000, 0x0) r4 = open(&(0x7f0000000280)='./file0\x00', 0x40, 0x20) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f00000002c0)=r4) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0xac, &(0x7f0000000400)={0x0, 0x0, 0x1, "d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:14:55 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:14:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) r5 = socket$kcm(0x2, 0x3, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x44) r7 = socket$kcm(0x2, 0x3, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x44) setsockopt$RDS_GET_MR(r8, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f00000001c0)=""/211, 0xd3}, &(0x7f0000000300), 0x8}, 0x20) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000180)={0x2000, 0xf000, 0x8, 0x1, 0x1}) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r9, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:14:55 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x480, 0x0) mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x0) socket$kcm(0x2, 0x3, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x5, 0x3e, 0x15, 0x80}]}, 0x10) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0xfffffffffffffe0f) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a00, 0x0) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) [ 367.395825][ T2870] usb 1-1: new high-speed USB device number 10 using dummy_hcd 23:14:55 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) [ 367.654075][ T2870] usb 1-1: Using ep0 maxpacket: 16 [ 367.776190][ T2870] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 367.784783][ T2870] usb 1-1: config 0 has no interface number 0 [ 367.791014][ T2870] usb 1-1: New USB device found, idVendor=1934, idProduct=1202, bcdDevice=87.08 [ 367.800169][ T2870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:14:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) r5 = socket$kcm(0x2, 0x3, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x44) r7 = socket$kcm(0x2, 0x3, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x44) setsockopt$RDS_GET_MR(r8, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f00000001c0)=""/211, 0xd3}, &(0x7f0000000300), 0x8}, 0x20) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000180)={0x2000, 0xf000, 0x8, 0x1, 0x1}) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:14:55 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0x4, 0x2, 'syz1\x00'}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x10001) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 367.899494][ T2870] usb 1-1: config 0 descriptor?? 23:14:56 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) [ 367.940281][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 23:14:56 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000032c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000031c0)=[{{&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000002540)=[{&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/235, 0xeb}, {&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000002440)=""/203, 0xcb}], 0x7, &(0x7f00000025c0)=""/184, 0xb8}, 0x35}, {{&(0x7f0000002680)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000002700)=""/216, 0xd8}, 0x4}, {{&(0x7f0000002800)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002880)=""/131, 0x83}, {&(0x7f0000002940)=""/124, 0x7c}, {&(0x7f00000029c0)=""/91, 0x5b}, {&(0x7f0000002a40)=""/152, 0x98}, {&(0x7f0000002b00)=""/148, 0x94}, {&(0x7f0000002bc0)=""/217, 0xd9}, {&(0x7f0000002cc0)=""/11, 0xb}, {&(0x7f0000002d00)=""/24, 0x18}, {&(0x7f0000002d40)=""/36, 0x24}, {&(0x7f0000002d80)=""/94, 0x5e}], 0xa, &(0x7f0000002ec0)=""/200, 0xc8}, 0x50}, {{&(0x7f0000002fc0)=@ax25={{0x3, @null}, [@netrom, @bcast, @null, @bcast, @netrom, @default, @default, @bcast]}, 0x80, &(0x7f0000003080)=[{&(0x7f0000003040)}], 0x1, &(0x7f00000030c0)=""/226, 0xe2}, 0x401}], 0x4, 0x40, &(0x7f0000003300)={r2, r3+10000000}) r5 = syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0x54b5, 0x2) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000500)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, r6, 0x400, 0x0, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x922b87b0da7412a1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x7fff}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20004800}, 0x40) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f00000034c0)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x25480000}, 0xc, &(0x7f0000003480)={&(0x7f0000003380)={0xc8, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff0001}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}]}, 0xc8}, 0x1, 0x0, 0x0, 0x14c01}, 0xc8cdcc8535c5bb62) io_submit(0x0, 0x0, 0x0) r7 = dup3(r0, r1, 0x0) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r8, 0x40405514, &(0x7f0000003040)={0x4, 0x6, 0x8, 0x2, '\x00', 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x4}, @IFLA_BOND_MODE={0x8, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 23:14:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) r5 = socket$kcm(0x2, 0x3, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x44) r7 = socket$kcm(0x2, 0x3, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x44) setsockopt$RDS_GET_MR(r8, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f00000001c0)=""/211, 0xd3}, &(0x7f0000000300), 0x8}, 0x20) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000180)={0x2000, 0xf000, 0x8, 0x1, 0x1}) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 368.053113][T12582] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 368.160070][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 23:14:56 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) [ 368.245152][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 23:14:56 executing program 4: r0 = socket$inet(0x2, 0x803, 0xa0) r1 = socket$kcm(0x2, 0x3, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0xc000000, 0x0, 0x3f00000000000000]}}, {0x2, 0x0, 0x0, @local}, r4}}, 0x48) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}, r4}}, 0x30) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xcd}}}, 0x90) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r7, 0x1, 0x9, 0x7634, 0x8, 0x1000}, 0x14) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0xc, &(0x7f0000000200)={{{@in=@broadcast, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, 0xe8) [ 368.824093][ T2870] f81534 1-1:0.117: f81534_set_register: reg: 1003 data: d0 failed: -71 [ 368.832767][ T2870] f81534 1-1:0.117: f81534_find_config_idx: read failed: -71 [ 368.840370][ T2870] f81534 1-1:0.117: f81534_calc_num_ports: find idx failed: -71 [ 368.848234][ T2870] f81534: probe of 1-1:0.117 failed with error -71 [ 368.859060][ T2870] usb 1-1: USB disconnect, device number 10 [ 369.393935][ T2870] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 369.633994][ T2870] usb 1-1: Using ep0 maxpacket: 16 [ 369.754366][ T2870] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 369.762732][ T2870] usb 1-1: config 0 has no interface number 0 [ 369.769103][ T2870] usb 1-1: New USB device found, idVendor=1934, idProduct=1202, bcdDevice=87.08 [ 369.778229][ T2870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.787684][ T2870] usb 1-1: config 0 descriptor?? 23:14:58 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup3(r1, r0, 0x0) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 23:14:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) r5 = socket$kcm(0x2, 0x3, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x44) r7 = socket$kcm(0x2, 0x3, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x44) setsockopt$RDS_GET_MR(r8, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f00000001c0)=""/211, 0xd3}, &(0x7f0000000300), 0x8}, 0x20) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000180)={0x2000, 0xf000, 0x8, 0x1, 0x1}) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:14:58 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:14:58 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x1, 0xa6, 0x38, 0x20, 0x54c, 0x38, 0x444a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x98, 0x0, 0x0, 0x21, 0xc, 0x61}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001340)={0x2c, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1}, 0x0, 0x0}) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1000, 0x800140) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000080)={0x0, 0x3f, 0x2023}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) 23:14:58 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x20400) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000040)={0x200, "9f7b2fe21d385e8cfdb41cc970b817b6f1bfd166d1e5eb897d7501e72867d9e0", 0x2, 0x2, 0x5, 0xff06fa, 0xd}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r0, 0x0, 0xa, &(0x7f0000000140)='security}\x00'}, 0x30) r2 = perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x3, 0x8, 0x7, 0x6, 0x0, 0x80000001, 0x100, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xe7, 0x9}, 0x800, 0x0, 0x380, 0x0, 0x0, 0x81, 0xb902}, r1, 0x8, r0, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000200)={0xae6c, 0x8, 0x0, 0x0, 0x8, 0x8, 0x0, 0x1, 0x8001, 0x80000000, 0xfffffffb, 0x200}) clone3(&(0x7f0000000440)={0x1000, &(0x7f0000000240)=0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), 0x36, 0x0, &(0x7f0000000300)=""/134, 0x86, &(0x7f00000003c0)=""/126}, 0x40) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000480)='nr0\x00') setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000500)={0x3, &(0x7f00000004c0)=[{0x0, 0x45, 0xc6, 0x2}, {0x5, 0x8, 0x6, 0x27}, {0x81, 0x7f, 0x3}]}, 0x10) epoll_create(0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000540)) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self\x00', 0x200, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/video36\x00', 0x2, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000600)='/dev/nbd#\x00', 0x0, 0x241440) r8 = syz_open_dev$dspn(&(0x7f0000000700)='/dev/dsp#\x00', 0x7921, 0x50c01) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)={0xc, 0x552f, 0x80000000, 0xfffffff7, 0x7f004fa5b1e59378, 0x1, 0xffffffff, [], 0x0, r0, 0x0, 0x3}, 0x3c) r10 = signalfd(0xffffffffffffffff, &(0x7f0000000780)={0x800}, 0x8) poll(&(0x7f00000007c0)=[{r3, 0x12000}, {r4, 0x8008}, {r5, 0x40}, {r6}, {r7, 0x40c1}, {r8, 0x200}, {0xffffffffffffffff, 0x40c}, {r9, 0x4}, {r10, 0x20}], 0x9, 0x8) ioctl$VIDIOC_RESERVED(r3, 0x5601, 0x0) socket$bt_rfcomm(0x1f, 0x0, 0x3) r11 = syz_open_dev$admmidi(&(0x7f0000000840)='/dev/admmidi#\x00', 0x8000, 0x101000) ioctl$VIDIOC_ENUMINPUT(r11, 0xc050561a, &(0x7f0000000880)={0x1ff, "e9e54ed69d8fd2ab697ad8f6c0ce7d873b2a303737ea855c05fa6833b103fda7", 0x1, 0xffffff20, 0x3, 0xfe0000, 0x1000000, 0x4}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r11, 0x84, 0x21, &(0x7f0000000900)=0x7, 0x4) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000940)='/dev/full\x00', 0x301003, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r12, 0x80045301, &(0x7f0000000980)) r13 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/capi/capi20\x00', 0x80, 0x0) ioctl$VIDIOC_G_OUTPUT(r13, 0x8004562e, &(0x7f0000000a00)) socketpair(0x0, 0x800, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r14, 0x84, 0x7, &(0x7f0000000a80)={0xfffeffff}, 0x4) r15 = openat$null(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/null\x00', 0x84000, 0x0) ioctl$TIOCVHANGUP(r15, 0x5437, 0x0) 23:14:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001c40)={{{@in=@empty, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000001d40)=0xe8) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) [ 370.254498][ T2870] f81534 1-1:0.117: f81534_get_register: reg: 1003 failed: -71 [ 370.262250][ T2870] f81534 1-1:0.117: f81534_find_config_idx: read failed: -71 [ 370.269829][ T2870] f81534 1-1:0.117: f81534_calc_num_ports: find idx failed: -71 [ 370.277761][ T2870] f81534: probe of 1-1:0.117 failed with error -71 23:14:58 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:14:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) r5 = socket$kcm(0x2, 0x3, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x44) r7 = socket$kcm(0x2, 0x3, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x44) setsockopt$RDS_GET_MR(r8, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f00000001c0)=""/211, 0xd3}, &(0x7f0000000300), 0x8}, 0x20) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r9, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 370.380825][ T2870] usb 1-1: USB disconnect, device number 11 23:14:58 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x0, 0x3}}) 23:14:58 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000), 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) [ 370.524091][ T12] usb 2-1: new high-speed USB device number 8 using dummy_hcd 23:14:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) r5 = socket$kcm(0x2, 0x3, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x44) r7 = socket$kcm(0x2, 0x3, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x44) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r9, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:14:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x0) 23:14:58 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000), 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) [ 370.765159][ T12] usb 2-1: Using ep0 maxpacket: 32 23:14:58 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f00000000c0)) [ 370.886919][ T12] usb 2-1: config 0 has an invalid interface number: 152 but max is 0 [ 370.895548][ T12] usb 2-1: config 0 has no interface number 0 [ 370.901763][ T12] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=44.4a [ 370.911054][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:14:59 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000), 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) [ 370.982603][ T12] usb 2-1: config 0 descriptor?? [ 371.027915][ T12] visor 2-1:0.152: Sony Clie 3.5 converter detected [ 371.218234][T12661] IPVS: ftp: loaded support on port[0] = 21 [ 371.317761][T12661] chnl_net:caif_netlink_parms(): no params data found [ 371.357614][T12661] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.364892][T12661] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.373081][T12661] device bridge_slave_0 entered promiscuous mode [ 371.382800][T12661] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.390102][T12661] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.398608][T12661] device bridge_slave_1 entered promiscuous mode [ 371.423856][T12661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.436675][T12661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.464496][T12661] team0: Port device team_slave_0 added [ 371.470692][ T12] usb 2-1: clie_3_5_startup: get interface number failed: -71 [ 371.474819][T12661] team0: Port device team_slave_1 added [ 371.478513][ T12] visor: probe of 2-1:0.152 failed with error -71 [ 371.494813][ T12] usb 2-1: USB disconnect, device number 8 [ 371.557291][T12661] device hsr_slave_0 entered promiscuous mode [ 371.615618][T12661] device hsr_slave_1 entered promiscuous mode [ 371.654247][T12661] debugfs: Directory 'hsr0' with parent '/' already present! [ 371.677202][T12661] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.685582][T12661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.693175][T12661] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.700455][T12661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.758854][T12661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.778116][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.787203][T12195] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.795972][T12195] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.809482][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 371.826610][T12661] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.839712][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 371.848881][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.856097][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.874654][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 371.883387][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.890655][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.913281][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 371.923536][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 371.942069][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 371.958551][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 371.976283][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 371.988781][T12661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 372.020371][T12661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.234259][ T30] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 372.474058][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 372.594117][ T30] usb 2-1: config 0 has an invalid interface number: 152 but max is 0 [ 372.602535][ T30] usb 2-1: config 0 has no interface number 0 [ 372.608883][ T30] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=44.4a [ 372.618257][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.627858][ T30] usb 2-1: config 0 descriptor?? [ 372.667573][ T30] visor 2-1:0.152: Sony Clie 3.5 converter detected [ 372.905471][ T30] usb 2-1: clie_3_5_startup: get interface number failed: -71 [ 372.913303][ T30] visor: probe of 2-1:0.152 failed with error -71 [ 372.923450][ T30] usb 2-1: USB disconnect, device number 9 23:15:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000000e080)={&(0x7f000000ddc0)=@hci, 0x80, &(0x7f000000e000), 0x0, &(0x7f000000e040)=""/19, 0x13}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f000000e740)={&(0x7f000000e0c0)=@ll={0x11, 0x10, 0x0, 0x1, 0x40, 0x6, @dev={[], 0x22}}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x471}, 0x800) r3 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x88840) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)={r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r5, &(0x7f0000000640), 0x12) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='io.bfq.weight\x00', 0x2, 0x0) write$cgroup_int(r2, 0x0, 0x0) 23:15:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) r5 = socket$kcm(0x2, 0x3, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x44) socket$kcm(0x2, 0x3, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r7, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 373.293067][T12678] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 373.305082][T12678] CPU: 1 PID: 12678 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 373.313036][T12678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.323143][T12678] Call Trace: [ 373.326474][T12678] dump_stack+0x191/0x1f0 [ 373.330891][T12678] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 373.336806][T12678] dump_header+0x1e7/0xd00 [ 373.341256][T12678] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 373.347463][T12678] ? ___ratelimit+0x542/0x720 [ 373.352162][T12678] ? task_will_free_mem+0x14c/0x810 [ 373.357374][T12678] oom_kill_process+0x210/0x560 [ 373.362296][T12678] out_of_memory+0x1796/0x1c70 [ 373.367073][T12678] ? kmsan_internal_set_origin+0x6a/0xb0 [ 373.372729][T12678] memory_max_write+0x90b/0xb60 [ 373.377604][T12678] ? memory_max_show+0x1b0/0x1b0 [ 373.382553][T12678] cgroup_file_write+0x41a/0x8e0 [ 373.387644][T12678] ? cgroup_seqfile_stop+0x150/0x150 [ 373.393289][T12678] kernfs_fop_write+0x55f/0x840 [ 373.398158][T12678] ? kernfs_fop_read+0x9a0/0x9a0 [ 373.403101][T12678] __vfs_write+0x1a9/0xcb0 [ 373.407538][T12678] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 373.413620][T12678] ? __sb_start_write+0x10b/0x230 [ 373.418723][T12678] vfs_write+0x481/0x920 [ 373.423015][T12678] ksys_write+0x265/0x430 [ 373.427361][T12678] __se_sys_write+0x92/0xb0 [ 373.431926][T12678] __x64_sys_write+0x4a/0x70 [ 373.436582][T12678] do_syscall_64+0xb6/0x160 [ 373.441143][T12678] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 373.447047][T12678] RIP: 0033:0x459ef9 [ 373.451004][T12678] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 373.470619][T12678] RSP: 002b:00007f3b9f73dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 373.479045][T12678] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 373.487113][T12678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 373.495095][T12678] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 373.503204][T12678] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3b9f73e6d4 [ 373.511181][T12678] R13: 00000000004ca4f4 R14: 00000000004e23a8 R15: 00000000ffffffff [ 373.519364][T12678] memory: usage 7608kB, limit 0kB, failcnt 8 [ 373.525504][T12678] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 373.532386][T12678] Memory cgroup stats for /syz1: [ 373.532676][T12678] anon 2146304 [ 373.532676][T12678] file 4190208 [ 373.532676][T12678] kernel_stack 196608 [ 373.532676][T12678] slab 684032 [ 373.532676][T12678] sock 0 [ 373.532676][T12678] shmem 4190208 [ 373.532676][T12678] file_mapped 0 [ 373.532676][T12678] file_dirty 0 [ 373.532676][T12678] file_writeback 0 [ 373.532676][T12678] anon_thp 2097152 [ 373.532676][T12678] inactive_anon 4190208 [ 373.532676][T12678] active_anon 2146304 [ 373.532676][T12678] inactive_file 0 [ 373.532676][T12678] active_file 0 [ 373.532676][T12678] unevictable 0 [ 373.532676][T12678] slab_reclaimable 0 [ 373.532676][T12678] slab_unreclaimable 684032 [ 373.532676][T12678] pgfault 924 [ 373.532676][T12678] pgmajfault 0 [ 373.532676][T12678] workingset_refault 0 [ 373.532676][T12678] workingset_activate 0 [ 373.532676][T12678] workingset_nodereclaim 0 [ 373.532676][T12678] pgrefill 0 [ 373.532676][T12678] pgscan 0 [ 373.532676][T12678] pgsteal 0 [ 373.532676][T12678] pgactivate 0 [ 373.628701][T12678] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12676,uid=0 [ 373.644439][T12678] Memory cgroup out of memory: Killed process 12676 (syz-executor.1) total-vm:72716kB, anon-rss:2164kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 373.664791][ T1831] oom_reaper: reaped process 12676 (syz-executor.1), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 23:15:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)=0x7) getrandom(&(0x7f0000001780)=""/210, 0xd2, 0x2) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000280)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x3) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000500)={{0x2, 0x0, @identifier="28e7a5042a3e33b9e4ff7f57622e9242"}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x90000, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x14, 0x0, &(0x7f0000000040)=0x1) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)=0x1) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x2008002) sendfile(r6, r7, 0x0, 0x8000fffffffe) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_int(r9, 0x29, 0x4b, 0x0, 0x0) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="3ef9", 0x2}, {&(0x7f0000000680)="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", 0x1000}], 0x2) r10 = fcntl$dupfd(0xffffffffffffffff, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x1000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000004c0)=0x5) syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x7, 0x0) perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x70, 0x271, 0x4, 0x1, 0x0, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x4, 0x9, 0x3, 0x0, 0x10001, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0xf7c, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0xffff000000000000, 0x0, 0x40, 0x0, 0xa92, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000005c0)}, 0x0, 0x0, 0x10000, 0x9, 0x9}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xe) 23:15:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'b\x14\x90\x10_slA\x97\xdc\x8f\x00\x00\x00\x00 ', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bond_slave_1\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'rose0\x00', 0x500}) 23:15:08 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:15:08 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) keyctl$join(0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) r6 = creat(&(0x7f0000000580)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x98428d57a99b5f44) io_setup(0x4, &(0x7f00000004c0)=0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/185) io_submit(r7, 0x237, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r6, &(0x7f0000000000), 0x377140be6b5ef4c7}]) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) dup2(r0, r1) 23:15:08 executing program 1: write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8932, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) sendmsg(0xffffffffffffffff, 0x0, 0x0) 23:15:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) r5 = socket$kcm(0x2, 0x3, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x44) socket$kcm(0x2, 0x3, 0x84) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r7, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 380.642578][T12237] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 380.652705][T12237] CPU: 0 PID: 12237 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 380.660645][T12237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.670748][T12237] Call Trace: [ 380.674158][T12237] dump_stack+0x191/0x1f0 [ 380.678561][T12237] dump_header+0x1e7/0xd00 [ 380.683061][T12237] ? __msan_metadata_ptr_for_store_1+0x13/0x20 23:15:08 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) [ 380.689290][T12237] ? ___ratelimit+0x542/0x720 [ 380.694027][T12237] ? task_will_free_mem+0x2c9/0x810 [ 380.699306][T12237] oom_kill_process+0x210/0x560 [ 380.704234][T12237] out_of_memory+0x1796/0x1c70 [ 380.709080][T12237] ? kmsan_internal_set_origin+0x6a/0xb0 [ 380.714800][T12237] try_charge+0x2889/0x3d70 [ 380.719462][T12237] mem_cgroup_try_charge+0xa29/0xe40 [ 380.724972][T12237] mem_cgroup_try_charge_delay+0x7e/0x140 [ 380.730764][T12237] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 380.736720][T12237] handle_mm_fault+0x522b/0x9f70 [ 380.741780][T12237] do_user_addr_fault+0x905/0x1510 [ 380.746997][T12237] __do_page_fault+0x1a2/0x410 [ 380.751845][T12237] do_page_fault+0xbb/0x500 [ 380.756431][T12237] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 380.762403][T12237] page_fault+0x4e/0x60 [ 380.766627][T12237] RIP: 0033:0x474c0d [ 380.770557][T12237] Code: 54 55 53 48 81 ec 28 21 00 00 8b 8f c0 00 00 00 85 c9 0f 85 4d 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 01 00 00 <48> 89 bc 24 00 01 00 00 48 89 fb 41 bd 00 00 00 00 c7 84 24 e0 00 [ 380.790184][T12237] RSP: 002b:0000000000a6d5f0 EFLAGS: 00010246 [ 380.796272][T12237] RAX: 0000000000a6d710 RBX: 0000000000715f20 RCX: 00000000ffffffff [ 380.804611][T12237] RDX: 0000000000a6fcc0 RSI: 00000000004bf8af RDI: 0000000000715f20 [ 380.812605][T12237] RBP: 0000000000a6fc90 R08: 0000000000a76c70 R09: 00000000004bf8af [ 380.820593][T12237] R10: 00000000026ba940 R11: 0000000000000246 R12: 00000000004bf8af [ 380.828581][T12237] R13: 0000000000a6fcc0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 380.836944][T12237] memory: usage 5120kB, limit 0kB, failcnt 31 [ 380.843061][T12237] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 380.850038][T12237] Memory cgroup stats for /syz1: [ 380.850346][T12237] anon 4096 [ 380.850346][T12237] file 4190208 [ 380.850346][T12237] kernel_stack 0 [ 380.850346][T12237] slab 684032 [ 380.850346][T12237] sock 0 [ 380.850346][T12237] shmem 4190208 [ 380.850346][T12237] file_mapped 0 [ 380.850346][T12237] file_dirty 0 [ 380.850346][T12237] file_writeback 0 [ 380.850346][T12237] anon_thp 0 [ 380.850346][T12237] inactive_anon 4190208 23:15:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00', 0x8602}) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') close(r3) [ 380.850346][T12237] active_anon 4096 [ 380.850346][T12237] inactive_file 0 [ 380.850346][T12237] active_file 0 [ 380.850346][T12237] unevictable 0 [ 380.850346][T12237] slab_reclaimable 0 [ 380.850346][T12237] slab_unreclaimable 684032 [ 380.850346][T12237] pgfault 924 [ 380.850346][T12237] pgmajfault 0 [ 380.850346][T12237] workingset_refault 0 [ 380.850346][T12237] workingset_activate 0 [ 380.850346][T12237] workingset_nodereclaim 0 [ 380.850346][T12237] pgrefill 0 [ 380.850346][T12237] pgscan 0 [ 380.850346][T12237] pgsteal 0 [ 380.850346][T12237] pgactivate 0 [ 380.944201][T12237] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12237,uid=0 [ 380.959872][T12237] Memory cgroup out of memory: Killed process 12237 (syz-executor.1) total-vm:72452kB, anon-rss:116kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 380.979896][ T1831] oom_reaper: reaped process 12237 (syz-executor.1), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 23:15:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) r5 = socket$kcm(0x2, 0x3, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x44) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r7, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 381.232188][T12708] device nr0 entered promiscuous mode 23:15:09 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:15:09 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:15:09 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000001040)={@link_local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x28, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, [], @empty, @empty}}}}}}, 0x0) 23:15:09 executing program 4: 23:15:09 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000001809"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) write(r1, &(0x7f0000000080)="1fe92f7a904e7bd452bc1270231d3c42bb52d73d09efe8152ff3c8fa73f85ede29b8204b62663dcb16be35b2104becec99b90e533d75b32aac906f001b45290d40b5b9272248b51f7c520bb09b6d", 0xfeff) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 23:15:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) r5 = socket$kcm(0x2, 0x3, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x44) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r7, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:09 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:15:10 executing program 1: 23:15:10 executing program 4: 23:15:10 executing program 5: 23:15:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00', 0x8602}) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') close(r3) 23:15:10 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:15:10 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) r5 = socket$kcm(0x2, 0x3, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x44) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r7, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:10 executing program 5: 23:15:10 executing program 4: 23:15:10 executing program 5: 23:15:10 executing program 4: 23:15:10 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:15:10 executing program 4: [ 382.881455][T12750] device nr0 entered promiscuous mode [ 383.714947][ T538] device bridge_slave_1 left promiscuous mode [ 383.721484][ T538] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.785753][ T538] device bridge_slave_0 left promiscuous mode [ 383.792166][ T538] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.515215][ T538] device hsr_slave_0 left promiscuous mode [ 384.554324][ T538] device hsr_slave_1 left promiscuous mode [ 384.611352][ T538] team0 (unregistering): Port device team_slave_1 removed [ 384.628009][ T538] team0 (unregistering): Port device team_slave_0 removed [ 384.642013][ T538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.693314][ T538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.754850][T12767] IPVS: ftp: loaded support on port[0] = 21 [ 384.795711][ T538] bond0 (unregistering): Released all slaves [ 384.962029][T12767] chnl_net:caif_netlink_parms(): no params data found [ 385.001848][T12767] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.009013][T12767] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.017510][T12767] device bridge_slave_0 entered promiscuous mode [ 385.026858][T12767] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.034213][T12767] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.042260][T12767] device bridge_slave_1 entered promiscuous mode [ 385.068399][T12767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.079955][T12767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.102640][T12767] team0: Port device team_slave_0 added [ 385.112049][T12767] team0: Port device team_slave_1 added [ 385.208665][T12767] device hsr_slave_0 entered promiscuous mode [ 385.244690][T12767] device hsr_slave_1 entered promiscuous mode [ 385.303940][T12767] debugfs: Directory 'hsr0' with parent '/' already present! [ 385.333234][T12767] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.340524][T12767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.348253][T12767] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.355593][T12767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.423915][T12767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.443446][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 385.452711][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.461829][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.479397][T12767] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.496190][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 385.505254][ T2870] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.512430][ T2870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.546688][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 385.555557][ T2870] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.562727][ T2870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.572181][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 385.581623][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 385.591497][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 385.609535][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 385.622112][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 385.638839][T12767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 385.674701][T12767] 8021q: adding VLAN 0 to HW filter on device batadv0 23:15:13 executing program 1: 23:15:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) socket$kcm(0x2, 0x3, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:13 executing program 5: 23:15:13 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:15:13 executing program 4: 23:15:13 executing program 0: 23:15:13 executing program 5: 23:15:13 executing program 0: 23:15:14 executing program 4: 23:15:14 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:15:14 executing program 1: 23:15:14 executing program 5: 23:15:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) socket$kcm(0x2, 0x3, 0x84) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x48, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockname(r2, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000080)=0x80) 23:15:14 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040), 0xb9) 23:15:14 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local={0xac, 0x2c0}}, 0xffd6, &(0x7f0000000640), 0x98, &(0x7f0000000000)=[{0x18}], 0x1f}, 0xfc) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 23:15:14 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, 0x0, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:15:14 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16], 0xffffffdd) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1004000000015) 23:15:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00'}) 23:15:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:14 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000240)}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc020660b, &(0x7f0000000000)) 23:15:14 executing program 1: r0 = socket(0x11, 0x800000003, 0x8) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000003c0)="12cb96df", 0x4) bind(r0, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x360, 0x0, 0x0, 0x0, 0x0, 0x8}, "bb11", [[]]}, 0x122) 23:15:14 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, 0x0, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:15:14 executing program 5: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) open$dir(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 23:15:14 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f0000001240)) 23:15:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0xc04}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000001}) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000100)={{0x77359400}}, 0x0) dup3(0xffffffffffffffff, r5, 0x0) 23:15:15 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, 0x0, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:15:15 executing program 1: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r0, 0x0, 0x0) 23:15:15 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000140)={0x0, 0x81, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2000000000002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010005fba00000100f30000a89c8aeeb1", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 23:15:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:15 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000001809"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) write(r1, &(0x7f0000000080)="1fe92f7a904e7bd452bc1270231d3c42bb52d73d09efe8152ff3c8fa73f85ede29b89b4b62663dcb16be35b2104becec99b90e533d75b32aac906f009b4c", 0x3e) 23:15:15 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x0, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:15:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 387.335674][T12852] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 387.343396][T12852] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 387.440832][T12852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 23:15:15 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="6653070000003639405cb4aed12f0000000000ae47a825d76800278dcff47d01855c43ef792d2d5ff00000805ae64f8f36460234c32479ae4351b0c84eba48cc4c26bed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc150de2b03b5b2461179f5f90bba001b50c0da6218a8106df2858ec973328e5a2c078a3fe3b52020203517e25e3b905ab1e74e5fba80a0fa881e689f7615baf78f08ea33", 0xa4}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe76}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:15:15 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x0, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:15:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000140)={0x4, 0xeceb, 0x400}) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:15 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() socket$inet6(0xa, 0x0, 0x0) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket(0x10, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000002) r4 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r4, 0x0) read(r4, &(0x7f0000000180)=""/19, 0xfffffe47) creat(0x0, 0x0) [ 387.853278][T12884] devpts: called with bogus options 23:15:16 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x0, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:15:16 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:15:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000ffff0000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@deltfilter={0x64, 0x28, 0x421, 0x0, 0x0, {0x0, r6, {0x7}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, @m_ipt={0x2c, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x4}, {0x18, 0x6, "2b0aad99efd6adccd001df788e3c178969"}}}}]}}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@deltfilter={0x64, 0x28, 0x421, 0x0, 0x0, {0x0, r6, {0xf}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, @m_ipt={0x2c, 0x0, {{0x3, 0x1, 'ipt\x00'}, {0xfffffffffffffff6}, {0x18, 0x6, "2b0aad99efd6adccd001df788e3c178969"}}}}]}}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@deltfilter={0x64, 0x28, 0x421, 0x0, 0x0, {0x0, r6, {0x3}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, @m_ipt={0x2c, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x4}, {0x18, 0x6, "2b0aad99efd6adccd001df788e3c178969"}}}}]}}]}, 0x64}}, 0x0) 23:15:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0xf, &(0x7f0000000040)={0x0, 'bond_slave_0\x00'}, 0x18) 23:15:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000380)={0x2, 0x4f21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7b}}], 0x18}}], 0x1, 0x0) 23:15:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x24201, 0x0) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:16 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:15:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2}}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000540)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r2, 0x1}}, 0x18) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 23:15:16 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001240)="9a8bf0c149867784ed401b4c4d63159a", 0x10}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)=""/242, 0xf2}], 0x1}}], 0x1, 0x0, 0x0) 23:15:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:16 executing program 5: getpid() clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() perf_event_open(&(0x7f0000000180)={0x1000000000000001, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000380)) close(0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x485d85c5}, 0x1000, 0x0, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5273}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r1, 0x4, 0x40800) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) write$P9_RREAD(r4, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x74000000, 0x5) 23:15:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) socket$key(0xf, 0x3, 0x2) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 388.504262][T12919] ptrace attach of ""[12923] was attempted by "/root/syz-executor.1"[12919] 23:15:16 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:15:16 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc000) 23:15:16 executing program 4: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000001809"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) write(r1, &(0x7f0000000080)="1fe92f7a904e7bd452bc1270231d3c42bb52d73d09efe8152ff3c8fa73f85ede29b8204b62663dcb16be35b2104becec99b90e533d75b32aac906f009b47", 0x3e) 23:15:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:16 executing program 4: socket$inet(0x2, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) futex(0x0, 0x400000085, 0x0, 0x0, &(0x7f0000000000), 0x94400002) 23:15:17 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xf, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:15:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0xa0, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x81000000, 0x30a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}, @IFLA_GROUP={0x8}]}, 0xa0}}, 0x0) 23:15:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r1) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 389.098818][T12959] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 389.107509][T12959] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 389.116697][T12959] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 389.124339][T12967] futex_wake_op: syz-executor.4 tries to shift op by 1024; fix this program [ 389.125812][T12959] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 389.142532][T12959] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 389.144399][T12966] ptrace attach of ""[12968] was attempted by "/root/syz-executor.1"[12966] [ 389.151718][T12959] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 389.168848][T12959] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 389.178021][T12959] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 389.187089][T12959] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 389.196179][T12959] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 389.207368][T12959] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:15:17 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x0, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:15:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 389.316407][T12974] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:15:17 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x0, 0x0, 0x2}, 0x20) 23:15:17 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x0, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:15:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:17 executing program 4: socket$inet(0x2, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) futex(0x0, 0x400000085, 0x0, 0x0, &(0x7f0000000000), 0x94400002) 23:15:17 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000600)={@local, @empty=[0x5], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x54, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x4}, @window={0x2, 0x3}, @md5sig={0x13, 0x12, "d31c8190da8dfe461d135b075be2c1c4"}, @md5sig={0x13, 0x12, "5b3b4bc0ca96fcedefad47a621547516"}, @exp_fastopen={0xfe, 0xc, 0xf989, "908fabfe9a69b583"}]}}}}}}}}, 0x0) 23:15:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) [ 389.837791][T12993] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 389.866870][T13002] futex_wake_op: syz-executor.4 tries to shift op by 1024; fix this program 23:15:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)) r1 = socket$kcm(0x2, 0x3, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:18 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x0, &(0x7f0000000280), &(0x7f0000000040)=0x4) 23:15:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2}}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000540)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r2, 0x1}}, 0x18) syz_open_dev$loop(0x0, 0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_S390_VCPU_FAULT(r6, 0x4008ae52, &(0x7f0000000280)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bond_slave_0\x00'}, 0x18) socket$inet(0x2, 0x3, 0x80000000002) 23:15:18 executing program 5: r0 = socket$inet(0x10, 0x80003, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0800b5055e0bcfe87b2071") sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="24000000180007041dfffd946f6105000a070000000000000400080008001e000200ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x3da}], 0x1}, 0x0) 23:15:18 executing program 4: mkdir(0x0, 0x0) get_mempolicy(&(0x7f0000000000), 0x0, 0x10001, &(0x7f0000ffc000/0x2000)=nil, 0x4) open(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x168}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000680)='status\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) restart_syscall() perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x332, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x26cf830d48838d30) 23:15:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) [ 390.237228][T13027] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 390.261591][T13028] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 0, id = 0 23:15:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)) r1 = socket$kcm(0x2, 0x3, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:18 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, 0x0, &(0x7f0000000040)) 23:15:18 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, 0x0, &(0x7f0000000040)) 23:15:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)) r1 = socket$kcm(0x2, 0x3, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x44) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000380)={0x3, 0x2, @start={0x4, 0x1}}) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:18 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, 0x0, &(0x7f0000000040)) 23:15:18 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000000000ffff6525d24cfebe1e08977b8bec5b515facd4e394a6164b4beedf3a48afed53053d5f95c4f2be4b3b4d4ecfbb3cd806935b5065095be239fa64f9f33452cf2aa3e7bf68fcc52992af7b01837b7706b27d2fa436"], 0x18}}], 0x1, 0x0) 23:15:18 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 23:15:18 executing program 4: write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) sendmsg(0xffffffffffffffff, 0x0, 0x0) 23:15:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x44) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:19 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), 0x0) 23:15:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2}}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000540)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r2, 0x1}}, 0x18) syz_open_dev$loop(0x0, 0x5, 0x0) 23:15:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) 23:15:19 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x520100, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="6744669800000000fcff01040000000065177e6d06589e03469637a7267592938766010a35efd29affe2009efdc31a381587a53c0d00000000010003e9e841e84f03d05ebc7e87c10dfc8b2cf1fd86fbcd578bcd3e51a594acdea573d84d62215d3e9e1c3ce9db868d4ee3bc0b06f8865611d9e5a0a652c1a8285e1629b0e097e78390c268b4919ba00c2f81d8ebc88648339483572c99ff41f106765c66d313313f8479328c62726038681f6f66943bc0347fc1aa918f13a1e456de840a334085ee5ad56dbd8d027120d49deb92c530d75197d928a5f717d65887ff134d676704250000"], 0x74) sendfile(r0, r0, &(0x7f0000000200), 0xa198) 23:15:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) sigaltstack(&(0x7f0000433000/0x4000)=nil, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00012, 0x0, 0x0, 0x0, 0x2000000000002) 23:15:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x3, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:19 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), 0x0) 23:15:19 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040), 0xb9) 23:15:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:19 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x10000000000004}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x48, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0xa9, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) 23:15:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x3, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:19 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xffdc) 23:15:19 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f0000000280), 0x0) 23:15:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:20 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x802, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) write$UHID_CREATE(r0, &(0x7f0000000200)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000140)=""/164, 0xa4}, 0x120) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x119) sendfile(r0, r1, &(0x7f0000d83ff8), 0x40008000ffffdffe) [ 391.904843][T13125] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:15:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 392.094886][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.102599][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.110310][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.117969][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.125594][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.133142][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 23:15:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 392.140749][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.148373][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.156050][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.163752][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.171355][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.178938][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.186586][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.194273][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.202486][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.210149][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.217754][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.225359][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.232926][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.240535][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.248123][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.255725][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.263263][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.270906][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.278515][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.286330][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.293977][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.301641][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.309269][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.316947][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.324589][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.332153][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.340848][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.348463][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.356104][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.363713][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.371315][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.378937][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.386558][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.394190][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.401732][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.409441][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.417041][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.424747][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.432320][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 23:15:20 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) [ 392.439935][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.447528][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.455137][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.462688][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.470310][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.477893][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.485531][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.493073][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.500704][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.508300][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.515925][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.523511][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.531212][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.538814][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.546433][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.554023][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.561614][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.569199][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.576835][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.584459][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.592020][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.600000][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.607614][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.615254][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.622840][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.630427][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.638045][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 23:15:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) exit(0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 392.645719][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.653321][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.660918][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.668517][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.676115][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.683604][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.691263][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.698841][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.706480][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.714126][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.726884][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.734519][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.742121][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.749714][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.757296][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.764878][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.772430][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.780008][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.787610][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.795192][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.802780][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.810378][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.817953][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.825537][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.833091][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.840703][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.848298][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.855884][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.863432][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.871020][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.878606][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.886180][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.893738][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.901335][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.908923][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.916503][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.924087][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.931634][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.939226][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.947257][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.954852][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.962414][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.970011][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.977607][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.985159][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 392.992685][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.000280][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.007849][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.016555][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.024138][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.031704][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.039347][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.046932][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.054536][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.062062][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.069686][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.077269][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.084876][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.092466][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.100053][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.107693][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.115403][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.122951][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.130538][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.138151][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.145753][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.153310][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.160934][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.168540][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.176159][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.183703][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.191298][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.198884][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.206464][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.214044][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.221569][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.229152][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.236744][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.244336][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.251948][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.259612][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.267197][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.274834][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.282375][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.289967][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 23:15:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) exit(0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:21 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) 23:15:21 executing program 2: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@dev]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 393.297587][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.305184][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.312721][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.320302][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.327900][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.335534][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.343086][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 393.369313][ T30] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 23:15:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) fallocate(r0, 0x0, 0x0, 0x10000101) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) gettid() 23:15:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:21 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:15:21 executing program 2: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:15:21 executing program 5: 23:15:21 executing program 2: 23:15:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:21 executing program 4: 23:15:21 executing program 5: 23:15:22 executing program 4: 23:15:22 executing program 2: 23:15:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) exit(0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:22 executing program 5: 23:15:22 executing program 0: 23:15:22 executing program 4: 23:15:22 executing program 5: 23:15:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:22 executing program 2: 23:15:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:22 executing program 5: 23:15:22 executing program 2: 23:15:22 executing program 4: 23:15:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) 23:15:22 executing program 0: 23:15:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:22 executing program 5: 23:15:22 executing program 2: 23:15:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:23 executing program 4: 23:15:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) 23:15:23 executing program 0: 23:15:23 executing program 5: 23:15:23 executing program 2: 23:15:23 executing program 5: 23:15:23 executing program 4: 23:15:23 executing program 0: 23:15:23 executing program 2: 23:15:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) 23:15:23 executing program 0: 23:15:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:23 executing program 5: 23:15:23 executing program 2: 23:15:23 executing program 4: 23:15:23 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:23 executing program 0: 23:15:24 executing program 5: 23:15:24 executing program 0: 23:15:24 executing program 2: 23:15:24 executing program 4: 23:15:24 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:24 executing program 4: 23:15:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:24 executing program 5: 23:15:24 executing program 0: 23:15:24 executing program 2: 23:15:24 executing program 4: 23:15:24 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:24 executing program 2: 23:15:24 executing program 4: 23:15:24 executing program 0: 23:15:25 executing program 5: 23:15:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) 23:15:25 executing program 2: 23:15:25 executing program 0: 23:15:25 executing program 4: 23:15:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r1 = gettid() exit(0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:25 executing program 5: 23:15:25 executing program 2: 23:15:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) 23:15:25 executing program 5: 23:15:25 executing program 0: 23:15:25 executing program 2: 23:15:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) 23:15:25 executing program 4: 23:15:26 executing program 0: 23:15:26 executing program 5: 23:15:26 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:15:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r1 = gettid() exit(0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x66, 0x0, &(0x7f0000001240)) 23:15:26 executing program 5: r0 = socket(0x1e, 0x5, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000700)=[{&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000002c0)="be", 0x1}], 0x1}], 0x1, 0x0) 23:15:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r0, r0, &(0x7f0000000180)=0x74000000, 0x20000005) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, 0x0) 23:15:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0xc04}, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r2, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, r3+30000000}}, 0x0) r4 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000000)={0x2001}) 23:15:26 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fallocate(r0, 0x0, 0x0, 0x8020003) 23:15:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r1 = gettid() exit(0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:26 executing program 0: getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)={'filter\x00'}, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300), 0x14) unshare(0x40000000) 23:15:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r0 = gettid() exit(0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 399.008284][T13396] IPVS: ftp: loaded support on port[0] = 21 23:15:27 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x802, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/841], 0x119) writev(r1, &(0x7f0000000080)=[{&(0x7f0000003440)="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", 0xdc1}], 0x1) write$P9_RFLUSH(r1, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) sendfile(r0, r1, &(0x7f0000d83ff8), 0x40008000ffffdffe) 23:15:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r0 = gettid() exit(0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 399.235914][T13405] UHID_CREATE from different security context by process 164 (syz-executor.2), this is not allowed. [ 399.247851][ T30] hid (null): invalid report_count 673905898 [ 399.254554][ T30] hid (null): unknown global tag 0x78 [ 399.260260][ T30] hid (null): invalid report_count -1740081149 [ 399.266517][ T30] hid (null): unknown global tag 0xe [ 399.271970][ T30] hid (null): unknown global tag 0xe [ 399.277549][ T30] hid (null): unknown global tag 0xe 23:15:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r0 = gettid() exit(0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 399.282997][ T30] hid (null): unknown global tag 0xe [ 399.288479][ T30] hid (null): unknown global tag 0xc [ 399.293932][ T30] hid (null): unknown global tag 0xd [ 399.299322][ T30] hid (null): unknown global tag 0xe [ 399.304751][ T30] hid (null): unknown global tag 0xd4 [ 399.310459][ T30] hid (null): invalid report_count 35466 [ 399.313506][T13396] IPVS: ftp: loaded support on port[0] = 21 [ 399.316340][ T30] hid (null): unknown global tag 0xe [ 399.328081][ T30] hid (null): unknown global tag 0xc [ 399.333624][ T30] hid (null): report_id 11244 is invalid [ 399.339397][ T30] hid (null): unknown global tag 0xe [ 399.344847][ T30] hid (null): unknown global tag 0xd0 [ 399.350335][ T30] hid (null): bogus close delimiter [ 399.356219][ T30] hid (null): invalid report_count 50888 [ 399.362348][ T30] hid (null): unknown global tag 0xc [ 399.371216][ T30] hid (null): unknown global tag 0xd [ 399.376613][ T30] hid (null): bogus close delimiter [ 399.383723][ T30] hid (null): invalid report_size 7181 [ 399.392640][ T30] hid (null): unknown global tag 0x78 [ 399.398323][ T30] hid (null): usage index exceeded [ 399.403491][ T30] hid (null): usage index exceeded [ 399.408710][ T30] hid (null): unknown global tag 0xa9 [ 399.414741][ T30] hid (null): unknown global tag 0xd [ 399.425386][ T30] hid (null): unknown global tag 0xe [ 399.430740][ T30] hid (null): unknown global tag 0x69 [ 399.436207][ T30] hid (null): unknown global tag 0xc [ 399.441701][ T30] hid (null): unknown global tag 0xc [ 399.447132][ T30] hid (null): unknown global tag 0xd4 [ 399.452559][ T30] hid (null): report_id 0 is invalid [ 399.457943][ T30] hid (null): invalid report_count -1571276408 [ 399.506482][T13412] ptrace attach of ""[13413] was attempted by "/root/syz-executor.1"[13412] 23:15:27 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r1 = gettid() exit(0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 399.570668][ T30] hid-generic 0000:0000:0004.0004: invalid report_count 673905898 [ 399.580423][ T30] hid-generic 0000:0000:0004.0004: item 0 4 1 9 parsing failed [ 399.588598][ T30] hid-generic: probe of 0000:0000:0004.0004 failed with error -22 23:15:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:27 executing program 5: lseek(0xffffffffffffffff, 0x0, 0x4) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0), 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_submit(0x0, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000002c0)={0x31}) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x0, 0xfffffffffffffffe) 23:15:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) r5 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r5, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, r6+30000000}}, 0x0) r7 = dup3(r5, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000000)={0x2001}) 23:15:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) 23:15:28 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x4) 23:15:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:28 executing program 5: sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0), 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r2, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000002c0)={0x31}) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x0, 0x0) 23:15:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) fallocate(r0, 0x0, 0x0, 0x10000101) open(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 23:15:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendto$unix(0xffffffffffffffff, &(0x7f0000000100), 0x14ded905162a6c92, 0x0, 0x0, 0xfffffffffffffec6) sendfile(r1, r2, 0x0, 0x20000022) 23:15:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) fallocate(r0, 0x0, 0x0, 0x10000101) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000080)) [ 400.459003][T13467] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 400.469427][T13467] CPU: 1 PID: 13467 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 400.477463][T13467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.487558][T13467] Call Trace: [ 400.490887][T13467] dump_stack+0x191/0x1f0 [ 400.495255][T13467] dump_header+0x1e7/0xd00 [ 400.499868][T13467] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 400.506094][T13467] ? ___ratelimit+0x542/0x720 [ 400.510813][T13467] ? task_will_free_mem+0x2c9/0x810 [ 400.516060][T13467] oom_kill_process+0x210/0x560 [ 400.520961][T13467] out_of_memory+0x1796/0x1c70 [ 400.525770][T13467] ? kmsan_internal_set_origin+0x6a/0xb0 [ 400.531453][T13467] memory_max_write+0x90b/0xb60 [ 400.536362][T13467] ? memory_max_show+0x1b0/0x1b0 [ 400.541331][T13467] cgroup_file_write+0x41a/0x8e0 [ 400.546583][T13467] ? cgroup_seqfile_stop+0x150/0x150 [ 400.551898][T13467] kernfs_fop_write+0x55f/0x840 [ 400.556785][T13467] ? kernfs_fop_read+0x9a0/0x9a0 [ 400.561742][T13467] __vfs_write+0x1a9/0xcb0 [ 400.566210][T13467] ? kmsan_internal_set_origin+0x6a/0xb0 [ 400.571976][T13467] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 400.578094][T13467] __kernel_write+0x208/0x5f0 [ 400.582818][T13467] write_pipe_buf+0x1c0/0x270 [ 400.587537][T13467] __splice_from_pipe+0x484/0xe80 [ 400.592605][T13467] ? default_file_splice_write+0x3c0/0x3c0 [ 400.598479][T13467] default_file_splice_write+0x1ee/0x3c0 [ 400.604160][T13467] direct_splice_actor+0x19e/0x200 [ 400.609327][T13467] splice_direct_to_actor+0x852/0x1130 [ 400.614829][T13467] ? do_splice_direct+0x580/0x580 [ 400.619919][T13467] do_splice_direct+0x342/0x580 [ 400.624818][T13467] do_sendfile+0x1010/0x1d20 [ 400.629466][T13467] __se_sys_sendfile64+0x2bb/0x360 [ 400.634625][T13467] ? syscall_return_slowpath+0x90/0x610 [ 400.640203][T13467] __x64_sys_sendfile64+0x56/0x70 [ 400.645284][T13467] do_syscall_64+0xb6/0x160 [ 400.649823][T13467] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 400.655742][T13467] RIP: 0033:0x459ef9 [ 400.659670][T13467] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 400.679316][T13467] RSP: 002b:00007fc964263c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 400.687792][T13467] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459ef9 [ 400.695799][T13467] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 400.703798][T13467] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 400.711794][T13467] R10: 0000000020000022 R11: 0000000000000246 R12: 00007fc9642646d4 [ 400.720308][T13467] R13: 00000000004c7ab0 R14: 00000000004dd8f0 R15: 00000000ffffffff [ 400.729455][T13467] memory: usage 16992kB, limit 0kB, failcnt 2 [ 400.735627][T13467] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 400.742498][T13467] Memory cgroup stats for /syz0: [ 400.742799][T13467] anon 13660160 [ 400.742799][T13467] file 675840 [ 400.742799][T13467] kernel_stack 655360 [ 400.742799][T13467] slab 1458176 [ 400.742799][T13467] sock 0 [ 400.742799][T13467] shmem 540672 [ 400.742799][T13467] file_mapped 0 [ 400.742799][T13467] file_dirty 0 [ 400.742799][T13467] file_writeback 0 [ 400.742799][T13467] anon_thp 12582912 [ 400.742799][T13467] inactive_anon 540672 [ 400.742799][T13467] active_anon 13574144 [ 400.742799][T13467] inactive_file 0 [ 400.742799][T13467] active_file 0 [ 400.742799][T13467] unevictable 0 [ 400.742799][T13467] slab_reclaimable 143360 [ 400.742799][T13467] slab_unreclaimable 1314816 23:15:28 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r1 = gettid() exit(0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@empty}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) dup2(0xffffffffffffffff, r3) [ 400.742799][T13467] pgfault 4290 [ 400.742799][T13467] pgmajfault 0 [ 400.742799][T13467] workingset_refault 0 [ 400.742799][T13467] workingset_activate 0 [ 400.742799][T13467] workingset_nodereclaim 0 [ 400.742799][T13467] pgrefill 0 [ 400.742799][T13467] pgscan 0 [ 400.742799][T13467] pgsteal 0 [ 400.742799][T13467] pgactivate 0 [ 400.838936][T13467] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12397,uid=0 [ 400.854632][T13467] Memory cgroup out of memory: Killed process 12397 (syz-executor.0) total-vm:72848kB, anon-rss:2220kB, file-rss:35832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 400.874937][ T1831] oom_reaper: reaped process 12397 (syz-executor.0), now anon-rss:0kB, file-rss:34872kB, shmem-rss:0kB [ 400.886154][T13467] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 400.896443][T13467] CPU: 1 PID: 13467 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 400.904374][T13467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.914459][T13467] Call Trace: [ 400.917787][T13467] dump_stack+0x191/0x1f0 [ 400.922150][T13467] dump_header+0x1e7/0xd00 [ 400.926605][T13467] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 400.932787][T13467] ? ___ratelimit+0x542/0x720 [ 400.937490][T13467] ? task_will_free_mem+0x2c9/0x810 [ 400.942827][T13467] oom_kill_process+0x210/0x560 [ 400.947713][T13467] out_of_memory+0x1796/0x1c70 [ 400.952525][T13467] memory_max_write+0x90b/0xb60 [ 400.957431][T13467] ? memory_max_show+0x1b0/0x1b0 [ 400.962407][T13467] cgroup_file_write+0x41a/0x8e0 [ 400.967392][T13467] ? cgroup_seqfile_stop+0x150/0x150 [ 400.972703][T13467] kernfs_fop_write+0x55f/0x840 [ 400.977593][T13467] ? kernfs_fop_read+0x9a0/0x9a0 [ 400.982551][T13467] __vfs_write+0x1a9/0xcb0 [ 400.987020][T13467] ? kmsan_internal_set_origin+0x6a/0xb0 [ 400.992681][T13467] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 400.998776][T13467] __kernel_write+0x208/0x5f0 [ 401.003493][T13467] write_pipe_buf+0x1c0/0x270 [ 401.008208][T13467] __splice_from_pipe+0x484/0xe80 [ 401.013259][T13467] ? default_file_splice_write+0x3c0/0x3c0 [ 401.019128][T13467] default_file_splice_write+0x1ee/0x3c0 [ 401.024808][T13467] direct_splice_actor+0x19e/0x200 [ 401.029966][T13467] splice_direct_to_actor+0x852/0x1130 [ 401.035449][T13467] ? do_splice_direct+0x580/0x580 [ 401.040526][T13467] do_splice_direct+0x342/0x580 [ 401.045421][T13467] do_sendfile+0x1010/0x1d20 [ 401.050066][T13467] __se_sys_sendfile64+0x2bb/0x360 [ 401.055639][T13467] ? syscall_return_slowpath+0x90/0x610 [ 401.061233][T13467] __x64_sys_sendfile64+0x56/0x70 [ 401.066281][T13467] do_syscall_64+0xb6/0x160 [ 401.070812][T13467] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 401.076737][T13467] RIP: 0033:0x459ef9 [ 401.080657][T13467] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 401.100372][T13467] RSP: 002b:00007fc964263c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 401.108811][T13467] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459ef9 [ 401.116808][T13467] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 401.124798][T13467] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 401.132787][T13467] R10: 0000000020000022 R11: 0000000000000246 R12: 00007fc9642646d4 [ 401.140793][T13467] R13: 00000000004c7ab0 R14: 00000000004dd8f0 R15: 00000000ffffffff [ 401.148961][T13467] memory: usage 14804kB, limit 0kB, failcnt 8 [ 401.155139][T13467] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 401.162035][T13467] Memory cgroup stats for /syz0: [ 401.162343][T13467] anon 11423744 [ 401.162343][T13467] file 675840 [ 401.162343][T13467] kernel_stack 655360 [ 401.162343][T13467] slab 1458176 [ 401.162343][T13467] sock 0 [ 401.162343][T13467] shmem 540672 [ 401.162343][T13467] file_mapped 0 [ 401.162343][T13467] file_dirty 0 [ 401.162343][T13467] file_writeback 0 [ 401.162343][T13467] anon_thp 10485760 [ 401.162343][T13467] inactive_anon 540672 [ 401.162343][T13467] active_anon 11337728 [ 401.162343][T13467] inactive_file 0 [ 401.162343][T13467] active_file 0 [ 401.162343][T13467] unevictable 0 [ 401.162343][T13467] slab_reclaimable 143360 [ 401.162343][T13467] slab_unreclaimable 1314816 [ 401.162343][T13467] pgfault 4290 [ 401.162343][T13467] pgmajfault 0 [ 401.162343][T13467] workingset_refault 0 [ 401.162343][T13467] workingset_activate 0 [ 401.162343][T13467] workingset_nodereclaim 0 [ 401.162343][T13467] pgrefill 0 [ 401.162343][T13467] pgscan 0 [ 401.162343][T13467] pgsteal 0 [ 401.162343][T13467] pgactivate 0 23:15:29 executing program 5: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000001809"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) write(r1, &(0x7f0000000080)="1fe92f7a904e7bd452bc1270231d3c42bb52d73d09efe8152ff3c8fa73f85ede29b89b6e", 0x24) [ 401.259253][T13467] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12382,uid=0 [ 401.275027][T13467] Memory cgroup out of memory: Killed process 12382 (syz-executor.0) total-vm:72716kB, anon-rss:2212kB, file-rss:35832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 401.295177][ T1831] oom_reaper: reaped process 12382 (syz-executor.0), now anon-rss:0kB, file-rss:34872kB, shmem-rss:0kB [ 401.322843][T13472] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 401.334532][T13472] CPU: 0 PID: 13472 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 401.342471][T13472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.352573][T13472] Call Trace: [ 401.355934][T13472] dump_stack+0x191/0x1f0 [ 401.360347][T13472] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 401.366348][T13472] dump_header+0x1e7/0xd00 [ 401.370834][T13472] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 401.377054][T13472] ? ___ratelimit+0x542/0x720 [ 401.381773][T13472] ? task_will_free_mem+0x2c9/0x810 [ 401.387028][T13472] oom_kill_process+0x210/0x560 [ 401.391914][T13472] out_of_memory+0x1796/0x1c70 [ 401.396732][T13472] try_charge+0x2889/0x3d70 [ 401.401315][T13472] mem_cgroup_try_charge+0xa29/0xe40 [ 401.406644][T13472] mem_cgroup_try_charge_delay+0x7e/0x140 [ 401.412407][T13472] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 401.418416][T13472] shmem_getpage_gfp+0x1f48/0x3f80 [ 401.423663][T13472] ? do_page_fault+0xbb/0x500 [ 401.428418][T13472] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 401.434339][T13472] shmem_write_begin+0x1ac/0x310 [ 401.439312][T13472] ? shmem_writepage+0x18f0/0x18f0 [ 401.444446][T13472] generic_perform_write+0x424/0x990 [ 401.449757][T13472] ? shmem_write_begin+0x310/0x310 [ 401.454920][T13472] __generic_file_write_iter+0x44e/0xa50 [ 401.460606][T13472] generic_file_write_iter+0x770/0xad0 [ 401.466111][T13472] ? __generic_file_write_iter+0xa50/0xa50 [ 401.471940][T13472] __vfs_write+0xa2c/0xcb0 [ 401.476405][T13472] vfs_write+0x481/0x920 [ 401.480697][T13472] ksys_write+0x265/0x430 [ 401.485075][T13472] __se_sys_write+0x92/0xb0 [ 401.489621][T13472] __x64_sys_write+0x4a/0x70 [ 401.494236][T13472] do_syscall_64+0xb6/0x160 [ 401.498782][T13472] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 401.504690][T13472] RIP: 0033:0x459ef9 [ 401.508612][T13472] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 401.528236][T13472] RSP: 002b:00007fc964242c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 401.536673][T13472] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 401.544677][T13472] RDX: 000000006db6e559 RSI: 0000000020000040 RDI: 0000000000000006 [ 401.552679][T13472] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 401.560664][T13472] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9642436d4 [ 401.568654][T13472] R13: 00000000004ca4c1 R14: 00000000004e2360 R15: 00000000ffffffff [ 401.577517][T13472] memory: usage 12500kB, limit 0kB, failcnt 16 [ 401.583721][T13472] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 401.590681][T13472] Memory cgroup stats for /syz0: [ 401.591027][T13472] anon 9187328 [ 401.591027][T13472] file 675840 [ 401.591027][T13472] kernel_stack 655360 [ 401.591027][T13472] slab 1458176 [ 401.591027][T13472] sock 0 [ 401.591027][T13472] shmem 540672 [ 401.591027][T13472] file_mapped 0 [ 401.591027][T13472] file_dirty 0 [ 401.591027][T13472] file_writeback 0 [ 401.591027][T13472] anon_thp 8388608 [ 401.591027][T13472] inactive_anon 540672 [ 401.591027][T13472] active_anon 9101312 [ 401.591027][T13472] inactive_file 0 [ 401.591027][T13472] active_file 0 [ 401.591027][T13472] unevictable 0 [ 401.591027][T13472] slab_reclaimable 143360 [ 401.591027][T13472] slab_unreclaimable 1314816 [ 401.591027][T13472] pgfault 4290 [ 401.591027][T13472] pgmajfault 0 [ 401.591027][T13472] workingset_refault 0 [ 401.591027][T13472] workingset_activate 0 [ 401.591027][T13472] workingset_nodereclaim 0 [ 401.591027][T13472] pgrefill 0 [ 401.591027][T13472] pgscan 0 [ 401.591027][T13472] pgsteal 0 [ 401.591027][T13472] pgactivate 0 [ 401.686346][T13472] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12370,uid=0 [ 401.702042][T13472] Memory cgroup out of memory: Killed process 12370 (syz-executor.0) total-vm:72848kB, anon-rss:2220kB, file-rss:35812kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 401.885011][ T1831] oom_reaper: reaped process 12370 (syz-executor.0), now anon-rss:0kB, file-rss:34852kB, shmem-rss:0kB [ 401.899108][T13472] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 401.912814][T13472] CPU: 0 PID: 13472 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 401.920775][T13472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.931040][T13472] Call Trace: [ 401.934373][T13472] dump_stack+0x191/0x1f0 [ 401.938752][T13472] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 401.944682][T13472] dump_header+0x1e7/0xd00 [ 401.949134][T13472] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 401.955316][T13472] ? ___ratelimit+0x542/0x720 [ 401.960017][T13472] ? task_will_free_mem+0x2c9/0x810 [ 401.965269][T13472] oom_kill_process+0x210/0x560 [ 401.970151][T13472] out_of_memory+0x1796/0x1c70 [ 401.974960][T13472] try_charge+0x2889/0x3d70 [ 401.979550][T13472] mem_cgroup_try_charge+0xa29/0xe40 [ 401.985342][T13472] mem_cgroup_try_charge_delay+0x7e/0x140 [ 401.991094][T13472] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 401.997108][T13472] shmem_getpage_gfp+0x1f48/0x3f80 [ 402.002265][T13472] ? do_page_fault+0xbb/0x500 [ 402.006999][T13472] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 402.012921][T13472] shmem_write_begin+0x1ac/0x310 [ 402.017899][T13472] ? shmem_writepage+0x18f0/0x18f0 [ 402.023031][T13472] generic_perform_write+0x424/0x990 [ 402.028342][T13472] ? shmem_write_begin+0x310/0x310 [ 402.033514][T13472] __generic_file_write_iter+0x44e/0xa50 [ 402.039211][T13472] generic_file_write_iter+0x770/0xad0 [ 402.044724][T13472] ? __generic_file_write_iter+0xa50/0xa50 [ 402.050547][T13472] __vfs_write+0xa2c/0xcb0 [ 402.055012][T13472] vfs_write+0x481/0x920 [ 402.059304][T13472] ksys_write+0x265/0x430 [ 402.063662][T13472] __se_sys_write+0x92/0xb0 [ 402.068195][T13472] __x64_sys_write+0x4a/0x70 [ 402.072825][T13472] do_syscall_64+0xb6/0x160 [ 402.077357][T13472] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 402.083265][T13472] RIP: 0033:0x459ef9 [ 402.087196][T13472] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 402.106820][T13472] RSP: 002b:00007fc964242c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 402.115266][T13472] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 402.123255][T13472] RDX: 000000006db6e559 RSI: 0000000020000040 RDI: 0000000000000006 23:15:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="390000001400810401002c000500cf182897f07930af00050000f0db3e4aa8fa85531960dbb7d58259483533a055a653b4a421556b3d5d54b3", 0x39}], 0x1}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 402.131242][T13472] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 402.139233][T13472] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9642436d4 [ 402.147220][T13472] R13: 00000000004ca4c1 R14: 00000000004e2360 R15: 00000000ffffffff [ 402.155535][T13472] memory: usage 10188kB, limit 0kB, failcnt 214 [ 402.161830][T13472] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 402.168806][T13472] Memory cgroup stats for /syz0: [ 402.169162][T13472] anon 6897664 [ 402.169162][T13472] file 675840 [ 402.169162][T13472] kernel_stack 655360 [ 402.169162][T13472] slab 1458176 [ 402.169162][T13472] sock 0 [ 402.169162][T13472] shmem 540672 [ 402.169162][T13472] file_mapped 0 [ 402.169162][T13472] file_dirty 0 [ 402.169162][T13472] file_writeback 0 [ 402.169162][T13472] anon_thp 6291456 [ 402.169162][T13472] inactive_anon 540672 [ 402.169162][T13472] active_anon 6897664 [ 402.169162][T13472] inactive_file 0 [ 402.169162][T13472] active_file 0 [ 402.169162][T13472] unevictable 0 [ 402.169162][T13472] slab_reclaimable 143360 [ 402.169162][T13472] slab_unreclaimable 1314816 23:15:30 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket(0x1e, 0x5, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000000c0)={0x0, 0x7530}, 0x10) listen(r1, 0x0) accept$inet6(r1, 0x0, 0x0) [ 402.169162][T13472] pgfault 4290 [ 402.169162][T13472] pgmajfault 0 [ 402.169162][T13472] workingset_refault 0 [ 402.169162][T13472] workingset_activate 0 [ 402.169162][T13472] workingset_nodereclaim 0 [ 402.169162][T13472] pgrefill 0 [ 402.169162][T13472] pgscan 0 [ 402.169162][T13472] pgsteal 0 [ 402.169162][T13472] pgactivate 0 [ 402.264698][T13472] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12348,uid=0 [ 402.281769][T13472] Memory cgroup out of memory: Killed process 12348 (syz-executor.0) total-vm:72716kB, anon-rss:2212kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 402.301814][ T1831] oom_reaper: reaped process 12348 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 402.318547][T13472] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 402.330035][T13472] CPU: 0 PID: 13472 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 402.338012][T13472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.348127][T13472] Call Trace: [ 402.351483][T13472] dump_stack+0x191/0x1f0 [ 402.355871][T13472] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 402.361830][T13472] dump_header+0x1e7/0xd00 [ 402.366323][T13472] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 402.372546][T13472] ? ___ratelimit+0x542/0x720 [ 402.377277][T13472] ? task_will_free_mem+0x2c9/0x810 [ 402.382543][T13472] oom_kill_process+0x210/0x560 [ 402.387488][T13472] out_of_memory+0x1796/0x1c70 [ 402.392340][T13472] try_charge+0x2889/0x3d70 [ 402.397000][T13472] mem_cgroup_try_charge+0xa29/0xe40 [ 402.402616][T13472] mem_cgroup_try_charge_delay+0x7e/0x140 [ 402.409023][T13472] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 402.415067][T13472] shmem_getpage_gfp+0x1f48/0x3f80 [ 402.420255][T13472] ? do_page_fault+0xbb/0x500 [ 402.425006][T13472] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 402.430934][T13472] shmem_write_begin+0x1ac/0x310 [ 402.435913][T13472] ? shmem_writepage+0x18f0/0x18f0 [ 402.441051][T13472] generic_perform_write+0x424/0x990 [ 402.446452][T13472] ? shmem_write_begin+0x310/0x310 [ 402.451611][T13472] __generic_file_write_iter+0x44e/0xa50 [ 402.457296][T13472] generic_file_write_iter+0x770/0xad0 [ 402.462948][T13472] ? __generic_file_write_iter+0xa50/0xa50 [ 402.468803][T13472] __vfs_write+0xa2c/0xcb0 [ 402.473292][T13472] vfs_write+0x481/0x920 [ 402.477576][T13472] ksys_write+0x265/0x430 [ 402.481953][T13472] __se_sys_write+0x92/0xb0 [ 402.486489][T13472] __x64_sys_write+0x4a/0x70 [ 402.491112][T13472] do_syscall_64+0xb6/0x160 [ 402.495648][T13472] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 402.501574][T13472] RIP: 0033:0x459ef9 [ 402.505499][T13472] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 402.525123][T13472] RSP: 002b:00007fc964242c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 402.533557][T13472] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 402.541544][T13472] RDX: 000000006db6e559 RSI: 0000000020000040 RDI: 0000000000000006 [ 402.549566][T13472] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 402.557557][T13472] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9642436d4 [ 402.565554][T13472] R13: 00000000004ca4c1 R14: 00000000004e2360 R15: 00000000ffffffff [ 402.573688][T13472] memory: usage 7880kB, limit 0kB, failcnt 226 [ 402.579973][T13472] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 402.586907][T13472] Memory cgroup stats for /syz0: [ 402.587247][T13472] anon 4661248 [ 402.587247][T13472] file 675840 [ 402.587247][T13472] kernel_stack 655360 [ 402.587247][T13472] slab 1458176 [ 402.587247][T13472] sock 0 [ 402.587247][T13472] shmem 540672 [ 402.587247][T13472] file_mapped 0 [ 402.587247][T13472] file_dirty 0 [ 402.587247][T13472] file_writeback 0 [ 402.587247][T13472] anon_thp 4194304 [ 402.587247][T13472] inactive_anon 540672 [ 402.587247][T13472] active_anon 4661248 [ 402.587247][T13472] inactive_file 0 [ 402.587247][T13472] active_file 0 [ 402.587247][T13472] unevictable 0 [ 402.587247][T13472] slab_reclaimable 143360 [ 402.587247][T13472] slab_unreclaimable 1314816 [ 402.587247][T13472] pgfault 4290 [ 402.587247][T13472] pgmajfault 0 [ 402.587247][T13472] workingset_refault 0 [ 402.587247][T13472] workingset_activate 0 [ 402.587247][T13472] workingset_nodereclaim 0 [ 402.587247][T13472] pgrefill 0 [ 402.587247][T13472] pgscan 0 [ 402.587247][T13472] pgsteal 0 [ 402.587247][T13472] pgactivate 0 [ 402.683706][T13472] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12214,uid=0 [ 402.699489][T13472] Memory cgroup out of memory: Killed process 12214 (syz-executor.0) total-vm:72716kB, anon-rss:2212kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 402.720055][ T1831] oom_reaper: reaped process 12214 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 23:15:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 402.806343][T13467] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 402.816852][T13467] CPU: 0 PID: 13467 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 402.824795][T13467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.834896][T13467] Call Trace: [ 402.839043][T13467] dump_stack+0x191/0x1f0 [ 402.843456][T13467] dump_header+0x1e7/0xd00 [ 402.847943][T13467] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 402.854176][T13467] ? ___ratelimit+0x542/0x720 [ 402.858881][T13467] ? task_will_free_mem+0x2c9/0x810 [ 402.864133][T13467] oom_kill_process+0x210/0x560 [ 402.869019][T13467] out_of_memory+0x1796/0x1c70 [ 402.873843][T13467] memory_max_write+0x90b/0xb60 [ 402.878745][T13467] ? memory_max_show+0x1b0/0x1b0 [ 402.883724][T13467] cgroup_file_write+0x41a/0x8e0 [ 402.888834][T13467] ? cgroup_seqfile_stop+0x150/0x150 [ 402.895469][T13467] kernfs_fop_write+0x55f/0x840 [ 402.900369][T13467] ? kernfs_fop_read+0x9a0/0x9a0 [ 402.905340][T13467] __vfs_write+0x1a9/0xcb0 [ 402.909820][T13467] ? kmsan_internal_set_origin+0x6a/0xb0 [ 402.915488][T13467] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 402.921686][T13467] __kernel_write+0x208/0x5f0 [ 402.926415][T13467] write_pipe_buf+0x1c0/0x270 [ 402.931132][T13467] __splice_from_pipe+0x484/0xe80 [ 402.936189][T13467] ? default_file_splice_write+0x3c0/0x3c0 [ 402.942062][T13467] default_file_splice_write+0x1ee/0x3c0 [ 402.947740][T13467] direct_splice_actor+0x19e/0x200 [ 402.952906][T13467] splice_direct_to_actor+0x852/0x1130 [ 402.958392][T13467] ? do_splice_direct+0x580/0x580 [ 402.963473][T13467] do_splice_direct+0x342/0x580 [ 402.968460][T13467] do_sendfile+0x1010/0x1d20 [ 402.973125][T13467] __se_sys_sendfile64+0x2bb/0x360 [ 402.978278][T13467] ? syscall_return_slowpath+0x90/0x610 [ 402.983858][T13467] __x64_sys_sendfile64+0x56/0x70 [ 402.988905][T13467] do_syscall_64+0xb6/0x160 [ 402.993435][T13467] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 402.999344][T13467] RIP: 0033:0x459ef9 [ 403.003271][T13467] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 403.022986][T13467] RSP: 002b:00007fc964263c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 403.031516][T13467] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459ef9 [ 403.039515][T13467] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 403.047504][T13467] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 403.055702][T13467] R10: 0000000020000022 R11: 0000000000000246 R12: 00007fc9642646d4 [ 403.063692][T13467] R13: 00000000004c7ab0 R14: 00000000004dd8f0 R15: 00000000ffffffff [ 403.072822][T13467] memory: usage 5508kB, limit 0kB, failcnt 232 [ 403.079107][T13467] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 403.086098][T13467] Memory cgroup stats for /syz0: [ 403.086440][T13467] anon 2433024 [ 403.086440][T13467] file 675840 [ 403.086440][T13467] kernel_stack 458752 [ 403.086440][T13467] slab 1458176 [ 403.086440][T13467] sock 0 23:15:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) fallocate(r0, 0x0, 0x0, 0x10000101) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x0) [ 403.086440][T13467] shmem 540672 [ 403.086440][T13467] file_mapped 0 [ 403.086440][T13467] file_dirty 0 [ 403.086440][T13467] file_writeback 0 [ 403.086440][T13467] anon_thp 2097152 [ 403.086440][T13467] inactive_anon 540672 [ 403.086440][T13467] active_anon 2433024 [ 403.086440][T13467] inactive_file 0 [ 403.086440][T13467] active_file 0 [ 403.086440][T13467] unevictable 0 [ 403.086440][T13467] slab_reclaimable 143360 [ 403.086440][T13467] slab_unreclaimable 1314816 [ 403.086440][T13467] pgfault 4290 [ 403.086440][T13467] pgmajfault 0 [ 403.086440][T13467] workingset_refault 0 [ 403.086440][T13467] workingset_activate 0 [ 403.086440][T13467] workingset_nodereclaim 0 [ 403.086440][T13467] pgrefill 0 [ 403.086440][T13467] pgscan 0 [ 403.086440][T13467] pgsteal 0 [ 403.086440][T13467] pgactivate 0 [ 403.181787][T13467] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12222,uid=0 23:15:31 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r1 = gettid() exit(0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 403.197519][T13467] Memory cgroup out of memory: Killed process 12222 (syz-executor.0) total-vm:72584kB, anon-rss:2204kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 403.217416][T13467] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 403.218992][ T1831] oom_reaper: reaped process 12222 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 403.227740][T13467] CPU: 0 PID: 13467 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 403.246682][T13467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 403.256815][T13467] Call Trace: [ 403.260186][T13467] dump_stack+0x191/0x1f0 [ 403.264590][T13467] dump_header+0x1e7/0xd00 [ 403.269082][T13467] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 403.275316][T13467] ? ___ratelimit+0x542/0x720 [ 403.280056][T13467] ? task_will_free_mem+0x2c9/0x810 [ 403.285350][T13467] oom_kill_process+0x210/0x560 [ 403.290294][T13467] out_of_memory+0x1796/0x1c70 [ 403.295138][T13467] memory_max_write+0x90b/0xb60 [ 403.300053][T13467] ? memory_max_show+0x1b0/0x1b0 [ 403.305019][T13467] cgroup_file_write+0x41a/0x8e0 [ 403.310003][T13467] ? cgroup_seqfile_stop+0x150/0x150 [ 403.315328][T13467] kernfs_fop_write+0x55f/0x840 [ 403.320214][T13467] ? kernfs_fop_read+0x9a0/0x9a0 [ 403.325339][T13467] __vfs_write+0x1a9/0xcb0 [ 403.329808][T13467] ? kmsan_internal_set_origin+0x6a/0xb0 [ 403.335497][T13467] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 403.341605][T13467] __kernel_write+0x208/0x5f0 [ 403.346354][T13467] write_pipe_buf+0x1c0/0x270 [ 403.351096][T13467] __splice_from_pipe+0x484/0xe80 [ 403.356171][T13467] ? default_file_splice_write+0x3c0/0x3c0 [ 403.362026][T13467] default_file_splice_write+0x1ee/0x3c0 [ 403.367706][T13467] direct_splice_actor+0x19e/0x200 [ 403.372861][T13467] splice_direct_to_actor+0x852/0x1130 [ 403.378345][T13467] ? do_splice_direct+0x580/0x580 [ 403.383437][T13467] do_splice_direct+0x342/0x580 [ 403.388339][T13467] do_sendfile+0x1010/0x1d20 [ 403.392989][T13467] __se_sys_sendfile64+0x2bb/0x360 [ 403.398139][T13467] ? syscall_return_slowpath+0x90/0x610 [ 403.403730][T13467] __x64_sys_sendfile64+0x56/0x70 [ 403.408795][T13467] do_syscall_64+0xb6/0x160 [ 403.413326][T13467] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 403.419238][T13467] RIP: 0033:0x459ef9 [ 403.423159][T13467] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 403.443217][T13467] RSP: 002b:00007fc964263c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 403.451912][T13467] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459ef9 [ 403.459906][T13467] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 403.468089][T13467] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 403.476079][T13467] R10: 0000000020000022 R11: 0000000000000246 R12: 00007fc9642646d4 [ 403.484083][T13467] R13: 00000000004c7ab0 R14: 00000000004dd8f0 R15: 00000000ffffffff [ 403.492255][T13467] memory: usage 3148kB, limit 0kB, failcnt 232 [ 403.498530][T13467] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 403.505533][T13467] Memory cgroup stats for /syz0: [ 403.505848][T13467] anon 204800 [ 403.505848][T13467] file 675840 [ 403.505848][T13467] kernel_stack 393216 [ 403.505848][T13467] slab 1458176 [ 403.505848][T13467] sock 0 [ 403.505848][T13467] shmem 540672 [ 403.505848][T13467] file_mapped 0 [ 403.505848][T13467] file_dirty 0 [ 403.505848][T13467] file_writeback 0 [ 403.505848][T13467] anon_thp 0 [ 403.505848][T13467] inactive_anon 540672 [ 403.505848][T13467] active_anon 204800 [ 403.505848][T13467] inactive_file 0 [ 403.505848][T13467] active_file 0 [ 403.505848][T13467] unevictable 0 [ 403.505848][T13467] slab_reclaimable 143360 [ 403.505848][T13467] slab_unreclaimable 1314816 [ 403.505848][T13467] pgfault 4290 [ 403.505848][T13467] pgmajfault 0 [ 403.505848][T13467] workingset_refault 0 [ 403.505848][T13467] workingset_activate 0 [ 403.505848][T13467] workingset_nodereclaim 0 [ 403.505848][T13467] pgrefill 0 [ 403.505848][T13467] pgscan 0 [ 403.505848][T13467] pgsteal 0 [ 403.505848][T13467] pgactivate 0 [ 403.600497][T13467] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12192,uid=0 [ 403.617146][T13467] Memory cgroup out of memory: Killed process 12192 (syz-executor.0) total-vm:72452kB, anon-rss:112kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 403.635992][ T1831] oom_reaper: reaped process 12192 (syz-executor.0), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 23:15:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x0, 0xff) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000000)="120000001200e7ef007b0000f4afd7030a7c", 0xfcd1, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xbb8) 23:15:32 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendto$unix(0xffffffffffffffff, &(0x7f0000000100), 0x14ded905162a6c92, 0x0, 0x0, 0xfffffffffffffec6) sendfile(r1, r2, 0x0, 0x20000022) 23:15:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@empty}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) 23:15:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:32 executing program 2: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x20000004e21, @multicast1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 23:15:32 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1}, 0x4) 23:15:32 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendto$unix(0xffffffffffffffff, &(0x7f0000000100), 0x14ded905162a6c92, 0x0, 0x0, 0xfffffffffffffec6) sendfile(r1, r2, 0x0, 0x20000022) 23:15:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:15:32 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendto$unix(0xffffffffffffffff, &(0x7f0000000100), 0x14ded905162a6c92, 0x0, 0x0, 0xfffffffffffffec6) sendfile(r1, r2, 0x0, 0x20000022) 23:15:32 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 23:15:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 404.521961][T13541] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 404.532765][T13541] CPU: 0 PID: 13541 Comm: syz-executor.2 Not tainted 5.4.0-rc3+ #0 [ 404.540704][T13541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.557401][T13541] Call Trace: [ 404.560755][T13541] dump_stack+0x191/0x1f0 [ 404.565161][T13541] dump_header+0x1e7/0xd00 [ 404.569656][T13541] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 404.575876][T13541] ? ___ratelimit+0x542/0x720 [ 404.580607][T13541] ? task_will_free_mem+0x14c/0x810 [ 404.585869][T13541] oom_kill_process+0x210/0x560 [ 404.590795][T13541] out_of_memory+0x1796/0x1c70 [ 404.595623][T13541] ? kmsan_internal_set_origin+0x6a/0xb0 [ 404.601349][T13541] memory_max_write+0x90b/0xb60 [ 404.606336][T13541] ? memory_max_show+0x1b0/0x1b0 [ 404.611337][T13541] cgroup_file_write+0x41a/0x8e0 [ 404.616362][T13541] ? cgroup_seqfile_stop+0x150/0x150 [ 404.621731][T13541] kernfs_fop_write+0x55f/0x840 [ 404.626659][T13541] ? kernfs_fop_read+0x9a0/0x9a0 [ 404.631632][T13541] __vfs_write+0x1a9/0xcb0 [ 404.636088][T13541] ? kmsan_internal_set_origin+0x6a/0xb0 [ 404.643488][T13541] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 404.649584][T13541] __kernel_write+0x208/0x5f0 [ 404.654304][T13541] write_pipe_buf+0x1c0/0x270 [ 404.659019][T13541] __splice_from_pipe+0x484/0xe80 [ 404.664073][T13541] ? default_file_splice_write+0x3c0/0x3c0 [ 404.669930][T13541] default_file_splice_write+0x1ee/0x3c0 [ 404.675610][T13541] direct_splice_actor+0x19e/0x200 [ 404.680759][T13541] splice_direct_to_actor+0x852/0x1130 [ 404.686247][T13541] ? do_splice_direct+0x580/0x580 [ 404.691326][T13541] do_splice_direct+0x342/0x580 [ 404.696226][T13541] do_sendfile+0x1010/0x1d20 [ 404.700869][T13541] __se_sys_sendfile64+0x2bb/0x360 [ 404.706011][T13541] ? syscall_return_slowpath+0x90/0x610 [ 404.711589][T13541] __x64_sys_sendfile64+0x56/0x70 [ 404.716644][T13541] do_syscall_64+0xb6/0x160 [ 404.721177][T13541] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 404.727081][T13541] RIP: 0033:0x459ef9 [ 404.731000][T13541] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 404.750625][T13541] RSP: 002b:00007fcb4db9fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 404.759065][T13541] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459ef9 [ 404.767050][T13541] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 404.775041][T13541] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 404.783033][T13541] R10: 0000000020000022 R11: 0000000000000246 R12: 00007fcb4dba06d4 [ 404.793819][T13541] R13: 00000000004c7ab0 R14: 00000000004dd8f0 R15: 00000000ffffffff [ 404.802028][T13541] memory: usage 4476kB, limit 0kB, failcnt 8 [ 404.808112][T13541] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 404.815119][T13541] Memory cgroup stats for /syz2: 23:15:32 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 404.815438][T13541] anon 2293760 [ 404.815438][T13541] file 811008 [ 404.815438][T13541] kernel_stack 262144 [ 404.815438][T13541] slab 864256 [ 404.815438][T13541] sock 0 [ 404.815438][T13541] shmem 811008 [ 404.815438][T13541] file_mapped 0 [ 404.815438][T13541] file_dirty 0 [ 404.815438][T13541] file_writeback 0 [ 404.815438][T13541] anon_thp 2097152 [ 404.815438][T13541] inactive_anon 811008 [ 404.815438][T13541] active_anon 2203648 [ 404.815438][T13541] inactive_file 0 [ 404.815438][T13541] active_file 0 [ 404.815438][T13541] unevictable 0 [ 404.815438][T13541] slab_reclaimable 0 [ 404.815438][T13541] slab_unreclaimable 864256 [ 404.815438][T13541] pgfault 5280 [ 404.815438][T13541] pgmajfault 0 [ 404.815438][T13541] workingset_refault 0 [ 404.815438][T13541] workingset_activate 0 [ 404.815438][T13541] workingset_nodereclaim 0 [ 404.815438][T13541] pgrefill 0 [ 404.815438][T13541] pgscan 0 [ 404.815438][T13541] pgsteal 0 [ 404.815438][T13541] pgactivate 0 [ 404.910192][T13541] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=13540,uid=0 [ 404.926032][T13541] Memory cgroup out of memory: Killed process 13540 (syz-executor.2) total-vm:72848kB, anon-rss:2160kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 404.948696][ T1831] oom_reaper: reaped process 13540 (syz-executor.2), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 23:15:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 23:15:33 executing program 5: creat(&(0x7f0000000300)='./file0\x00', 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)) r1 = socket(0x10, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x2000002) r5 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r5, 0x0) read(r5, &(0x7f0000000180)=""/19, 0xfffffe47) creat(0x0, 0x0) 23:15:33 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendto$unix(0xffffffffffffffff, &(0x7f0000000100), 0x14ded905162a6c92, 0x0, 0x0, 0xfffffffffffffec6) sendfile(r1, r2, 0x0, 0x20000022) 23:15:33 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 405.406643][T12285] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 405.416731][T12285] CPU: 0 PID: 12285 Comm: syz-executor.2 Not tainted 5.4.0-rc3+ #0 [ 405.424656][T12285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.434817][T12285] Call Trace: [ 405.438150][T12285] dump_stack+0x191/0x1f0 [ 405.442513][T12285] dump_header+0x1e7/0xd00 [ 405.446971][T12285] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 405.453154][T12285] ? ___ratelimit+0x542/0x720 [ 405.457861][T12285] ? task_will_free_mem+0x2c9/0x810 [ 405.463097][T12285] oom_kill_process+0x210/0x560 [ 405.467993][T12285] out_of_memory+0x1796/0x1c70 [ 405.472785][T12285] ? kmsan_internal_set_origin+0x6a/0xb0 [ 405.478461][T12285] try_charge+0x2889/0x3d70 [ 405.483133][T12285] mem_cgroup_try_charge+0xa29/0xe40 [ 405.488478][T12285] mem_cgroup_try_charge_delay+0x7e/0x140 [ 405.494690][T12285] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 405.500625][T12285] handle_mm_fault+0x522b/0x9f70 [ 405.505664][T12285] do_user_addr_fault+0x905/0x1510 [ 405.510834][T12285] __do_page_fault+0x1a2/0x410 [ 405.515627][T12285] do_page_fault+0xbb/0x500 [ 405.520170][T12285] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 405.525582][T12285] page_fault+0x4e/0x60 [ 405.529753][T12285] RIP: 0033:0x474c0d [ 405.533769][T12285] Code: 54 55 53 48 81 ec 28 21 00 00 8b 8f c0 00 00 00 85 c9 0f 85 4d 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 01 00 00 <48> 89 bc 24 00 01 00 00 48 89 fb 41 bd 00 00 00 00 c7 84 24 e0 00 [ 405.553407][T12285] RSP: 002b:0000000000a6d5f0 EFLAGS: 00010246 [ 405.560019][T12285] RAX: 0000000000a6d710 RBX: 0000000000715f20 RCX: 00000000ffffffff [ 405.568010][T12285] RDX: 0000000000a6fcc0 RSI: 00000000004bf8af RDI: 0000000000715f20 [ 405.576002][T12285] RBP: 0000000000a6fc90 R08: 0000000000a76c70 R09: 00000000004bf8af [ 405.583991][T12285] R10: 00000000018fd940 R11: 0000000000000246 R12: 00000000004bf8af [ 405.591980][T12285] R13: 0000000000a6fcc0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 405.600185][T12285] memory: usage 1028kB, limit 0kB, failcnt 35 [ 405.606379][T12285] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 405.613245][T12285] Memory cgroup stats for /syz2: [ 405.613546][T12285] anon 126976 [ 405.613546][T12285] file 65536 [ 405.613546][T12285] kernel_stack 0 [ 405.613546][T12285] slab 864256 [ 405.613546][T12285] sock 0 [ 405.613546][T12285] shmem 65536 [ 405.613546][T12285] file_mapped 0 [ 405.613546][T12285] file_dirty 0 [ 405.613546][T12285] file_writeback 0 [ 405.613546][T12285] anon_thp 0 [ 405.613546][T12285] inactive_anon 0 [ 405.613546][T12285] active_anon 36864 [ 405.613546][T12285] inactive_file 0 [ 405.613546][T12285] active_file 0 [ 405.613546][T12285] unevictable 0 [ 405.613546][T12285] slab_reclaimable 0 [ 405.613546][T12285] slab_unreclaimable 864256 [ 405.613546][T12285] pgfault 5280 [ 405.613546][T12285] pgmajfault 0 [ 405.613546][T12285] workingset_refault 0 [ 405.613546][T12285] workingset_activate 0 [ 405.613546][T12285] workingset_nodereclaim 0 [ 405.613546][T12285] pgrefill 0 [ 405.613546][T12285] pgscan 0 [ 405.613546][T12285] pgsteal 0 [ 405.613546][T12285] pgactivate 0 [ 405.613546][T12285] pgdeactivate 0 [ 405.709877][T12285] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12285,uid=0 [ 405.725558][T12285] Memory cgroup out of memory: Killed process 12285 (syz-executor.2) total-vm:72452kB, anon-rss:112kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 405.744807][ T1831] oom_reaper: reaped process 12285 (syz-executor.2), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 23:15:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x0, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 407.373222][T13604] IPVS: ftp: loaded support on port[0] = 21 [ 407.506647][T13604] chnl_net:caif_netlink_parms(): no params data found [ 407.561730][T13604] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.569042][T13604] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.578002][T13604] device bridge_slave_0 entered promiscuous mode [ 407.587826][T13604] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.595113][T13604] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.603178][T13604] device bridge_slave_1 entered promiscuous mode [ 407.634072][T13604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.646805][T13604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.670095][T13604] team0: Port device team_slave_0 added [ 407.678357][T13604] team0: Port device team_slave_1 added [ 407.739142][T13604] device hsr_slave_0 entered promiscuous mode [ 407.784643][T13604] device hsr_slave_1 entered promiscuous mode [ 407.844090][T13604] debugfs: Directory 'hsr0' with parent '/' already present! [ 407.908924][T13604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.927743][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 407.942202][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 407.950572][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 407.962976][T13604] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.975809][T13608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 407.985236][T13608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 407.994352][T13608] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.001471][T13608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.010580][T13608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 408.022252][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 408.031983][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 408.041051][ T3691] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.048271][ T3691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.073138][T13608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 408.101186][T13608] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 408.110733][T13608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 408.125675][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 408.142698][T13604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.154702][T13604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 408.163439][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 408.190257][T13604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.360719][T13616] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 408.371585][T13616] CPU: 0 PID: 13616 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 408.379525][T13616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.389617][T13616] Call Trace: [ 408.392919][T13616] dump_stack+0x191/0x1f0 [ 408.397260][T13616] dump_header+0x1e7/0xd00 [ 408.401695][T13616] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 408.407888][T13616] ? ___ratelimit+0x542/0x720 [ 408.412596][T13616] ? task_will_free_mem+0x14c/0x810 [ 408.417807][T13616] oom_kill_process+0x210/0x560 [ 408.422689][T13616] out_of_memory+0x1796/0x1c70 [ 408.427462][T13616] ? kmsan_internal_set_origin+0x6a/0xb0 [ 408.433121][T13616] memory_max_write+0x90b/0xb60 [ 408.437997][T13616] ? memory_max_show+0x1b0/0x1b0 [ 408.442972][T13616] cgroup_file_write+0x41a/0x8e0 [ 408.448075][T13616] ? cgroup_seqfile_stop+0x150/0x150 [ 408.453411][T13616] kernfs_fop_write+0x55f/0x840 [ 408.458345][T13616] ? kernfs_fop_read+0x9a0/0x9a0 [ 408.463290][T13616] __vfs_write+0x1a9/0xcb0 [ 408.467728][T13616] ? kmsan_internal_set_origin+0x6a/0xb0 [ 408.473380][T13616] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 408.479517][T13616] __kernel_write+0x208/0x5f0 [ 408.484244][T13616] write_pipe_buf+0x1c0/0x270 [ 408.488934][T13616] __splice_from_pipe+0x484/0xe80 [ 408.493968][T13616] ? default_file_splice_write+0x3c0/0x3c0 [ 408.499798][T13616] default_file_splice_write+0x1ee/0x3c0 [ 408.505457][T13616] direct_splice_actor+0x19e/0x200 [ 408.510611][T13616] splice_direct_to_actor+0x852/0x1130 [ 408.516078][T13616] ? do_splice_direct+0x580/0x580 [ 408.521125][T13616] do_splice_direct+0x342/0x580 [ 408.526101][T13616] do_sendfile+0x1010/0x1d20 [ 408.530719][T13616] __se_sys_sendfile64+0x2bb/0x360 [ 408.535842][T13616] ? syscall_return_slowpath+0x90/0x610 [ 408.541400][T13616] __x64_sys_sendfile64+0x56/0x70 [ 408.546432][T13616] do_syscall_64+0xb6/0x160 [ 408.550946][T13616] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 408.556856][T13616] RIP: 0033:0x459ef9 [ 408.560758][T13616] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 408.580367][T13616] RSP: 002b:00007f0fd5e7ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 408.588801][T13616] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459ef9 [ 408.596776][T13616] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 408.604760][T13616] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 408.612731][T13616] R10: 0000000020000022 R11: 0000000000000246 R12: 00007f0fd5e7b6d4 [ 408.620717][T13616] R13: 00000000004c7ab0 R14: 00000000004dd8f0 R15: 00000000ffffffff [ 408.628890][T13616] memory: usage 8492kB, limit 0kB, failcnt 242 [ 408.635182][T13616] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 408.642050][T13616] Memory cgroup stats for /syz0: [ 408.642387][T13616] anon 2203648 [ 408.642387][T13616] file 4464640 [ 408.642387][T13616] kernel_stack 196608 [ 408.642387][T13616] slab 1458176 [ 408.642387][T13616] sock 0 [ 408.642387][T13616] shmem 4329472 [ 408.642387][T13616] file_mapped 0 [ 408.642387][T13616] file_dirty 0 [ 408.642387][T13616] file_writeback 0 [ 408.642387][T13616] anon_thp 2097152 [ 408.642387][T13616] inactive_anon 4325376 [ 408.642387][T13616] active_anon 2203648 [ 408.642387][T13616] inactive_file 0 [ 408.642387][T13616] active_file 0 [ 408.642387][T13616] unevictable 0 [ 408.642387][T13616] slab_reclaimable 143360 [ 408.642387][T13616] slab_unreclaimable 1314816 [ 408.642387][T13616] pgfault 4356 [ 408.642387][T13616] pgmajfault 0 [ 408.642387][T13616] workingset_refault 0 [ 408.642387][T13616] workingset_activate 0 [ 408.642387][T13616] workingset_nodereclaim 0 [ 408.642387][T13616] pgrefill 0 [ 408.642387][T13616] pgscan 0 [ 408.642387][T13616] pgsteal 0 [ 408.642387][T13616] pgactivate 0 [ 408.737974][T13616] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=13611,uid=0 23:15:36 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendto$unix(0xffffffffffffffff, &(0x7f0000000100), 0x14ded905162a6c92, 0x0, 0x0, 0xfffffffffffffec6) sendfile(r1, r2, 0x0, 0x20000022) 23:15:36 executing program 5: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xffffffff, 0x0, 0x0, 0x19}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 23:15:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x0, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:36 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendto$unix(0xffffffffffffffff, &(0x7f0000000100), 0x14ded905162a6c92, 0x0, 0x0, 0xfffffffffffffec6) sendfile(r1, r2, 0x0, 0x20000022) 23:15:36 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:36 executing program 4: [ 408.753679][T13616] Memory cgroup out of memory: Killed process 13611 (syz-executor.0) total-vm:72720kB, anon-rss:2148kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 408.776928][ T1831] oom_reaper: reaped process 13611 (syz-executor.0), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 408.858650][T13604] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 408.868714][T13604] CPU: 1 PID: 13604 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 408.876645][T13604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.886744][T13604] Call Trace: [ 408.890101][T13604] dump_stack+0x191/0x1f0 [ 408.894500][T13604] dump_header+0x1e7/0xd00 [ 408.898982][T13604] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 408.905195][T13604] ? ___ratelimit+0x542/0x720 [ 408.909930][T13604] ? task_will_free_mem+0x2c9/0x810 [ 408.914802][T13622] ptrace attach of ""[13624] was attempted by "/root/syz-executor.1"[13622] [ 408.915199][T13604] oom_kill_process+0x210/0x560 [ 408.928762][T13604] out_of_memory+0x1796/0x1c70 [ 408.933596][T13604] ? kmsan_internal_set_origin+0x6a/0xb0 [ 408.939302][T13604] try_charge+0x2889/0x3d70 [ 408.943917][T13604] mem_cgroup_try_charge+0xa29/0xe40 [ 408.949286][T13604] mem_cgroup_try_charge_delay+0x7e/0x140 [ 408.955080][T13604] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 408.961032][T13604] handle_mm_fault+0x522b/0x9f70 [ 408.966057][T13604] do_user_addr_fault+0x905/0x1510 [ 408.971264][T13604] __do_page_fault+0x1a2/0x410 [ 408.976135][T13604] do_page_fault+0xbb/0x500 [ 408.980712][T13604] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 408.986144][T13604] page_fault+0x4e/0x60 [ 408.990331][T13604] RIP: 0033:0x403a42 [ 408.994275][T13604] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 d9 8e 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 f9 43 05 00 48 [ 409.013924][T13604] RSP: 002b:0000000000a6ecc0 EFLAGS: 00010246 [ 409.020040][T13604] RAX: 0000000000000000 RBX: 0000000000063b61 RCX: 00000000004139b0 [ 409.028069][T13604] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000a6fdf0 [ 409.036180][T13604] RBP: 0000000000000002 R08: 0000000000000001 R09: 000000000275d940 [ 409.044209][T13604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 409.052222][T13604] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 409.060404][T13604] memory: usage 6016kB, limit 0kB, failcnt 257 [ 409.066665][T13604] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 409.073531][T13604] Memory cgroup stats for /syz0: [ 409.073938][T13604] anon 0 [ 409.073938][T13604] file 4464640 [ 409.073938][T13604] kernel_stack 0 [ 409.073938][T13604] slab 1458176 [ 409.073938][T13604] sock 0 [ 409.073938][T13604] shmem 4329472 [ 409.073938][T13604] file_mapped 0 [ 409.073938][T13604] file_dirty 0 [ 409.073938][T13604] file_writeback 0 23:15:37 executing program 4: 23:15:37 executing program 5: [ 409.073938][T13604] anon_thp 0 [ 409.073938][T13604] inactive_anon 4325376 [ 409.073938][T13604] active_anon 0 [ 409.073938][T13604] inactive_file 0 [ 409.073938][T13604] active_file 0 [ 409.073938][T13604] unevictable 0 [ 409.073938][T13604] slab_reclaimable 143360 [ 409.073938][T13604] slab_unreclaimable 1314816 [ 409.073938][T13604] pgfault 4356 [ 409.073938][T13604] pgmajfault 0 [ 409.073938][T13604] workingset_refault 0 [ 409.073938][T13604] workingset_activate 0 [ 409.073938][T13604] workingset_nodereclaim 0 [ 409.073938][T13604] pgrefill 0 23:15:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r1 = gettid() exit(0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 409.073938][T13604] pgscan 0 [ 409.073938][T13604] pgsteal 0 [ 409.073938][T13604] pgactivate 0 [ 409.167785][T13604] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=13604,uid=0 [ 409.183487][T13604] Memory cgroup out of memory: Killed process 13604 (syz-executor.0) total-vm:72456kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 23:15:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x0, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:37 executing program 5: 23:15:37 executing program 4: 23:15:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @remote, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @empty, @local}}}}}}}, 0x0) 23:15:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r1 = gettid() exit(0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:38 executing program 4: [ 410.975161][T12508] IPVS: stopping master sync thread 13028 ... [ 410.982311][T12508] device bridge_slave_1 left promiscuous mode [ 410.989159][T12508] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.035591][T12508] device bridge_slave_0 left promiscuous mode [ 411.042192][T12508] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.076016][T12508] device bridge_slave_1 left promiscuous mode [ 411.082370][T12508] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.195757][T12508] device bridge_slave_0 left promiscuous mode [ 411.202378][T12508] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.239141][T13658] IPVS: ftp: loaded support on port[0] = 21 [ 412.556171][T12508] device hsr_slave_0 left promiscuous mode [ 412.594380][T12508] device hsr_slave_1 left promiscuous mode [ 412.643880][T12508] team0 (unregistering): Port device team_slave_1 removed [ 412.656763][T12508] team0 (unregistering): Port device team_slave_0 removed [ 412.667739][T12508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.708754][T12508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.783994][T12508] bond0 (unregistering): Released all slaves [ 412.935067][T12508] device hsr_slave_0 left promiscuous mode [ 412.974633][T12508] device hsr_slave_1 left promiscuous mode [ 413.022946][T12508] team0 (unregistering): Port device team_slave_1 removed [ 413.035326][T12508] team0 (unregistering): Port device team_slave_0 removed [ 413.047899][T12508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.069572][T12508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.147473][T12508] bond0 (unregistering): Released all slaves [ 413.312491][T13658] chnl_net:caif_netlink_parms(): no params data found [ 413.352998][T13658] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.360197][T13658] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.368540][T13658] device bridge_slave_0 entered promiscuous mode [ 413.377294][T13658] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.384939][T13658] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.393028][T13658] device bridge_slave_1 entered promiscuous mode [ 413.418841][T13658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.430815][T13658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.459039][T13658] team0: Port device team_slave_0 added [ 413.467207][T13658] team0: Port device team_slave_1 added [ 413.527158][T13658] device hsr_slave_0 entered promiscuous mode [ 413.564367][T13658] device hsr_slave_1 entered promiscuous mode [ 413.648665][T13658] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.655867][T13658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.663327][T13658] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.670613][T13658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.723596][T13658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.826689][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 413.836599][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.848248][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.877009][T13658] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.894720][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 413.903672][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.910910][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.931044][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 413.940794][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.948037][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.001855][T13658] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 414.012332][T13658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 414.031848][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 414.041207][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 414.050282][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 414.059879][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 414.069219][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 414.077691][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 414.121698][T13658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.315072][T13666] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 414.325487][T13666] CPU: 0 PID: 13666 Comm: syz-executor.2 Not tainted 5.4.0-rc3+ #0 [ 414.333428][T13666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.343524][T13666] Call Trace: [ 414.346883][T13666] dump_stack+0x191/0x1f0 [ 414.351282][T13666] dump_header+0x1e7/0xd00 [ 414.355868][T13666] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 414.362057][T13666] ? ___ratelimit+0x542/0x720 [ 414.366747][T13666] ? task_will_free_mem+0x14c/0x810 [ 414.371995][T13666] oom_kill_process+0x210/0x560 [ 414.376867][T13666] out_of_memory+0x1796/0x1c70 [ 414.381648][T13666] ? kmsan_internal_set_origin+0x6a/0xb0 [ 414.387307][T13666] memory_max_write+0x90b/0xb60 [ 414.392184][T13666] ? memory_max_show+0x1b0/0x1b0 [ 414.397146][T13666] cgroup_file_write+0x41a/0x8e0 [ 414.402106][T13666] ? cgroup_seqfile_stop+0x150/0x150 [ 414.407398][T13666] kernfs_fop_write+0x55f/0x840 [ 414.412287][T13666] ? kernfs_fop_read+0x9a0/0x9a0 [ 414.417250][T13666] __vfs_write+0x1a9/0xcb0 [ 414.421725][T13666] ? kmsan_internal_set_origin+0x6a/0xb0 [ 414.427425][T13666] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 414.433558][T13666] __kernel_write+0x208/0x5f0 [ 414.438257][T13666] write_pipe_buf+0x1c0/0x270 [ 414.442952][T13666] __splice_from_pipe+0x484/0xe80 [ 414.448024][T13666] ? default_file_splice_write+0x3c0/0x3c0 [ 414.453886][T13666] default_file_splice_write+0x1ee/0x3c0 [ 414.459540][T13666] direct_splice_actor+0x19e/0x200 [ 414.464707][T13666] splice_direct_to_actor+0x852/0x1130 [ 414.470174][T13666] ? do_splice_direct+0x580/0x580 [ 414.475224][T13666] do_splice_direct+0x342/0x580 [ 414.480096][T13666] do_sendfile+0x1010/0x1d20 [ 414.484710][T13666] __se_sys_sendfile64+0x2bb/0x360 [ 414.489841][T13666] ? syscall_return_slowpath+0x90/0x610 [ 414.495401][T13666] __x64_sys_sendfile64+0x56/0x70 [ 414.500444][T13666] do_syscall_64+0xb6/0x160 [ 414.504957][T13666] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 414.510847][T13666] RIP: 0033:0x459ef9 [ 414.514782][T13666] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 414.534402][T13666] RSP: 002b:00007f184db97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 414.542831][T13666] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459ef9 [ 414.550800][T13666] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 414.558769][T13666] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 414.566747][T13666] R10: 0000000020000022 R11: 0000000000000246 R12: 00007f184db986d4 [ 414.574728][T13666] R13: 00000000004c7ab0 R14: 00000000004dd8f0 R15: 00000000ffffffff [ 414.585285][T13666] memory: usage 7200kB, limit 0kB, failcnt 44 [ 414.591398][T13666] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 414.598328][T13666] Memory cgroup stats for /syz2: [ 414.598627][T13666] anon 2207744 [ 414.598627][T13666] file 3579904 [ 414.598627][T13666] kernel_stack 196608 [ 414.598627][T13666] slab 864256 [ 414.598627][T13666] sock 0 [ 414.598627][T13666] shmem 3579904 [ 414.598627][T13666] file_mapped 0 [ 414.598627][T13666] file_dirty 0 [ 414.598627][T13666] file_writeback 0 [ 414.598627][T13666] anon_thp 2097152 [ 414.598627][T13666] inactive_anon 3514368 [ 414.598627][T13666] active_anon 2117632 [ 414.598627][T13666] inactive_file 0 [ 414.598627][T13666] active_file 0 [ 414.598627][T13666] unevictable 0 [ 414.598627][T13666] slab_reclaimable 0 [ 414.598627][T13666] slab_unreclaimable 864256 [ 414.598627][T13666] pgfault 5346 [ 414.598627][T13666] pgmajfault 0 [ 414.598627][T13666] workingset_refault 0 [ 414.598627][T13666] workingset_activate 0 [ 414.598627][T13666] workingset_nodereclaim 0 [ 414.598627][T13666] pgrefill 0 [ 414.598627][T13666] pgscan 0 [ 414.598627][T13666] pgsteal 0 [ 414.598627][T13666] pgactivate 0 [ 414.693632][T13666] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=13661,uid=0 23:15:42 executing program 2: pipe(0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000480)={0x20000000, 0x6, 0x100000000, 0x80000000, 0xe1, 0x0, 0x9, 0x0, 0x9, 0x8, 0x75, 0x8}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001a40)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000300)=0x1) r3 = socket$unix(0x1, 0x1, 0x0) connect(r3, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r4 = gettid() syz_open_procfs(r4, &(0x7f0000000180)='cgroup\x00') getpgrp(r4) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) r5 = syz_open_procfs(0x0, 0x0) sendfile(r3, r5, 0x0, 0x800000bf) r6 = openat$cgroup_subtree(r5, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$binfmt_misc(r6, &(0x7f0000000200)={'syz1', "c0800f880df0da70039d5498cce47d38ecab4971fcd238ebe23078467669fa212baa83465a0fe565ac8ed4f71d90627d6fccb812d82f586dcce69d464d45461be6e10c7b11b0d0a2445c3d8d3e31cdd988df38b33ebd09c3e1bbcdbb7ad3f95b4206c0322d76de64e15d4e73822ff91ef2cb7e7a249f721b62a0e79cfeb5"}, 0x82) fchdir(r0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000d65000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x70bd2d}, 0x14}}, 0x0) 23:15:42 executing program 5: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)={0x9, 0x20000000001, "eb"}, 0x0) 23:15:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:42 executing program 4: getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)={'filter\x00'}, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={r0, 0x0, 0xfff8}, 0x14) unshare(0x40000000) 23:15:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xf6, &(0x7f0000000040)={&(0x7f0000000380)=@bridge_dellink={0x28, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x3}]}]}, 0x28}}, 0x0) 23:15:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r1 = gettid() exit(0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 414.709563][T13666] Memory cgroup out of memory: Killed process 13661 (syz-executor.2) total-vm:72720kB, anon-rss:2152kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 414.729655][ T1831] oom_reaper: reaped process 13661 (syz-executor.2), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 414.828269][T13672] ptrace attach of ""[13673] was attempted by "/root/syz-executor.1"[13672] [ 414.829530][T13658] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 414.847111][T13658] CPU: 0 PID: 13658 Comm: syz-executor.2 Not tainted 5.4.0-rc3+ #0 [ 414.855049][T13658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.857085][T13675] IPVS: ftp: loaded support on port[0] = 21 [ 414.865134][T13658] Call Trace: [ 414.865188][T13658] dump_stack+0x191/0x1f0 [ 414.865247][T13658] dump_header+0x1e7/0xd00 [ 414.883204][T13658] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 414.889425][T13658] ? ___ratelimit+0x542/0x720 [ 414.894158][T13658] ? task_will_free_mem+0x2c9/0x810 [ 414.899425][T13658] oom_kill_process+0x210/0x560 [ 414.904365][T13658] out_of_memory+0x1796/0x1c70 [ 414.909193][T13658] ? kmsan_internal_set_origin+0x6a/0xb0 [ 414.914940][T13658] try_charge+0x2889/0x3d70 [ 414.919576][T13658] mem_cgroup_try_charge+0xa29/0xe40 [ 414.924945][T13658] mem_cgroup_try_charge_delay+0x7e/0x140 [ 414.930734][T13658] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 414.936691][T13658] handle_mm_fault+0x522b/0x9f70 [ 414.941735][T13658] do_user_addr_fault+0x905/0x1510 [ 414.946951][T13658] __do_page_fault+0x1a2/0x410 [ 414.951783][T13658] do_page_fault+0xbb/0x500 [ 414.956348][T13658] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 414.961772][T13658] page_fault+0x4e/0x60 [ 414.965942][T13658] RIP: 0033:0x403a42 [ 414.969862][T13658] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 d9 8e 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 f9 43 05 00 48 [ 414.989573][T13658] RSP: 002b:0000000000a6ecc0 EFLAGS: 00010246 [ 414.995667][T13658] RAX: 0000000000000000 RBX: 00000000000652a1 RCX: 00000000004139b0 [ 415.003661][T13658] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000a6fdf0 [ 415.011646][T13658] RBP: 0000000000000002 R08: 0000000000000001 R09: 000000000158e940 [ 415.019634][T13658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 415.027621][T13658] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 415.035774][T13658] memory: usage 4728kB, limit 0kB, failcnt 59 [ 415.041936][T13658] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 415.048887][T13658] Memory cgroup stats for /syz2: [ 415.049207][T13658] anon 94208 [ 415.049207][T13658] file 3579904 [ 415.049207][T13658] kernel_stack 0 [ 415.049207][T13658] slab 864256 [ 415.049207][T13658] sock 0 [ 415.049207][T13658] shmem 3579904 [ 415.049207][T13658] file_mapped 0 [ 415.049207][T13658] file_dirty 0 [ 415.049207][T13658] file_writeback 0 [ 415.049207][T13658] anon_thp 0 [ 415.049207][T13658] inactive_anon 3649536 [ 415.049207][T13658] active_anon 4096 [ 415.049207][T13658] inactive_file 0 [ 415.049207][T13658] active_file 0 [ 415.049207][T13658] unevictable 0 [ 415.049207][T13658] slab_reclaimable 0 [ 415.049207][T13658] slab_unreclaimable 864256 [ 415.049207][T13658] pgfault 5346 [ 415.049207][T13658] pgmajfault 0 [ 415.049207][T13658] workingset_refault 0 [ 415.049207][T13658] workingset_activate 0 [ 415.049207][T13658] workingset_nodereclaim 0 [ 415.049207][T13658] pgrefill 0 [ 415.049207][T13658] pgscan 0 [ 415.049207][T13658] pgsteal 0 [ 415.049207][T13658] pgactivate 0 [ 415.145100][T13658] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=13658,uid=0 [ 415.160807][T13658] Memory cgroup out of memory: Killed process 13658 (syz-executor.2) total-vm:72456kB, anon-rss:80kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 23:15:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 415.179684][ T1831] oom_reaper: reaped process 13658 (syz-executor.2), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 23:15:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000ffff0000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@deltfilter={0x64, 0x28, 0x421, 0x0, 0x0, {0x0, r4, {}, {0xf000}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, @m_ipt={0x2c, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x4}, {0x18, 0x6, "2b0aad99efd6adccd001df788e3c178969"}}}}]}}]}, 0x64}}, 0x0) 23:15:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r1 = gettid() exit(0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 415.586281][T13670] IPVS: ftp: loaded support on port[0] = 21 23:15:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r1 = gettid() exit(0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:43 executing program 5: [ 415.796075][T13698] ptrace attach of ""[13699] was attempted by "/root/syz-executor.1"[13698] 23:15:44 executing program 2: 23:15:44 executing program 5: 23:15:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r1 = gettid() exit(0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x2) sendto$inet6(r0, &(0x7f0000000100)="b4", 0x1, 0x20000003, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x1c) shutdown(r1, 0x0) [ 417.422578][T13716] IPVS: ftp: loaded support on port[0] = 21 [ 417.619851][T13716] chnl_net:caif_netlink_parms(): no params data found [ 417.655216][T13716] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.662328][T13716] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.670775][T13716] device bridge_slave_0 entered promiscuous mode [ 417.679312][T13716] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.686867][T13716] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.696911][T13716] device bridge_slave_1 entered promiscuous mode [ 417.720082][T13716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.784566][T13716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.807641][T13716] team0: Port device team_slave_0 added [ 417.816488][T13716] team0: Port device team_slave_1 added [ 417.866606][T13716] device hsr_slave_0 entered promiscuous mode [ 417.944442][T13716] device hsr_slave_1 entered promiscuous mode [ 417.983919][T13716] debugfs: Directory 'hsr0' with parent '/' already present! [ 417.994295][T12508] device bridge_slave_1 left promiscuous mode [ 418.000817][T12508] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.036448][T12508] device bridge_slave_0 left promiscuous mode [ 418.042817][T12508] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.096698][T12508] device bridge_slave_1 left promiscuous mode [ 418.103039][T12508] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.145241][T12508] device bridge_slave_0 left promiscuous mode [ 418.151604][T12508] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.514611][T12508] device hsr_slave_0 left promiscuous mode [ 419.564205][T12508] device hsr_slave_1 left promiscuous mode [ 419.632656][T12508] team0 (unregistering): Port device team_slave_1 removed [ 419.645653][T12508] team0 (unregistering): Port device team_slave_0 removed [ 419.658033][T12508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.708764][T12508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.772973][T12508] bond0 (unregistering): Released all slaves [ 419.905260][T12508] device hsr_slave_0 left promiscuous mode [ 419.944110][T12508] device hsr_slave_1 left promiscuous mode [ 420.003569][T12508] team0 (unregistering): Port device team_slave_1 removed [ 420.015688][T12508] team0 (unregistering): Port device team_slave_0 removed [ 420.028269][T12508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.090161][T12508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.163606][T12508] bond0 (unregistering): Released all slaves [ 420.363106][T13716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.378945][T13607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 420.388080][T13607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 420.401585][T13716] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.422583][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 420.432055][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 420.441028][T12195] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.448166][T12195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.457742][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 420.469032][T13607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 420.479080][T13607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 420.487927][T13607] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.495060][T13607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.649947][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 420.675322][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 420.685535][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 420.695343][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 420.723466][T13716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 420.734315][T13716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 420.748547][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 420.758116][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 420.767891][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 420.777290][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 420.786347][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 420.795952][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 420.805114][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 420.841089][T13716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.857360][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:15:49 executing program 0: 23:15:49 executing program 5: chdir(0x0) delete_module(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) open(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) 23:15:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r1 = gettid() exit(0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:49 executing program 2: ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x381000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="b000000000000000060000000000000003001ff2000000000000020000000000000000000000ffff0000010000000000000000000000000000000000000042ec0000000000000000000000000000000000000c000000ffffffff2f"], 0x5b) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x0, 0xf}}, 0x20) 23:15:49 executing program 4: 23:15:49 executing program 4: [ 421.172471][T13736] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:15:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:49 executing program 0: 23:15:49 executing program 4: 23:15:49 executing program 0: 23:15:49 executing program 4: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x18, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x4, 0x8, @binary}]}, 0x18}, 0x1, 0xf000}, 0x0) fstat(0xffffffffffffffff, 0x0) [ 421.856231][T13756] validate_nla: 76 callbacks suppressed [ 421.856256][T13756] netlink: 'syz-executor.4': attribute type 8 has an invalid length. 23:15:50 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$packet(r0, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 23:15:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r1 = gettid() exit(0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 421.906098][T13756] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 423.527332][T13775] IPVS: ftp: loaded support on port[0] = 21 [ 423.608676][T13775] chnl_net:caif_netlink_parms(): no params data found [ 423.642920][T13775] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.650224][T13775] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.658577][T13775] device bridge_slave_0 entered promiscuous mode [ 423.667051][T13775] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.674296][T13775] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.682394][T13775] device bridge_slave_1 entered promiscuous mode [ 423.705064][T13775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.717341][T13775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.740302][T13775] team0: Port device team_slave_0 added [ 423.748046][T13775] team0: Port device team_slave_1 added [ 423.806613][T13775] device hsr_slave_0 entered promiscuous mode [ 423.874769][T13775] device hsr_slave_1 entered promiscuous mode [ 423.957036][T13775] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.964380][T13775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.971848][T13775] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.979074][T13775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.030245][T13775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.045521][T12265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 424.055592][T12265] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.063700][T12265] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.073547][T12265] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 424.090505][T13775] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.103507][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 424.112489][ T3691] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.119622][ T3691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.146501][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 424.156858][ T3691] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.164094][ T3691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.173218][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 424.183168][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 424.197673][T13608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 424.219952][T13775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 424.231079][T13775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 424.245849][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 424.255857][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 424.265250][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 424.290656][T13775] 8021q: adding VLAN 0 to HW filter on device batadv0 23:15:53 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) 23:15:53 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:15:53 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) fallocate(r0, 0x0, 0x0, 0x10000101) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:15:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r1 = gettid() exit(0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:53 executing program 5: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x15, &(0x7f0000000040)={0x0, 'bond_slave_0\x00'}, 0x18) 23:15:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:53 executing program 5: 23:15:53 executing program 4: 23:15:53 executing program 0: 23:15:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:53 executing program 5: 23:15:53 executing program 4: 23:15:53 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:15:53 executing program 0: 23:15:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:53 executing program 4: 23:15:53 executing program 5: 23:15:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:54 executing program 5: 23:15:54 executing program 0: 23:15:54 executing program 4: 23:15:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:54 executing program 5: 23:15:54 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:15:54 executing program 0: 23:15:54 executing program 4: 23:15:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:54 executing program 5: 23:15:54 executing program 4: 23:15:54 executing program 5: 23:15:55 executing program 0: 23:15:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:15:55 executing program 5: 23:15:55 executing program 4: 23:15:55 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:15:55 executing program 0: 23:15:55 executing program 5: 23:15:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x0, 0x0) 23:15:55 executing program 4: 23:15:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:55 executing program 0: 23:15:55 executing program 5: 23:15:55 executing program 4: 23:15:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x0, 0x0) 23:15:56 executing program 4: 23:15:56 executing program 0: 23:15:56 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:15:56 executing program 5: 23:15:56 executing program 0: 23:15:56 executing program 4: 23:15:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x0, 0x0) 23:15:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:56 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:15:56 executing program 4: 23:15:56 executing program 0: 23:15:56 executing program 5: 23:15:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x0, &(0x7f0000000040)) 23:15:56 executing program 4: 23:15:56 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:15:57 executing program 5: 23:15:57 executing program 0: 23:15:57 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:15:57 executing program 4: 23:15:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(0x0, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x0, &(0x7f0000000040)) 23:15:57 executing program 5: 23:15:57 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:15:57 executing program 0: 23:15:57 executing program 4: 23:15:57 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:15:57 executing program 5: 23:15:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'bridge_slave_0\x00', &(0x7f00000003c0)=@ethtool_per_queue_op}) 23:15:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(0x0, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:57 executing program 0: 23:15:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x0, &(0x7f0000000040)) 23:15:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(0x0, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:57 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:15:57 executing program 5: 23:15:57 executing program 4: 23:15:58 executing program 0: 23:15:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:58 executing program 5: 23:15:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1, &(0x7f0000000040)=[0x0]) 23:15:58 executing program 4: 23:15:58 executing program 5: 23:15:58 executing program 0: 23:15:58 executing program 4: 23:15:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1, &(0x7f0000000040)=[0x0]) 23:15:58 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:15:58 executing program 4: 23:15:58 executing program 5: 23:15:58 executing program 0: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='\x15\xa0B\xe3#\x1e4C\x86\xf9\xea(\x06\xec\xc8\xc1\x8f\xa5]\x9f\xee=\xb8\xb6\xbf\xb0\x90\x1b\xab\xe8\x00i\xf4Z\x04\xd4\xea\xd3O\xc62\x86\x11\xf4\xe9\xf8\xce\xb4u\xd7\xf6G\x80\xcbW2\xb7\xff\xfcF\xa5Nv\a\x17\xd8\"7\xb1,\xb8\xa4%]\x84\xe6\x8e\x12k\x87\x91#\xbaK\xbes\xec\xe1g\x824A\x88\xb7\xc5\r\xaa\x01\x1c\xbf\xcdD*|\x02\xb1\x1fx\xa6\x85\xed\xea\xf9\xcf\xa8\x94\xcc\xe0', 0x200002, 0x0) socket$kcm(0x11, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup(r6, 0x0, 0x1ff) socket$kcm(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500), 0x1c2, 0x0, 0x0, 0x2}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0xffff, 0x4, 0x3, {0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}}}, 0x80, 0x0}, 0x4101) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') socketpair(0x9, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000018c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/128, 0x80}, {&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000800)=""/154, 0x9a}, {&(0x7f00000008c0)=""/160, 0xa0}, {&(0x7f0000000980)=""/68, 0x44}, {&(0x7f0000000a00)=""/175, 0xaf}, {&(0x7f0000000ac0)=""/89, 0x59}, {&(0x7f0000000380)=""/35, 0x23}], 0x1000000000000231, &(0x7f0000002980)=""/6, 0x6}, 0x12040) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x200600) sendmsg$kcm(r10, &(0x7f0000000240)={&(0x7f0000002a00)=@can={0x1d, r9}, 0x175, &(0x7f0000002b80)=[{&(0x7f00000003c0)="d87f3307c296fa26db03f8e2d9f897348805a03f34d7ec5e6a803d2c788e3eeeff58e808d9f57a70e82fa8886513a0bc4d0b81880ea6bbe98a877896ac4a7edccbcf3135ce66fc240d3c2be0296a5640bb4d", 0x52}], 0x1}, 0x800) 23:15:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1, &(0x7f0000000040)=[0x0]) 23:15:59 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000280)=@caif=@util={0x25, "337700f5067eb500e9308f805f9dd9ea"}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 23:15:59 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x6, &(0x7f0000000100), 0x4) close(0xffffffffffffffff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x37, 0x0, 0x0) 23:15:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16], 0xffffffdd) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1004000000015) [ 431.091066][T14055] device nr0 entered promiscuous mode 23:15:59 executing program 4: 23:15:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = gettid() exit(0x0) ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 23:15:59 executing program 4: 23:15:59 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:15:59 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x0, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000100), 0x4) syncfs(0xffffffffffffffff) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000440)=0x14) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x800, 0xb0, &(0x7f0000000340)=""/176, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x75, 0x10, &(0x7f0000000000), 0x10}, 0x70) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x800, 0x0) sendfile(r7, r7, 0x0, 0x2008000fffffffe) 23:15:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) gettid() exit(0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:15:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) gettid() exit(0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 431.668854][T14055] device nr0 entered promiscuous mode [ 431.691742][T14084] devpts: called with bogus options 23:15:59 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) fallocate(r0, 0x0, 0x0, 0x10000101) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 23:16:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) pipe(&(0x7f0000000000)) writev(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendmsg$sock(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="2df2192481f071ece83cbda4185966eb4a1d27c602da5b6d5237c668da510788c334e2cee36253371c021aa8c24c3901f2c6a52da32073ab1f4b9b7635374eca2db484445577355a9c9b45584c8a4dae8149b14776a573791a67cc796a33a0c9c28cb540b1af0661786925da98574a656caf4ec42a2779e2b31f7c48b5b42a", 0x7f}], 0x2}, 0x4000040) socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 23:16:00 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x200, 0x1) clock_gettime(0x0, &(0x7f0000000000)={0x0}) write$evdev(r0, &(0x7f0000000080)=[{{r1}}], 0x18) 23:16:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x68100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) gettid() exit(0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:16:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) fallocate(r0, 0x0, 0x0, 0x10000101) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) gettid() process_vm_writev(0x0, &(0x7f0000000180)=[{&(0x7f0000000400)=""/127, 0x7f}], 0x1, 0x0, 0x0, 0x0) 23:16:00 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) fallocate(r0, 0x0, 0x0, 0x10000101) open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x0, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x0, 0x2080}, [@IFLA_ADDRESS={0xc, 0x1, @remote}]}, 0x2c}}, 0x1) gettid() 23:16:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 23:16:00 executing program 4: 23:16:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:16:00 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000600)={@local, @empty=[0x5], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x30, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @window={0x2, 0x3}, @md5sig={0x13, 0x12, "d31c8190da8dfe461d135b075be2c1c4"}]}}}}}}}}, 0x0) 23:16:00 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000140)=ANY=[@ANYRES32=r4]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 23:16:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000a00000000000000fb0200000000000000000000000000010000000000a58440d87a000000000000000000000000000000000000000000000000000000000000000000000200000010000000000000000000e24f37e70000000000000000000000000000000000010000000000000000002465000000"], 0x90) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000035) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 23:16:00 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup3(r1, r0, 0x0) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 23:16:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x2011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f44000/0x4000)=nil, 0x50707c, 0x1000006, 0x2013, r1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 432.733332][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 432.733368][ T31] audit: type=1804 audit(1571786160.785:31): pid=14150 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/78/file0/bus" dev="ramfs" ino=36523 res=1 [ 432.761730][ T31] audit: type=1804 audit(1571786160.795:32): pid=14151 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/78/file0/file0/bus" dev="ramfs" ino=36530 res=1 23:16:00 executing program 4: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:16:00 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x9c}, {0x80000006}]}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmmsg$inet6(r1, &(0x7f0000006e80)=[{{&(0x7f00000004c0)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 23:16:01 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000100), 0x4) syncfs(0xffffffffffffffff) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000440)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x800, 0xb0, &(0x7f0000000340)=""/176, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x800, 0x0) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 23:16:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xf7) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0800b5055e0bcfe87b20") setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000240)="66ba4300b801380000ef0f22dc66b8a1008ec0c4e21db7eb5766baa000b093ee362e0f01ef65d9f9ea00480000aa00b98e0400000f32", 0x36}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 432.974748][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 432.980990][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 433.071363][T14165] devpts: called with bogus options 23:16:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 23:16:01 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, 0x0, 0x0) syncfs(r6) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000440)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x800, 0xb0, &(0x7f0000000340)=""/176, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x800, 0x0) sendfile(r7, r7, 0x0, 0x2008000fffffffe) [ 433.379366][T14181] devpts: called with bogus options 23:16:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:16:01 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/184, 0xb8}], 0x1) 23:16:01 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_aout(r0, &(0x7f00000035c0)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESDEC, @ANYBLOB="826e1e592bd2381505e8ab32e482e40fa0b90e9c4452cde726ee9ee449909c72ee1181981bf1230b539d713023d803f9f98cf823f1411e8f44b60e5d2199d96eb07b42b3dccbf77244f4748b072d17c5bb5070b222af76d803f336e91ee0c70bfce58da8be5e68c7757a0be97f9b3191b1986095b70b06ff1df3130975fb90e8e81d338fd1a79e3f460c4a5db77d74c7d16c180ba09c8da3f77ef28ec5bd724bcfac188b4f0ed7f82b5440584e2e1916653c5685d440457bc14a8569f6b9c77dc8d368783f75230fbe23582cdfd715bc743557cd3cc7b37a61dfdd42618bf9b94c4829087e76aed169e550c1dfb7cd6034bf6ab2d6a4c864863e1b21d1cd13abc914683396fae07a383cf660681fd48051a1d1e74aa7f8df895452a6609e1b23db53a71ab5d899291b5b30efbac36413d4a38b6135bbe9b663513ce2033792c4180f059ad1eadadf89534f5f05e33a8248261fbe0f3b86ec945b3abb08131c32a1152fc7b81fe87b988fb721c2428e0712f536f9eecb36f912a911db0f9f8cba92d2838eb6d1ebc2b8f0ed0da6de96dde8e7c7505bbe3ab7e92be3be494102d89ae7fe689b4ba479806a1a3b7d79a5c3d7a80054f396686bdac15fe1afc8ed8e4ee9a64c9f261d8d5fd9bf6605ad71ac375cd543653fa10511fe14267f40545fd6538f3b561e5f5078819bfb36f534f34c1d0c3e9ef2c2eee279259c607f0f377f3627715310546572df67a270f94f8e4be40175006bb701e2a61a16b12236990e9d1b15a1f85b74ef151cd9a9d15987bbd9b43d4d2813798bf2a62658a0e6a3995ec05784620622d803328ec40d14ab56b9d32d9581962c743623d2a7095dbdf1677f4b9148508cd4408e1f3ded22bdecb0b1731985070e6a367300b15eb57c18938e52ea11d7899683d934b3139986478af674cfd4602f78c64e0ea6804c47582a9aa41b52307fac5eb7ebec6107bd280b9a20171124a86c"], 0x2d9) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:16:01 executing program 1: r0 = socket$unix(0x1, 0x805, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x2) 23:16:01 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0x0) 23:16:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}}) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) [ 433.859295][T14176] devpts: called with bogus options 23:16:01 executing program 5: r0 = socket(0x18, 0x0, 0x0) getpeername(r0, 0x0, 0x0) 23:16:02 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) [ 433.977034][T14209] IPVS: ftp: loaded support on port[0] = 21 23:16:02 executing program 5: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000001809"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) write(r1, &(0x7f0000000080)="1fe92f7a904e7bd452bc1270231d3c42bb52d73d09efe8152ff3c8fa73f85ede29b8204b62663dcb16be35b2104becec99b90e533d75b32aac906f008e45290d40b5b9272248b51f7c520bb09b37", 0xfeff) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 23:16:02 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) [ 434.169760][T14211] IPVS: ftp: loaded support on port[0] = 21 23:16:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) 23:16:02 executing program 4: r0 = socket$packet(0x11, 0x8000000000000003, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20004884, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) 23:16:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:16:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket(0x2, 0x3, 0x67) sendto$unix(r1, 0x0, 0x0, 0x8844, &(0x7f00000014c0)=@abs, 0x6e) [ 434.525730][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 434.653541][T14243] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! [ 434.654009][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:16:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) 23:16:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4081, 0xff1}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:16:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) 23:16:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 23:16:02 executing program 4: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000001809"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) write(r1, &(0x7f0000000080)="1fe92f7a904e7bd452bc1270231d3c42bb52d73d09efe8152ff3c8fa73f85ede29b8204b62663dcb16be35b2104becec99b90e533d75b32aac906f008e459b0d5bb5b9272248b51f7c520bb09b6d", 0xfeff) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 23:16:03 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x4, &(0x7f0000000500)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) 23:16:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd62) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="9a07000000e800260f300fc75cf4c81319811f6c6cba410066b89e001f00d8efb902090000b800000000ba000000800f30b805000000b9e10000000f01c1b8010000000f01d9b933030000b84d000000ba000000000f3066ba430066b80070e5ae", 0x61}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:16:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) socket$inet(0x2, 0x0, 0x0) 23:16:03 executing program 0: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000001809"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) write(r1, &(0x7f0000000080)="1fe92f7a904e7bd452bc1270231d3c42bb52d73d09efe8152ff3c8fa73f85ede29b89b4b62663dcb16be35b2104becec99b90e533d75b32aac906f009b4d290d40b5b9272248b51f7c520bb09b6d", 0xfeff) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 23:16:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000ffff0000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@deltfilter={0x64, 0x28, 0x421, 0x0, 0x0, {0x0, r4, {0xf000}, {0xf000}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, @m_ipt={0x2c, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x4}, {0x18, 0x6, "2b0aad99efd6adccd001df788e3c178969"}}}}]}}]}, 0x64}}, 0x0) 23:16:03 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:16:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 23:16:03 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000500)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) accept(0xffffffffffffffff, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000000)=0x80) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000640)={[0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:16:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 23:16:03 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000001809"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) write(r1, &(0x7f0000000080)="1fe92f7a904e7bd452bc1270231d3c42bb52d73d09efe8152ff3c8fa73f85ede29b89b4b62663dcb16be35b2104becec99b90e539b75b32aac906f009b45290d40b5b9272248b51f7c520bb09b6d", 0xfeff) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 23:16:04 executing program 4: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000001809"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) write(r1, &(0x7f0000000080)="1fe92f7a904e7bd452bc1270231d3c42bb52d73d09efe8152ff3c8fa73f85ede29b8204b62663dcb16be35b2104becec99b90e533d75b32aac906f008e459b0d40b5b9272248b51f7c520bb09b6d", 0xfeff) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000fc0)}], 0x1, &(0x7f0000000740)}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 23:16:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) pipe2$9p(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000), 0x4) 23:16:04 executing program 5: mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000001300fbff0000000000000000010000000400160096a1e14f064189ccba18424d8387af80e107dbec10729887de4512fb708820bbbe8a9f4bb7bafc88a5768cb680aa9acc4ba0167aef37ae0c348b00007b05ef390e1b36cc2c05a252db3412d3f3af96a9edd3a79500"/124], 0x1}, 0x1, 0x68}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x1000000000000, 0xffffffffffffffff, 0x5) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto(0xffffffffffffffff, &(0x7f0000000000)="120000001200e7ef007b0000f4afd7030a", 0x11, 0x0, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0xbb8) 23:16:04 executing program 3: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x2, &(0x7f0000000040)={0x1, 'bond_slave_0\x00'}, 0x18) 23:16:04 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) open(0x0, 0x0, 0x2) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000440)=[{}], 0x1f2) 23:16:04 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000001300fbff0000000000000000010000000400160096a1e14f064189ccba18424d8387af80e107dbec10729887de4512fb708820bbbe8a9f4bb7bafc88a5768cb680aa9acc4ba0167aef37ae0c348b00007b05ef390e1b36cc2c05a252db3412d3f3af96a9edd3a79500"/127], 0x18}, 0x1, 0x68}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x1000000000000, 0xffffffffffffffff, 0x5) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000000)="120000001200e7ef007b0000f4afd7030a7c", 0xfcd1, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0xbb8) 23:16:04 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 23:16:04 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:16:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) 23:16:04 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x100000, 0x0) 23:16:04 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x595acc9f68856869, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=',', 0x1}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x6910a44f2a2fba34) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = dup2(r2, r2) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x100000000, 0x8000) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x6910a44f2a2fba34) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = dup2(r4, r4) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) accept4$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000340)={0x0, @remote, @initdev}, &(0x7f0000000380)=0xc) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r8}]]}}}]}, 0x68}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r11}]]}}}]}, 0x68}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r14}]]}}}]}, 0x68}}, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r17}]]}}}]}, 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) r18 = socket$netlink(0x10, 0x3, 0x0) r19 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r20}]]}}}]}, 0x68}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000980)={0x0, @multicast2, @loopback}, &(0x7f00000009c0)=0xc) r21 = socket$netlink(0x10, 0x3, 0x0) r22 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r23}]]}}}]}, 0x68}}, 0x0) r24 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r24, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x6910a44f2a2fba34) connect$inet6(r24, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r25 = dup2(r24, r24) setsockopt$inet_opts(r25, 0x0, 0x4, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r25, 0x0, 0x10, &(0x7f0000000b00)={{{@in=@dev, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000c00)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000c40)={{{@in6=@mcast2, @in6=@initdev}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000d40)=0xe8) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r26, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x6910a44f2a2fba34) connect$inet6(r26, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r27 = dup2(r26, r26) setsockopt$inet_opts(r27, 0x0, 0x4, 0x0, 0x0) getpeername$packet(r27, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000dc0)=0x14) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r28, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x6910a44f2a2fba34) connect$inet6(r28, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup2(r28, r28) ioctl$ifreq_SIOCGIFINDEX_team(r28, 0x8933, &(0x7f0000002f40)={'team0\x00'}) accept4$packet(r3, &(0x7f00000032c0), &(0x7f0000003300)=0x14, 0x800) socket$netlink(0x10, 0x3, 0x0) r29 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r29, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r29, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r30 = socket$netlink(0x10, 0x3, 0x0) r31 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r31, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r31, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r30, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r32}]]}}}]}, 0x68}}, 0x0) [ 436.527207][T14340] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 436.545913][T14340] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 436.782506][T14357] batman_adv: Cannot find parent device 23:16:04 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x155) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 23:16:04 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x161042, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x526987c9) [ 436.863969][T14363] batman_adv: Cannot find parent device [ 436.934356][T14368] batman_adv: Cannot find parent device 23:16:05 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000004c0)=""/247, 0x1a, 0xf7}, 0x20) bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x4000000000000}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) sendmsg(0xffffffffffffffff, 0x0, 0x0) [ 436.986932][T14371] batman_adv: Cannot find parent device [ 437.021826][T14363] batman_adv: Cannot find parent device 23:16:05 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) [ 437.135496][T14371] batman_adv: Cannot find parent device [ 437.337324][T14357] batman_adv: Cannot find parent device [ 437.555994][T14368] batman_adv: Cannot find parent device 23:16:05 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0x1c, 0xffffffffffffffc8, &(0x7f0000000640)="4d50b441e692763113ef8745ffa3960538bdef6e6245124e25d30800", 0x0, 0x400}, 0x28) 23:16:05 executing program 5: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0xffffff7f, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001d008105e00f80ecdb4cb9f207c804a01a000000480040000a0002000a0ada1b40d805000300c50083b8", 0x241}], 0x1}, 0x0) 23:16:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff28}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="8c96fadfe67d576a000000e4ff00", 0x0, 0x404, 0x0, 0x0, 0xfffffffffffffec6}, 0x28) 23:16:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@bridge_dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, r2}}, 0x20}}, 0x0) 23:16:06 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:16:06 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000200)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0x55}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}], 0x6}}], 0x1, 0x0, 0x0) 23:16:06 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x100000, 0x0) 23:16:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) close(r2) 23:16:06 executing program 5: 23:16:06 executing program 0: 23:16:06 executing program 3: 23:16:06 executing program 0: 23:16:06 executing program 5: 23:16:06 executing program 3: 23:16:07 executing program 4: 23:16:07 executing program 3: 23:16:07 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:16:07 executing program 4: [ 440.254479][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 440.260932][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 440.267484][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 440.273747][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:16:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x100000, 0x0) 23:16:08 executing program 0: 23:16:08 executing program 5: 23:16:08 executing program 4: 23:16:08 executing program 3: 23:16:08 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) [ 440.414362][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 440.420636][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 440.427189][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 440.433711][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 440.440374][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 440.446648][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:16:08 executing program 4: 23:16:08 executing program 3: 23:16:08 executing program 0: 23:16:08 executing program 5: 23:16:08 executing program 3: 23:16:09 executing program 4: 23:16:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x100000, 0x0) 23:16:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000280)="3007c98e31", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002840)}}], 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4d00000000) 23:16:10 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='cpu&5!!\x00\x00\x00\x01\x00\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\xb6,\xd5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xc4,K\t\x9a\x06\xef+rY\f\xf8,Y$\x9at\xf4\x1a\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042406, &(0x7f0000000280)='cpu&5!!\x00\x00\x00\x01\x00\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\xb6,\xd5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xc4,K\t\x9a\x06\xef+rY\f\xf8,Y$\x9at\xf4\x1a\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f') 23:16:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000016c0)={{{@in6=@dev, @in=@multicast1}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f00000017c0)=0xe8) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 23:16:10 executing program 3: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000100)=""/48) getsockopt$inet_mreq(r3, 0x0, 0x3d403ed7dcd2c010, &(0x7f0000000040)={@local, @dev}, &(0x7f0000000080)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x27}) pipe2$9p(&(0x7f00000000c0), 0x4000) 23:16:10 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:16:10 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:16:10 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:16:10 executing program 0: 23:16:10 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:16:10 executing program 5: 23:16:10 executing program 3: 23:16:11 executing program 1: 23:16:11 executing program 0: 23:16:11 executing program 5: [ 445.454231][ C1] net_ratelimit: 18 callbacks suppressed [ 445.459988][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 445.466065][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 445.472342][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 445.478612][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 445.485124][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 445.491268][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 445.497544][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 445.503677][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 446.494696][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 446.500722][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 450.654168][ C0] net_ratelimit: 22 callbacks suppressed [ 450.659987][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 450.666157][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 450.672456][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 450.678708][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 451.704134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 451.710166][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 451.716467][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 451.722997][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 451.729210][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 451.735249][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:16:20 executing program 4: 23:16:20 executing program 3: 23:16:20 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:16:20 executing program 5: 23:16:20 executing program 0: 23:16:20 executing program 1: 23:16:21 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:16:21 executing program 1: 23:16:21 executing program 3: 23:16:21 executing program 0: 23:16:21 executing program 5: 23:16:21 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:16:21 executing program 4: 23:16:21 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:16:21 executing program 4: 23:16:21 executing program 3: 23:16:21 executing program 1: 23:16:21 executing program 0: 23:16:21 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:16:21 executing program 5: 23:16:21 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240), 0x0, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:16:21 executing program 4: 23:16:21 executing program 3: 23:16:21 executing program 1: [ 453.670293][T14575] cgroup: fork rejected by pids controller in /syz2 23:16:21 executing program 5: 23:16:21 executing program 0: 23:16:21 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) socket$inet6(0xa, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) syncfs(0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r0, 0x28007d) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x800, 0xb0, &(0x7f0000000340)=""/176, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x75, 0x10, &(0x7f0000000000), 0x10}, 0x70) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x800, 0x0) sendfile(r0, r0, 0x0, 0x2008000fffffffe) 23:16:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) pipe2$9p(&(0x7f0000000300), 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000), 0x4) 23:16:22 executing program 5: 23:16:22 executing program 1: 23:16:22 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240), 0x0, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:16:22 executing program 0: 23:16:22 executing program 3: 23:16:22 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x0, 0xb0, @ipv4={[], [], @remote}}, 0xfe51) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) dup(0xffffffffffffffff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="6744669800000000fcff01040000000065177e6d06589e03469637a7267592938766010a35efd29affe2009efdc31a381587a53c0d00000000000003e9e841e84f03d05ebc7e87c10dfc8b2cf1fd86fbcd578bcd3e51a594acdea573d84d62215d3e9e1c3ce9db868d4ee3bc0b06f8865611d9e5a0a652c1a8cf8d285e1629b0e097e78390c268b4919ba00c2f81d8ebc88648339483572c993f8479328c62726038681f6f66943bc0347fc1aa918f13a1e456de840a334085ee5ad56dbd8d027120d49deb92c530d75197d928a5f717d65887ff134d67670425"], 0x74) sendfile(r0, r0, &(0x7f0000000200), 0xa198) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 23:16:22 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/17, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x8, r3}, 0x10) 23:16:22 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240), 0x0, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:16:22 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 23:16:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1000000000000, 0xffffffffffffffff, 0x5) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000100)=0x8, 0x4) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xbb8) 23:16:22 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, 0xc9) 23:16:22 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:16:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="2000000000000000000000d076000600070f06a001000000000063e000000200"], 0x20}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x0, 0x0, 0x24, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x20000, 0x800, 0x0, 0x0, 0xfff}, 0x0, 0x7, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000580)='cgroup.threads\x00', 0x2, 0x0) r2 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280)=r2, 0x32d) perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x70, 0xf3, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x75e9181f21e260e5, @perf_config_ext={0x0, 0x3fa0}, 0x20, 0x40000}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xd) getpid() 23:16:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r2, 0x0, 0xedc0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 23:16:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000280)=0xff, 0x4) pipe2$9p(0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0xc) writev(0xffffffffffffffff, &(0x7f0000001580), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x24a, 0x0) 23:16:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 23:16:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0xf}, 0x1c) 23:16:22 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:16:23 executing program 4: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000001809"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) write(r1, &(0x7f0000000080)="1fe92f7a904e7bd452bc1270231d3c42bb52d73d09efe8152ff3c8fa73f85ede29b8204b62663dcb16be35b2104becec99b90e533d75b32aac906f008e459b0d64b5b9272248b51f7c520bb09b6d", 0xfeff) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 23:16:23 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:16:23 executing program 3: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 23:16:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @empty}, 0x5f7}) 23:16:23 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) [ 455.219772][T14749] syz-executor.5 (14749) used greatest stack depth: 51520 bytes left 23:16:23 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) 23:16:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000680)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa9\x9d]\xce\xaa#\x87X\xb0\xbf9\n\x9f!A&$F\x86\xfd\x17\x95me\xd0\x19G\bP5\xa4\x05\x00\xb8\xee\xb3X(\x83\xc2\xee8\\\xa5\xb1\x1aed\x94\x9b\xfb\x1d\x1f\xf2\xccr\x0fV\x88\xdf-\xd5N\x1d+ \xa5\xa1Fm\x85\v\xa1\xf87GAV\"%y\xfas\xdd9\x9e\x96R\x16\x19\xa2Y\x92z\xabc\xec\"A\x90\xcf\x83\xf2\xbb\xdb\xe1\xfb\x90JF\xa8\x80\xa9\xe0\xc8\xf3j\x03\xb4\x911.\x86\xcb\xe8\x05\xdd\x1dRV\x9d \x8c\n7\xe6\xb7ys\xcd \xb5\x92\x913\xddV\xb5\xaa\xd8\"\aj(\xe4\xfc}\xcc*\x1a,_\xb7\xf6\xa4SQ\x1c\xb3\xbe\x1e\tK\x9co\x17pR\xb5\"\xb2Jl2\x0f\xd5\xa5v9\xcc\x8c\x98\xb1\xe3\x00\xc6\n#\x82Up#\x96\xd4L\xa6\x00z\xc7\xfaF_\xf5:5\x0f\xb4sQD\x9c\x14?\x04-\xa3\xea9\xd1\xfc\x03z\x86\x14\xa4M\x8fu\xf9\xcb\xe4\xca\xd1\xf6\xba\xbd\x8dM\xb9\xb6\xc8\x94\xf2\v;\xde\xd1\xf0!\f\xb2\x1b\xb3\xba\xcaI=R7\x9c_\xcc\x8eZ\xae\xc5\xc9\x9e\xbdPMpW\xeeNt\x05S&\xdf\t\x98\xe7\xe8#\xa7\xa0\x9f>\x18e\x1c!\x01\xa8\xae-\xc7\xc1\xda#P\x03\xe4\xee\x91\x84\xd9\xf9|4\xb94\xa2\xa2V\x14\xe7\x99\xf1\xafM\xbbT\xa8\x7f\xb8M\x00\xa3X\xae\x996sb\x80M=\xd4\x9af\x8d\x8c\x16b\xe4\xb2\xb5\b\xcd+p\x9c\x88k8:8OD\vo{(\xca\xa8\xb0\x89\x18\xfa\x9f\xf7\t-\xb5\x9a\x06\xccRl\x10\xe8rc\x9a\x9e\xc85u\x7f\xe5\x05\xab\xd29\x1cV\xec\x8e\xda\xe2\xa7') r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='mem\x00\x01y7\x89\xc9B\xab\xe3\xfa\x00\xef\x82\xb1^\x1d\xf5\x03\xcb\xc5\xc2@\xf4\x93\xe5\xd7s\xe4\x0e\x8b\xd2\b\xa9\"\x150\xe7-\x86\xb5\n\xee\xe6\xe8\x12\x0e\xff\xa1:\xc4\xc2\xf3\x84q\xa5\nJ\x1d\xd5\x10\xc8=\xbe\xc8\xdd\xb2r\xff\xa6\x92\xc9\xd9\x0fBNm\xaa\x7f\xd9GO\"2\x18\xf6\xbc\xfc\xac\xa4\x90\xa15\x81B:z\xb7w\x81=A\xd5yr0\r\xa7v\x10d\xb6\xe5Q\xae\xf9W\xc8\x93\xe8\x06O\x87k8I\xa6\xbb\xee\xea\xd0\x14B\xa5D\xa0\x00Q\x88\xc2\xd6\x1f\xcdo\xcb\x13\f{I^\xdc:P\xef\x01\v\x0eRZl\x926eUA\xc4\xe8\xb6\xdb\x99\xda\xf5\x9eE\xde\x11', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) 23:16:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x48, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x48, r3, {0x2, 0x0, @multicast2}, 0x44}}, 0x2e) 23:16:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@empty}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setstatus(r0, 0x4, 0x2000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) dup2(0xffffffffffffffff, 0xffffffffffffffff) 23:16:23 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) [ 455.854477][ C1] net_ratelimit: 18 callbacks suppressed [ 455.854499][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 455.866637][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 455.873148][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 455.879454][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 455.885960][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 455.892399][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 455.899082][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 455.905306][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:16:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f00000000c0)=""/1, 0x6) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) tkill(r2, 0x1000000000016) 23:16:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, 0x1}, 0x90) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000035) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 23:16:24 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 23:16:24 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 23:16:24 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x0, 0x3) 23:16:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x2, &(0x7f0000000040)={0x1, 'bond_slave_0\x00'}, 0x18) 23:16:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) syz_open_dev$sg(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) 23:16:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e80000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000c80012000800010067726500bc000200080008008100000008001600010000000800090009000000080010004e22000008001500c9250a000800010068c0443e9e2c83ae8899de907d41ccf48a0614700769ab93bbcc8e44", @ANYRES32, @ANYBLOB="080011004e2400000800020001000000080008000800000008000600e0000001080010004e230000080009000700000008000100", @ANYRES32=0x0, @ANYBLOB="08000800040000000800090008000000080013000100000008000700ac1e0001080006000000000508000600ffffffff08000600e0000001080007000000000008000200ff03000008000700e0000002"], 0xe8}}, 0x10000) [ 456.687126][T15152] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 456.695538][T15152] netlink: 'syz-executor.3': attribute type 22 has an invalid length. [ 456.703866][T15152] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 456.711976][T15152] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 456.720397][T15152] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.3'. 23:16:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000680)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa9\x9d]\xce\xaa#\x87X\xb0\xbf9\n\x9f!A&$F\x86\xfd\x17\x95me\xd0\x19G\bP5\xa4\x05\x00\xb8\xee\xb3X(\x83\xc2\xee8\\\xa5\xb1\x1aed\x94\x9b\xfb\x1d\x1f\xf2\xccr\x0fV\x88\xdf-\xd5N\x1d+ \xa5\xa1Fm\x85\v\xa1\xf87GAV\"%y\xfas\xdd9\x9e\x96R\x16\x19\xa2Y\x92z\xabc\xec\"A\x90\xcf\x83\xf2\xbb\xdb\xe1\xfb\x90JF\xa8\x80\xa9\xe0\xc8\xf3j\x03\xb4\x911.\x86\xcb\xe8\x05\xdd\x1dRV\x9d \x8c\n7\xe6\xb7ys\xcd \xb5\x92\x913\xddV\xb5\xaa\xd8\"\aj(\xe4\xfc}\xcc*\x1a,_\xb7\xf6\xa4SQ\x1c\xb3\xbe\x1e\tK\x9co\x17pR\xb5\"\xb2Jl2\x0f\xd5\xa5v9\xcc\x8c\x98\xb1\xe3\x00\xc6\n#\x82Up#\x96\xd4L\xa6\x00z\xc7\xfaF_\xf5:5\x0f\xb4sQD\x9c\x14?\x04-\xa3\xea9\xd1\xfc\x03z\x86\x14\xa4M\x8fu\xf9\xcb\xe4\xca\xd1\xf6\xba\xbd\x8dM\xb9\xb6\xc8\x94\xf2\v;\xde\xd1\xf0!\f\xb2\x1b\xb3\xba\xcaI=R7\x9c_\xcc\x8eZ\xae\xc5\xc9\x9e\xbdPMpW\xeeNt\x05S&\xdf\t\x98\xe7\xe8#\xa7\xa0\x9f>\x18e\x1c!\x01\xa8\xae-\xc7\xc1\xda#P\x03\xe4\xee\x91\x84\xd9\xf9|4\xb94\xa2\xa2V\x14\xe7\x99\xf1\xafM\xbbT\xa8\x7f\xb8M\x00\xa3X\xae\x996sb\x80M=\xd4\x9af\x8d\x8c\x16b\xe4\xb2\xb5\b\xcd+p\x9c\x88k8:8OD\vo{(\xca\xa8\xb0\x89\x18\xfa\x9f\xf7\t-\xb5\x9a\x06\xccRl\x10\xe8rc\x9a\x9e\xc85u\x7f\xe5\x05\xab\xd29\x1cV\xec\x8e\xda\xe2\xa7') r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='mem\x00\x01y7\x89\xc9B\xab\xe3\xfa\x00\xef\x82\xb1^\x1d\xf5\x03\xcb\xc5\xc2@\xf4\x93\xe5\xd7s\xe4\x0e\x8b\xd2\b\xa9\"\x150\xe7-\x86\xb5\n\xee\xe6\xe8\x12\x0e\xff\xa1:\xc4\xc2\xf3\x84q\xa5\nJ\x1d\xd5\x10\xc8=\xbe\xc8\xdd\xb2r\xff\xa6\x92\xc9\xd9\x0fBNm\xaa\x7f\xd9GO\"2\x18\xf6\xbc\xfc\xac\xa4\x90\xa15\x81B:z\xb7w\x81=A\xd5yr0\r\xa7v\x10d\xb6\xe5Q\xae\xf9W\xc8\x93\xe8\x06O\x87k8I\xa6\xbb\xee\xea\xd0\x14B\xa5D\xa0\x00Q\x88\xc2\xd6\x1f\xcdo\xcb\x13\f{I^\xdc:P\xef\x01\v\x0eRZl\x926eUA\xc4\xe8\xb6\xdb\x99\xda\xf5\x9eE\xde\x11', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) 23:16:24 executing program 1: clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x100000800ffe0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f) splice(r0, 0x0, r2, 0x0, 0x100000000000a, 0x0) 23:16:24 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, 0x0, 0x0, 0x0) 23:16:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000340)='threaded\x00', 0xffffffc5) [ 456.894357][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 456.900748][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:16:25 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6242, 0x0) clone(0x8000000101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='f2fs\x00c\x9b\xec\xe8Dv\xff\xd2\xd6\xc9LR\x12Df6\x1dA\xbc@\x1c\xf7\r\xfb4\xe2\n\x91\x91\xeb\x8d]\xbcy\xf7\xe0o\x1a%\x9e\xd6%\xdf\x85\x11-$\x8c9\x84\x0f\xe45=\x85\xa1\xa3\xa5\x87\xfa\xb5\xa5\x18\xda\xe0\xc53\xb1\\^\x12.\x03\x1a\xef\x00\x8f\x8d\xa8,\xe8\xc6\x8a\xdd\xee\x05#\x1d\rI^,\xe6\x80\x8aY\xa0\x8cB\x1d\xfa\xe3*\nWk\xcd\xd5y\xb4u\x7f\xc4\x8eP\x1dT\xbf\n\x1b\xe1\x01\xaa\xf3\xebu\xb8\xa8(\xb6\xf2\x1a\x86\x17\n\x8d\x82\x1a{q\xb1X&\xae\xf6\x15M\xff\x86&\xd2n~\xdd\xcft{xD.L1\x8c\xf19E\xdf\xe5\x80\xbb)\xfd)l\xb6\xfa\x1eP\x90:\xe4\xb3-B\xe4,\xed}\x10\x1b\xb7^\xcc\xeb\x91\xd4\x05B6\xcaC\xad!\x9aG\x8b\x04Z\x1es\xa1\x85\x0e\xed\xc3\x99', 0x0, 0x0) 23:16:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r2 = accept$alg(r0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001240)="9a8bf0c149867784ed401b4c4d63159a", 0x10}], 0x1}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/244, 0xf4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)=""/242, 0xf2}], 0x1}}], 0x2, 0x0, 0x0) 23:16:25 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/17, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4) r4 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0x1, r2, 0x0, r3}, 0x30) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x28012, r0, 0x0) 23:16:25 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 23:16:25 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, 0x0, 0x0, 0x0) 23:16:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) r1 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x2, 0x63, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x460, 0x8, 0x8001, 0x0, 0x40, 0x88f, 0x20}, r1, 0x0, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_int(r4, 0x0, 0x0) 23:16:25 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000100), 0x4) syncfs(r6) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000440)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x800, 0xb0, &(0x7f0000000340)=""/176, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x800, 0x0) sendfile(r7, r7, 0x0, 0x2008000fffffffe) [ 457.575061][T15413] devpts: called with bogus options 23:16:25 executing program 0: r0 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nfc={0x3b, 0x3}, 0x10d, &(0x7f00000001c0)=[{&(0x7f0000000000)="c10900ffff807b00fffe141aac141412e0", 0x11}], 0x1}, 0x0) [ 457.693238][T15415] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 457.703572][T15415] CPU: 1 PID: 15415 Comm: syz-executor.3 Not tainted 5.4.0-rc3+ #0 [ 457.711490][T15415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.721565][T15415] Call Trace: [ 457.724905][T15415] dump_stack+0x191/0x1f0 [ 457.729267][T15415] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 457.735188][T15415] dump_header+0x1e7/0xd00 [ 457.739635][T15415] ? _raw_spin_unlock_irqrestore+0x4b/0x70 [ 457.745474][T15415] ? ___ratelimit+0x542/0x720 [ 457.750176][T15415] ? task_will_free_mem+0x2c9/0x810 [ 457.755437][T15415] oom_kill_process+0x210/0x560 [ 457.760333][T15415] out_of_memory+0x1796/0x1c70 [ 457.765135][T15415] ? kmsan_internal_set_origin+0x6a/0xb0 [ 457.770825][T15415] memory_max_write+0x90b/0xb60 [ 457.775738][T15415] ? memory_max_show+0x1b0/0x1b0 [ 457.780703][T15415] cgroup_file_write+0x41a/0x8e0 [ 457.785685][T15415] ? cgroup_seqfile_stop+0x150/0x150 [ 457.791002][T15415] kernfs_fop_write+0x55f/0x840 [ 457.795888][T15415] ? kernfs_fop_read+0x9a0/0x9a0 [ 457.800846][T15415] __vfs_write+0x1a9/0xcb0 [ 457.805319][T15415] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 457.811409][T15415] ? __sb_start_write+0x10b/0x230 [ 457.816454][T15415] vfs_write+0x481/0x920 [ 457.820731][T15415] ksys_write+0x265/0x430 [ 457.825092][T15415] __se_sys_write+0x92/0xb0 [ 457.829621][T15415] __x64_sys_write+0x4a/0x70 [ 457.834233][T15415] do_syscall_64+0xb6/0x160 [ 457.838766][T15415] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 457.844674][T15415] RIP: 0033:0x459ef9 [ 457.848604][T15415] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 457.868229][T15415] RSP: 002b:00007fccf82fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 457.876668][T15415] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 457.884653][T15415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 457.892638][T15415] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 457.900622][T15415] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fccf82fe6d4 [ 457.908607][T15415] R13: 00000000004ca4f4 R14: 00000000004e23a8 R15: 00000000ffffffff [ 457.918571][T15415] memory: usage 1844kB, limit 0kB, failcnt 7 [ 457.924683][T15415] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 457.931557][T15415] Memory cgroup stats for /syz3: [ 457.931882][T15415] anon 151552 [ 457.931882][T15415] file 405504 [ 457.931882][T15415] kernel_stack 196608 [ 457.931882][T15415] slab 712704 [ 457.931882][T15415] sock 0 [ 457.931882][T15415] shmem 405504 [ 457.931882][T15415] file_mapped 0 [ 457.931882][T15415] file_dirty 0 [ 457.931882][T15415] file_writeback 0 [ 457.931882][T15415] anon_thp 0 [ 457.931882][T15415] inactive_anon 405504 [ 457.931882][T15415] active_anon 65536 [ 457.931882][T15415] inactive_file 0 [ 457.931882][T15415] active_file 0 [ 457.931882][T15415] unevictable 0 [ 457.931882][T15415] slab_reclaimable 0 [ 457.931882][T15415] slab_unreclaimable 712704 [ 457.931882][T15415] pgfault 9207 [ 457.931882][T15415] pgmajfault 0 [ 457.931882][T15415] workingset_refault 0 [ 457.931882][T15415] workingset_activate 0 [ 457.931882][T15415] workingset_nodereclaim 0 [ 457.931882][T15415] pgrefill 0 [ 457.931882][T15415] pgscan 0 [ 457.931882][T15415] pgsteal 0 [ 457.931882][T15415] pgactivate 0 [ 458.025919][T15415] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12387,uid=0 [ 458.041613][T15415] Memory cgroup out of memory: Killed process 12387 (syz-executor.3) total-vm:72452kB, anon-rss:108kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 458.145787][ T1831] oom_reaper: reaped process 12387 (syz-executor.3), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 458.205002][T15415] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 458.215430][T15415] CPU: 1 PID: 15415 Comm: syz-executor.3 Not tainted 5.4.0-rc3+ #0 [ 458.223365][T15415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.233457][T15415] Call Trace: [ 458.236806][T15415] dump_stack+0x191/0x1f0 [ 458.241201][T15415] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 458.247157][T15415] dump_header+0x1e7/0xd00 [ 458.251638][T15415] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 458.257852][T15415] ? ___ratelimit+0x542/0x720 [ 458.262588][T15415] ? task_will_free_mem+0x14c/0x810 [ 458.267866][T15415] oom_kill_process+0x210/0x560 [ 458.272790][T15415] out_of_memory+0x1796/0x1c70 [ 458.277645][T15415] memory_max_write+0x90b/0xb60 [ 458.282570][T15415] ? memory_max_show+0x1b0/0x1b0 [ 458.287539][T15415] cgroup_file_write+0x41a/0x8e0 [ 458.292525][T15415] ? cgroup_seqfile_stop+0x150/0x150 [ 458.297840][T15415] kernfs_fop_write+0x55f/0x840 [ 458.302757][T15415] ? kernfs_fop_read+0x9a0/0x9a0 [ 458.307724][T15415] __vfs_write+0x1a9/0xcb0 [ 458.312208][T15415] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 458.318315][T15415] ? __sb_start_write+0x10b/0x230 [ 458.323374][T15415] vfs_write+0x481/0x920 [ 458.327661][T15415] ksys_write+0x265/0x430 [ 458.332022][T15415] __se_sys_write+0x92/0xb0 [ 458.336731][T15415] __x64_sys_write+0x4a/0x70 [ 458.341378][T15415] do_syscall_64+0xb6/0x160 [ 458.345933][T15415] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 458.351851][T15415] RIP: 0033:0x459ef9 [ 458.355805][T15415] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 458.375446][T15415] RSP: 002b:00007fccf82fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 458.383886][T15415] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 458.391876][T15415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 23:16:26 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000500)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) accept(0xffffffffffffffff, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000000)=0x80) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@multicast1, @multicast2}, 0xc) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:16:26 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000500), 0x3528a9c0}], 0x2d7, 0x0) preadv(r0, 0x0, 0x0, 0x0) 23:16:26 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001a0007041dfffd946f61050002000300fe0200000001080008000200ac", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 23:16:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x7) setresuid(r1, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 458.399865][T15415] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 458.407854][T15415] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fccf82fe6d4 [ 458.415848][T15415] R13: 00000000004ca4f4 R14: 00000000004e23a8 R15: 00000000ffffffff [ 458.424162][T15415] memory: usage 1684kB, limit 0kB, failcnt 15 [ 458.431157][T15415] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 458.438109][T15415] Memory cgroup stats for /syz3: [ 458.438406][T15415] anon 151552 [ 458.438406][T15415] file 405504 [ 458.438406][T15415] kernel_stack 65536 [ 458.438406][T15415] slab 712704 [ 458.438406][T15415] sock 0 [ 458.438406][T15415] shmem 405504 [ 458.438406][T15415] file_mapped 0 [ 458.438406][T15415] file_dirty 0 [ 458.438406][T15415] file_writeback 0 [ 458.438406][T15415] anon_thp 0 [ 458.438406][T15415] inactive_anon 405504 [ 458.438406][T15415] active_anon 65536 [ 458.438406][T15415] inactive_file 0 [ 458.438406][T15415] active_file 0 [ 458.438406][T15415] unevictable 0 [ 458.438406][T15415] slab_reclaimable 0 [ 458.438406][T15415] slab_unreclaimable 712704 [ 458.438406][T15415] pgfault 9207 [ 458.438406][T15415] pgmajfault 0 [ 458.438406][T15415] workingset_refault 0 [ 458.438406][T15415] workingset_activate 0 [ 458.438406][T15415] workingset_nodereclaim 0 [ 458.438406][T15415] pgrefill 0 [ 458.438406][T15415] pgscan 0 [ 458.438406][T15415] pgsteal 0 [ 458.438406][T15415] pgactivate 0 [ 458.532655][T15415] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15405,uid=0 [ 458.548351][T15415] Memory cgroup out of memory: Killed process 15415 (syz-executor.3) total-vm:72716kB, anon-rss:164kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 458.570462][ T1831] oom_reaper: reaped process 15415 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 458.646203][T15468] ===================================================== [ 458.653204][T15468] BUG: KMSAN: uninit-value in ip_check_mc_rcu+0x2a5/0x670 [ 458.660324][T15468] CPU: 0 PID: 15468 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 458.668221][T15468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.678283][T15468] Call Trace: [ 458.681598][T15468] dump_stack+0x191/0x1f0 [ 458.685951][T15468] kmsan_report+0x14a/0x2f0 [ 458.690479][T15468] __msan_warning+0x73/0xf0 [ 458.695000][T15468] ip_check_mc_rcu+0x2a5/0x670 [ 458.699778][T15468] ip_route_output_key_hash_rcu+0x1d27/0x3910 [ 458.705864][T15468] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 458.711771][T15468] ip_route_output_flow+0x1e2/0x3d0 [ 458.716971][T15468] ip_tunnel_xmit+0x127e/0x3320 [ 458.721844][T15468] ipgre_xmit+0xff3/0x1120 [ 458.726263][T15468] ? ipgre_close+0x240/0x240 [ 458.730839][T15468] dev_hard_start_xmit+0x51a/0xab0 [ 458.735952][T15468] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 458.741854][T15468] __dev_queue_xmit+0x35b6/0x4200 [ 458.746888][T15468] dev_queue_xmit+0x4b/0x60 [ 458.751391][T15468] ? netdev_core_pick_tx+0x4d0/0x4d0 [ 458.756685][T15468] packet_sendmsg+0x82d7/0x92e0 [ 458.761524][T15468] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 458.767607][T15468] ? aa_label_sk_perm+0x6d6/0x940 [ 458.772632][T15468] ? kmsan_get_metadata+0x39/0x350 [ 458.777745][T15468] ? kmsan_internal_set_origin+0x6a/0xb0 [ 458.783373][T15468] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 458.789260][T15468] ? aa_sk_perm+0x730/0xaf0 [ 458.793791][T15468] ? compat_packet_setsockopt+0x360/0x360 [ 458.799514][T15468] ___sys_sendmsg+0x14ff/0x1590 [ 458.804380][T15468] ? __fget_light+0x6b1/0x710 [ 458.809061][T15468] __se_sys_sendmsg+0x305/0x460 [ 458.813933][T15468] __x64_sys_sendmsg+0x4a/0x70 [ 458.818684][T15468] do_syscall_64+0xb6/0x160 [ 458.823176][T15468] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 458.829073][T15468] RIP: 0033:0x459ef9 [ 458.832956][T15468] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 458.852549][T15468] RSP: 002b:00007f0f4457bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.860948][T15468] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 458.868904][T15468] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 458.876862][T15468] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 458.884818][T15468] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0f4457c6d4 [ 458.892784][T15468] R13: 00000000004c8189 R14: 00000000004de178 R15: 00000000ffffffff [ 458.900751][T15468] [ 458.903059][T15468] Uninit was stored to memory at: [ 458.908077][T15468] kmsan_internal_chain_origin+0xbd/0x170 [ 458.913796][T15468] __msan_chain_origin+0x6b/0xe0 [ 458.918716][T15468] ip_tunnel_xmit+0x9ee/0x3320 [ 458.923468][T15468] ipgre_xmit+0xff3/0x1120 [ 458.927883][T15468] dev_hard_start_xmit+0x51a/0xab0 [ 458.932982][T15468] __dev_queue_xmit+0x35b6/0x4200 [ 458.937991][T15468] dev_queue_xmit+0x4b/0x60 [ 458.942477][T15468] packet_sendmsg+0x82d7/0x92e0 [ 458.947330][T15468] ___sys_sendmsg+0x14ff/0x1590 [ 458.952164][T15468] __se_sys_sendmsg+0x305/0x460 [ 458.956995][T15468] __x64_sys_sendmsg+0x4a/0x70 [ 458.961748][T15468] do_syscall_64+0xb6/0x160 [ 458.966235][T15468] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 458.972102][T15468] [ 458.974437][T15468] Uninit was stored to memory at: [ 458.979447][T15468] kmsan_internal_chain_origin+0xbd/0x170 [ 458.985241][T15468] kmsan_memcpy_memmove_metadata+0x25c/0x2e0 [ 458.991206][T15468] kmsan_memcpy_metadata+0xb/0x10 [ 458.996217][T15468] __msan_memcpy+0x56/0x70 [ 459.000618][T15468] pskb_expand_head+0x38a/0x19f0 [ 459.005542][T15468] ipgre_xmit+0x6d9/0x1120 [ 459.009944][T15468] dev_hard_start_xmit+0x51a/0xab0 [ 459.015040][T15468] __dev_queue_xmit+0x35b6/0x4200 [ 459.020058][T15468] dev_queue_xmit+0x4b/0x60 [ 459.024545][T15468] packet_sendmsg+0x82d7/0x92e0 [ 459.029379][T15468] ___sys_sendmsg+0x14ff/0x1590 [ 459.034215][T15468] __se_sys_sendmsg+0x305/0x460 [ 459.039049][T15468] __x64_sys_sendmsg+0x4a/0x70 [ 459.043799][T15468] do_syscall_64+0xb6/0x160 [ 459.048287][T15468] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 459.054153][T15468] [ 459.056473][T15468] Uninit was created at: [ 459.060703][T15468] kmsan_internal_poison_shadow+0x60/0x110 [ 459.066493][T15468] kmsan_slab_alloc+0xaa/0x130 [ 459.071247][T15468] __kmalloc_node_track_caller+0xda2/0x13d0 [ 459.077123][T15468] __alloc_skb+0x306/0xa10 [ 459.081522][T15468] alloc_skb_with_frags+0x18c/0xa80 [ 459.086714][T15468] sock_alloc_send_pskb+0xafd/0x10a0 [ 459.091982][T15468] packet_sendmsg+0x6785/0x92e0 [ 459.096814][T15468] ___sys_sendmsg+0x14ff/0x1590 [ 459.101650][T15468] __se_sys_sendmsg+0x305/0x460 [ 459.106484][T15468] __x64_sys_sendmsg+0x4a/0x70 [ 459.111233][T15468] do_syscall_64+0xb6/0x160 [ 459.115723][T15468] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 459.121593][T15468] ===================================================== [ 459.128507][T15468] Disabling lock debugging due to kernel taint [ 459.134639][T15468] Kernel panic - not syncing: panic_on_warn set ... [ 459.141304][T15468] CPU: 0 PID: 15468 Comm: syz-executor.0 Tainted: G B 5.4.0-rc3+ #0 [ 459.150559][T15468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.160605][T15468] Call Trace: [ 459.163900][T15468] dump_stack+0x191/0x1f0 [ 459.168242][T15468] panic+0x3c9/0xc1e [ 459.172153][T15468] kmsan_report+0x2e8/0x2f0 [ 459.176653][T15468] __msan_warning+0x73/0xf0 [ 459.181151][T15468] ip_check_mc_rcu+0x2a5/0x670 [ 459.185940][T15468] ip_route_output_key_hash_rcu+0x1d27/0x3910 [ 459.192012][T15468] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 459.197923][T15468] ip_route_output_flow+0x1e2/0x3d0 [ 459.203134][T15468] ip_tunnel_xmit+0x127e/0x3320 [ 459.208076][T15468] ipgre_xmit+0xff3/0x1120 [ 459.212515][T15468] ? ipgre_close+0x240/0x240 [ 459.217117][T15468] dev_hard_start_xmit+0x51a/0xab0 [ 459.222232][T15468] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 459.228117][T15468] __dev_queue_xmit+0x35b6/0x4200 [ 459.233151][T15468] dev_queue_xmit+0x4b/0x60 [ 459.237642][T15468] ? netdev_core_pick_tx+0x4d0/0x4d0 [ 459.242917][T15468] packet_sendmsg+0x82d7/0x92e0 [ 459.247846][T15468] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 459.253902][T15468] ? aa_label_sk_perm+0x6d6/0x940 [ 459.258926][T15468] ? kmsan_get_metadata+0x39/0x350 [ 459.264041][T15468] ? kmsan_internal_set_origin+0x6a/0xb0 [ 459.269664][T15468] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 459.275545][T15468] ? aa_sk_perm+0x730/0xaf0 [ 459.280064][T15468] ? compat_packet_setsockopt+0x360/0x360 [ 459.285779][T15468] ___sys_sendmsg+0x14ff/0x1590 [ 459.290639][T15468] ? __fget_light+0x6b1/0x710 [ 459.295315][T15468] __se_sys_sendmsg+0x305/0x460 [ 459.300177][T15468] __x64_sys_sendmsg+0x4a/0x70 [ 459.305018][T15468] do_syscall_64+0xb6/0x160 [ 459.309509][T15468] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 459.315397][T15468] RIP: 0033:0x459ef9 [ 459.319286][T15468] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 459.338889][T15468] RSP: 002b:00007f0f4457bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.347294][T15468] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 459.355267][T15468] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 459.363226][T15468] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 459.371184][T15468] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0f4457c6d4 [ 459.379147][T15468] R13: 00000000004c8189 R14: 00000000004de178 R15: 00000000ffffffff [ 459.389166][T15468] Kernel Offset: disabled [ 459.393486][T15468] Rebooting in 86400 seconds..