[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 74.992120][ T28] audit: type=1800 audit(1579340581.911:25): pid=9425 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 75.012311][ T28] audit: type=1800 audit(1579340581.921:26): pid=9425 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 75.055366][ T28] audit: type=1800 audit(1579340581.921:27): pid=9425 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.32' (ECDSA) to the list of known hosts. 2020/01/18 09:43:13 fuzzer started 2020/01/18 09:43:15 dialing manager at 10.128.0.26:44169 2020/01/18 09:43:15 syscalls: 2871 2020/01/18 09:43:15 code coverage: enabled 2020/01/18 09:43:15 comparison tracing: enabled 2020/01/18 09:43:15 extra coverage: enabled 2020/01/18 09:43:15 setuid sandbox: enabled 2020/01/18 09:43:15 namespace sandbox: enabled 2020/01/18 09:43:15 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/18 09:43:15 fault injection: enabled 2020/01/18 09:43:15 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/18 09:43:15 net packet injection: enabled 2020/01/18 09:43:15 net device setup: enabled 2020/01/18 09:43:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/18 09:43:15 devlink PCI setup: PCI device 0000:00:10.0 is not available 09:46:08 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x8, 0x2000) connect$rds(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000080)={0x67, "d350dfe59e24627d36765ce41a349462ce177a3d33fe750e05a62202ffb5da0f73a40fd0081e1b39beab419612f7bb9a18985dbfd92ca1c7fe036a569931ec5853e53ea84e58fab6b369a34e6303a1e50e39ad0818b3f0eb2d9897398467342250a1253ef30454e331dd52b5beecba73f06a338a2cba2534f3e9851e75812ff6"}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x1f, 0x7, 0x4, 0x0, 0x3f, {0x77359400}, {0x4, 0x2, 0xa9, 0xff, 0x5, 0x33, "30920f7e"}, 0x4, 0x2, @fd=0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffff}) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x401000, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000200)) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000240)={@loopback, @empty, @broadcast}, 0xc) statx(r0, &(0x7f0000000300)='./file0\x00', 0x6000, 0x809, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) r6 = geteuid() fstat(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() statx(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x4000, 0x7ff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x4}, [{0x2, 0xc, r4}, {0x2, 0x2, r5}, {0x2, 0x4, r6}, {0x2, 0x1, r7}], {0x4, 0x1b2fc033db59efd2}, [{0x8, 0x2, r8}, {0x8, 0x1, r9}, {0x8, 0x3, r10}, {0x8, 0x1, r11}], {}, {0x20, 0x3}}, 0x64, 0x1) r12 = accept4$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000008c0)=0x14, 0x80000) sendto(r12, &(0x7f0000000900)="818c88f6dd3a681f67784f6d611814e6b5e6e6f4c81aa35cd243a00dfbbb45b43e9e51ab0042cf8ade7d87fdab79283b6be40199af33872da73bb32dd00919bbf586f540a39ce2607185799397a7a530cec906a8abdb071348e9a6030dc6baf88200526e0c888af27abf3261889d42dca8ef72796b88cfac47f6004f7edaca67bbb04341a06fc12b7666865445ce5613", 0x90, 0x18, &(0x7f00000009c0)=@hci={0x1f, 0x8, 0x1}, 0x80) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000b40)=@buf={0xe3, &(0x7f0000000a40)="c3ccbe1faa74d277ecdd3376d839c32b7050beaf4612761bdddb728706f75020777719d0fa8dacf734cabd12b02beb7a4589c13f6448fd81fd9ef2face305c64dd2fb3a248c207679f85c67a32a9dd73d0dafdab87474e96046b012da9ec9129923b30a0cbb2a7d5eec885647addc53721ae793b4b366b50c803bfd713e46bbfb8d83688a618f61b66b2fc23d811ae53779bef1a5e033ed836594359af88cc30a272ca67a09da55fda8174f88a15264e5160eaf9c73ab9e3164bc13fbc8c736b0e260936f9aa059311dc98f3dd9259e01dd6ad56ffd2985c2317ea6926abb9b216d251"}) r13 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/ubi_ctrl\x00', 0x20000, 0x0) ioctl$KVM_SET_GSI_ROUTING(r13, 0x4008ae6a, &(0x7f0000000bc0)={0x8, 0x0, [{0x0, 0x3, 0x0, 0x0, @adapter={0x3, 0x6, 0x4, 0x1, 0xae}}, {0x1, 0x2, 0x0, 0x0, @sint={0x8, 0x6d}}, {0x1f, 0x2, 0x0, 0x0, @sint={0xffff, 0x8}}, {0x800, 0x3, 0x0, 0x0, @irqchip={0xff, 0x2}}, {0x81, 0x6, 0x0, 0x0, @sint={0x8, 0x2}}, {0xea8, 0x1, 0x0, 0x0, @msi={0x6c41fda7, 0x5, 0x9, 0x3ff}}, {0x3ff, 0x4, 0x0, 0x0, @msi={0x80000000, 0x1f, 0x400, 0x40}}, {0x7fffffff, 0x1, 0x0, 0x0, @adapter={0x0, 0x7, 0x1, 0x9d}}]}) r14 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/autofs\x00', 0x20000, 0x0) ioctl$SIOCRSSCAUSE(r14, 0x89e1, &(0x7f0000000dc0)=0x8) r15 = accept(0xffffffffffffffff, &(0x7f0000000e00)=@ax25={{0x3, @bcast}, [@netrom, @rose, @default, @netrom, @null, @default, @null, @default]}, &(0x7f0000000e80)=0x80) getsockopt$bt_BT_SNDMTU(r15, 0x112, 0xc, &(0x7f0000000ec0)=0xa8, &(0x7f0000000f00)=0x2) r16 = openat$zero(0xffffffffffffff9c, &(0x7f0000001700)='/dev/zero\x00', 0x1, 0x0) getpeername$l2tp(r16, &(0x7f0000001740)={0x2, 0x0, @multicast1}, &(0x7f0000001780)=0x10) r17 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$VT_RESIZE(r17, 0x5609, &(0x7f00000017c0)={0x200, 0x2, 0x4}) 09:46:08 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0xfffff000, "44f529efe1b5d87312fadf3d93164e26eecf8ef184422250e24c3a7e4a6d1fd3", 0x0, 0x7f, 0xe71, 0x4, 0x1}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000100)={0x2f, "ba8a3b6b5f5f3f564d9cc903da3ca775b376a877d926a15210c6e9bff0c90a62", 0x800, 0x7fff, 0x41, 0x8, 0x1}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000180)={'icmp6\x00'}, &(0x7f00000001c0)=0x1e) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1d0, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x852}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_NET={0x64, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4603}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x62}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4b8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x56}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2f86}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbe}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x15000}, 0x40010) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000600)=""/26, &(0x7f0000000640)=0x1a) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000a40)={0x7f, 0xc, 0x4, 0x40, 0x4, {0x77359400}, {0x9, 0x0, 0x50, 0x8b, 0x94, 0x20, "66bb6160"}, 0x8000, 0x1, @offset=0x5, 0x5, 0x0, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x6, 0x1, 0xb118062dafa394d5, 0x0, 0x0, {0x1, 0x0, 0x9}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x4040022) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000bc0)={0x0, 0x0, 0xffffffffffffffff}) write$binfmt_elf32(r5, &(0x7f0000000c00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x81, 0x6, 0x4, 0x80, 0x2, 0x3, 0x80000000, 0x2cb, 0x38, 0x1d8, 0x7fffffff, 0xe32, 0x20, 0x1, 0x6, 0x7, 0x3f}, [{0x474e552, 0x57c, 0x5, 0x8, 0x7, 0x5, 0x7, 0xffffb7d7}, {0x70000000, 0x8, 0xce, 0x6, 0x101, 0x4, 0x8, 0x81}], "47dae05a15f26d5a0b199752ae58a4d2d25d6839db293ca129146e689dbf3a120f768a893edd5ac8c6d64b42a2de2ea243882e367aa637142b6e0c288556390c6cf4458aacf73f458487fd848a75583b734e7990d5c15a4a1e70e40459626bcbd582149f158be50ea4835dafcc072bede0f1b20d5680f743", [[], [], [], [], [], [], [], []]}, 0x8f0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000015c0)={0x3a, 0x2618347521cbe908, 0x4, 0x3, 0xa4, 0x80000001, &(0x7f0000001500)="a295fdf9affe40a398222540a072fa576290df7e164f2b1b5ca8a7e65afde2ce6e758d043b47cc14eba836719b2d50faa0bb9f344bffd5955fe916e536e6c3564862d59633f701efc37b876bd2e7b17378288487bf6c1135ddc852ba5068a8505d91a7bb74b535d2ee5834e6d2fa584d4c999057a2021c1904a9ea874e89ceb0281267b4ce91f86c7c7732391f596d7e803cddff50cd26a88947c6140007f52194069c55"}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcs\x00', 0x2480, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, 0x7, 0x6, 0x204, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001740)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r8, 0xc0182101, &(0x7f0000001800)={r9, 0x40, 0x8}) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000001840)='/dev/full\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r10, 0xc0305602, &(0x7f0000001880)={0x0, 0x401, 0x2004}) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r11, 0xc0845657, &(0x7f0000001900)={0x0, @bt={0x6e82, 0x5, 0x1, 0x0, 0xfffffffffffffffa, 0x786, 0x5, 0x10000, 0x80000000, 0x3, 0x1, 0x9ff5, 0x0, 0x101, 0x10, 0x10, {0x9, 0x200}, 0x43}}) r12 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r12, 0x5411, &(0x7f00000019c0)) pipe2(&(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0xf4f7f9d06ace156d) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a80)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r13, &(0x7f0000001c40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x2004000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x118, r14, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3cfa}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa4}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1f8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @local, 0x100}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x20008001) syz_open_dev$usbfs(&(0x7f0000001c80)='/dev/bus/usb/00#/00#\x00', 0x401, 0x400) syzkaller login: [ 261.279926][ T9594] IPVS: ftp: loaded support on port[0] = 21 [ 261.454240][ T9594] chnl_net:caif_netlink_parms(): no params data found [ 261.502085][ T9594] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.523659][ T9594] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.533381][ T9594] device bridge_slave_0 entered promiscuous mode 09:46:08 executing program 2: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0xfff, 0x2, 0x4, 0x4, 0x3ff, {r0, r1/1000+10000}, {0x5, 0x1, 0x9, 0xe, 0x9, 0x3b, "13ea92c4"}, 0x43f361b, 0x2, @userptr=0x101000000, 0x2, 0x0, 0xffffffffffffffff}) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f00000001c0)={0x2a2, 0x4, &(0x7f00000000c0)=[0x1, 0x22, 0xffff, 0x0], &(0x7f0000000100)=[0x2, 0x9, 0x6, 0x271d, 0x7f, 0x5, 0xfb96, 0x3], &(0x7f0000000140)=[0x5, 0x8], &(0x7f0000000180)=[0x5, 0x400, 0x94f, 0x8, 0x1, 0xfffd, 0x5, 0x8, 0x8, 0x3]}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x20040, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000240)=0x8001, 0x4) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, &(0x7f00000002c0)={0x0, 0x9, 0x7, 0xfff}) read$rfkill(r2, &(0x7f0000000300), 0x8) r5 = socket$inet(0x2, 0x800, 0x9) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000340)='NLBL_CALIPSO\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x128, 0x12fe99a068d0ef31}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000400)={0x14, 0x88, 0xfa00, {r6, 0x0, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}}}, 0x90) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ashmem\x00', 0x21502, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x2, 0x100) tee(r7, r8, 0x75, 0x9) ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x80984120, &(0x7f0000000540)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000600)=0x0) waitid(0x0, r9, &(0x7f0000000640), 0xf79e1f822ca38eb8, &(0x7f00000006c0)) r10 = shmget(0x1, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_STAT_ANY(r10, 0xf, &(0x7f0000000780)=""/62) setsockopt$inet_tcp_buf(r3, 0x6, 0x21, &(0x7f00000007c0)="39091a537d078a0bece50957c934f008009cb503a887d6f01366f5107baf51312ea4a408c149bf0e406f6e7ebb44ae4a238d42dd3fbd021d161053f163941a2ec83da401686561d3d4", 0x49) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000840)={0x1000, 0x1, 0x4, 0x800000, 0x800, {0x77359400}, {0x4, 0x16, 0x0, 0xaa, 0x6, 0x3d, "8d9d4953"}, 0x100, 0x3, @offset=0xc346, 0x2, 0x0, r5}) lstat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r11, 0x400454cc, r12) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000980)={0x1}, 0xc) ioctl$TCSETX(r3, 0x5433, &(0x7f00000009c0)={0x37b, 0x6256, [0x2, 0x9, 0xeca, 0x3, 0x4e1], 0x6}) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000a00)=0x81) r13 = syz_open_dev$audion(&(0x7f0000000a40)='/dev/audio#\x00', 0xf92, 0x404006) ioctl$KVM_GET_NR_MMU_PAGES(r13, 0xae45, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0x80045500, &(0x7f0000000a80)) [ 261.553122][ T9597] IPVS: ftp: loaded support on port[0] = 21 [ 261.561443][ T9594] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.568691][ T9594] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.586564][ T9594] device bridge_slave_1 entered promiscuous mode [ 261.646926][ T9594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.677578][ T9594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.729194][ T9594] team0: Port device team_slave_0 added [ 261.755065][ T9594] team0: Port device team_slave_1 added [ 261.800859][ T9599] IPVS: ftp: loaded support on port[0] = 21 09:46:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) read$eventfd(r1, &(0x7f00000000c0), 0x8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000400)={0xa10000, 0x9, 0x35ab13d7, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0xfd, 0x2, [], @value=0x7ff}}) getpeername$tipc(r6, &(0x7f0000000440), &(0x7f0000000480)=0x10) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r7, 0x40044160, &(0x7f0000000500)=0x5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r8, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x188, 0x1, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_VLAN={0x4c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6}]}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xb5}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7ff}]}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x401}, @NFQA_VLAN_PROTO={0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_CT={0xc, 0xb, 0x0, 0x1, [@CTA_MARK={0x8, 0x8, 0x6}]}, @NFQA_PAYLOAD={0xca, 0xa, "ffc3ac5007eb22ebc81e24f62e4be028a3e1c92e04fbb89ccdaa1684371aa6a69a11a74f66188f11d6a2745d123610498acd39b75873b2592238606ef6660966083876041f67718d52563921124b413cd3930e458dba0a9e776d1ca4eac9acdcdae6f112bea78fcfe5ca919121a99dc7399a7c5b9a547b632a36aa1732831a8ceeb05685fbf37bf197981b24e013aa6ace5d2e15c56017e6a4c29232cee313ca7a4797c9669a1f8d8563e26ad81a1b9eaa629f0afe0a85d2af1dcd1af02dde14735de0e0f04b"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x188}, 0x1, 0x0, 0x0, 0x20048094}, 0x1) r9 = perf_event_open(&(0x7f00000007c0)={0x0, 0x70, 0x13, 0x4, 0x8, 0x80, 0x0, 0xffffffffffffff01, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x3, 0x2}, 0x2000, 0x8, 0x0, 0xa, 0x4, 0xa9, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xc) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rtc0\x00', 0x100802, 0x0) tee(r9, r10, 0x100000000, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f0000000880)='/dev/bsg\x00', 0x10900, 0x0) ioctl$KVM_S390_UCAS_MAP(r6, 0x4018ae50, &(0x7f00000008c0)={0x7, 0x9, 0xc6}) r11 = dup2(r9, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r11, 0xc1205531, &(0x7f0000000900)={0x2, 0xb21d, 0x8, 0x0, [], [], [], 0x1, 0x3, 0x9, 0x953, "033e26f36f59d92a59b8416572190782"}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r9, 0x80dc5521, &(0x7f0000000a40)=""/240) getsockopt$inet_mreqsrc(r11, 0x0, 0x27, &(0x7f0000000b40)={@empty, @multicast1, @loopback}, &(0x7f0000000b80)=0xc) r12 = syz_open_procfs(0x0, &(0x7f0000000ec0)='syscall\x00') sendmsg$NL80211_CMD_GET_STATION(r12, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x142010}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)={0xe8, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcc, 0xbe, "243c45a8716fe2b35463a6ec15f344beb4577f41053d5181115a8bb760475cbab538b2759970a3cfff27f0153567c9f1ed20bb318baa644f6416d7ec0355c2f03d9065ed8c3ff7e25867f2bfb6417381217defed99f41b97cf70b2e5448b670309c6b055da77971652987ecb4748639d1bd91315505ddcc29f530e0c9bb4ee30559777cf156fdd1102402a981a5a9813ed5607e227cd7bf65ccab6ebaf75dd05fabc3d944517b5f20fb1df342052c4fe09e9a1848b365b2257f6e15a956c571222d5b980d95d6f93"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x108}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4004044}, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000001140)={0x990000, 0x80000000, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000001100)={0x9b0953, 0xfffffffa, [], @p_u8=&(0x7f00000010c0)=0x7}}) fcntl$setflags(r13, 0x2, 0x0) r14 = syz_open_dev$mouse(&(0x7f0000001180)='/dev/input/mouse#\x00', 0x5, 0x242200) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r14, 0x84, 0x4, &(0x7f00000011c0), &(0x7f0000001200)=0x4) [ 261.939500][ T9594] device hsr_slave_0 entered promiscuous mode [ 261.997512][ T9594] device hsr_slave_1 entered promiscuous mode [ 262.076805][ T9597] chnl_net:caif_netlink_parms(): no params data found [ 262.093475][ T9602] IPVS: ftp: loaded support on port[0] = 21 09:46:09 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20\x00', 0x40000, 0x0) getpeername$ax25(r0, &(0x7f0000000480)={{0x3, @rose}, [@default, @remote, @bcast, @default, @bcast, @rose, @rose]}, &(0x7f0000000500)=0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x140, 0x0) splice(r1, &(0x7f0000002a00)=0xd690, r0, &(0x7f0000002a40)=0x1, 0x0, 0x8) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000002a80)=0x5) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000002ac0)={0x86, 0x7fff, 0xffffffff}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002b00)='/dev/ocfs2_control\x00', 0x40000, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/null\x00', 0xfe7253888719643c, 0x0) bind$tipc(r4, &(0x7f0000002b80)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x3, 0x4}}, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002e00)='/dev/vsock\x00', 0x400000, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000002f00)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x40, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x5}, @NFCTH_STATUS={0x8, 0x6, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0xf}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x7fff}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x4000) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000002f40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) socket$xdp(0x2c, 0x3, 0x0) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002f80)='/dev/uhid\x00', 0x802, 0x0) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f0000002fc0)={0x1, 0x9, 0x3, 0x0, 0x0, [{{r9}, 0x4}, {{r7}, 0x6}, {{r10}, 0x7f}]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000003040)={0x0, @in6={{0xa, 0x4e23, 0x1, @ipv4={[], [], @local}, 0x3ff}}, 0x1, 0x4, 0x3, 0x4, 0xa6}, &(0x7f0000003100)=0x98) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000003140)={r11, 0x3, 0x1000, 0x3d8}, 0x10) r12 = syz_open_dev$vcsa(&(0x7f0000003180)='/dev/vcsa#\x00', 0x68c8637, 0x3a2c0) ioctl$RTC_VL_CLR(r12, 0x7014) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000031c0)) r13 = openat$full(0xffffffffffffff9c, &(0x7f0000003200)='/dev/full\x00', 0x240901, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r13, 0x84, 0xc, &(0x7f0000003240), &(0x7f0000003280)=0x4) r14 = openat$cgroup_ro(r12, &(0x7f00000032c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r14, 0x402c5342, &(0x7f0000003300)={0xe6, 0x6b, 0x80, {0x0, 0x5}, 0x9, 0xc0}) ioctl$SNDRV_PCM_IOCTL_PAUSE(r13, 0x40044145, &(0x7f0000003380)=0x5abe) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000033c0)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000003400)={r15, 0x12}) [ 262.287644][ T9597] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.302626][ T9597] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.313328][ T9597] device bridge_slave_0 entered promiscuous mode [ 262.329292][ T9594] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 262.395554][ T9597] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.402767][ T9597] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.428892][ T9597] device bridge_slave_1 entered promiscuous mode 09:46:09 executing program 5: r0 = getpgid(0xffffffffffffffff) sched_setparam(r0, &(0x7f0000000000)=0x6) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0xfffffff, 0x100, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9909df, 0x4, [], @ptr=0x6}}) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x40, 0x3, 0x4}}, 0x14) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x200, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x16) clone3(&(0x7f0000000380)={0x800000, &(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200), {0x13}, &(0x7f0000000240)=""/160, 0xa0, &(0x7f0000000300)=""/31, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}, 0x50) syz_open_procfs$namespace(r3, &(0x7f0000000400)='ns/pid\x00') r4 = getpid() move_pages(r4, 0x5, &(0x7f0000000440)=[&(0x7f0000003000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000004000/0x7000)=nil, &(0x7f0000ffc000/0x2000)=nil], 0x0, &(0x7f0000000480)=[0x0], 0x0) socket(0x26, 0x1, 0x9) read$snddsp(r2, &(0x7f00000004c0)=""/59, 0x3b) setuid(0x0) r5 = shmget$private(0x0, 0x2000, 0x40, &(0x7f000000a000/0x2000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm_plock\x00', 0x8000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000540)) r7 = socket$inet(0x2, 0xa, 0x81) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x4b21, @ipv4={[], [], @empty}, 0xdf7}}, 0x4, 0x5}, &(0x7f0000000640)=0x90) msgget(0x3, 0x79db00f9607fc340) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @remote, 0xff}}}, &(0x7f0000000780)=0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000007c0)={r9, 0x0, 0x6}, &(0x7f0000000800)=0x8) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000880)={0x6c1, 0x2, 0x4, 0x0, 0x81, {r10, r11/1000+30000}, {0x5, 0x1, 0xe7, 0x2, 0x4, 0xe9, "60d0940a"}, 0x1ff, 0x2, @fd, 0x6, 0x0, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r12, 0x6, 0x15, &(0x7f0000000900)=0x8001, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000940)) ioctl$sock_SIOCGPGRP(r12, 0x8904, &(0x7f0000000980)=0x0) sched_setscheduler(r13, 0x3, &(0x7f00000009c0)=0x24) syz_open_dev$ttys(0xc, 0x2, 0x1) [ 262.471401][ T9594] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 262.572782][ T9604] IPVS: ftp: loaded support on port[0] = 21 [ 262.585268][ T9594] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 262.629174][ T9594] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 262.711065][ T9597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.722823][ T9597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.749803][ T9599] chnl_net:caif_netlink_parms(): no params data found [ 262.789309][ T9607] IPVS: ftp: loaded support on port[0] = 21 [ 262.802260][ T9602] chnl_net:caif_netlink_parms(): no params data found [ 262.826683][ T9597] team0: Port device team_slave_0 added [ 262.836409][ T9597] team0: Port device team_slave_1 added [ 262.948628][ T9597] device hsr_slave_0 entered promiscuous mode [ 263.015620][ T9597] device hsr_slave_1 entered promiscuous mode [ 263.065524][ T9597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.073409][ T9597] Cannot create hsr debugfs directory [ 263.129600][ T9599] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.137218][ T9599] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.145032][ T9599] device bridge_slave_0 entered promiscuous mode [ 263.162521][ T9602] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.169870][ T9602] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.178022][ T9602] device bridge_slave_0 entered promiscuous mode [ 263.193483][ T9599] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.203306][ T9599] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.211254][ T9599] device bridge_slave_1 entered promiscuous mode [ 263.231096][ T9602] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.240968][ T9602] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.248865][ T9602] device bridge_slave_1 entered promiscuous mode [ 263.278747][ T9599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.320682][ T9599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.367895][ T9602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.382965][ T9602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.420260][ T9599] team0: Port device team_slave_0 added [ 263.429569][ T9599] team0: Port device team_slave_1 added [ 263.435462][ T9604] chnl_net:caif_netlink_parms(): no params data found [ 263.513749][ T9602] team0: Port device team_slave_0 added [ 263.577249][ T9599] device hsr_slave_0 entered promiscuous mode [ 263.625918][ T9599] device hsr_slave_1 entered promiscuous mode [ 263.675513][ T9599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.683098][ T9599] Cannot create hsr debugfs directory [ 263.691429][ T9602] team0: Port device team_slave_1 added [ 263.728460][ T9604] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.736255][ T9604] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.743935][ T9604] device bridge_slave_0 entered promiscuous mode [ 263.752825][ T9604] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.760012][ T9604] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.768155][ T9604] device bridge_slave_1 entered promiscuous mode [ 263.775125][ T9597] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 263.829760][ T9597] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 263.888419][ T9597] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 264.007394][ T9602] device hsr_slave_0 entered promiscuous mode [ 264.055769][ T9602] device hsr_slave_1 entered promiscuous mode [ 264.115473][ T9602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.123055][ T9602] Cannot create hsr debugfs directory [ 264.129833][ T9607] chnl_net:caif_netlink_parms(): no params data found [ 264.143275][ T9594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.150179][ T9597] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 264.249749][ T9604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.261155][ T9604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.326979][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.336212][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.357477][ T9604] team0: Port device team_slave_0 added [ 264.364766][ T9594] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.376766][ T9607] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.383854][ T9607] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.394075][ T9607] device bridge_slave_0 entered promiscuous mode [ 264.405130][ T9607] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.418587][ T9607] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.427209][ T9607] device bridge_slave_1 entered promiscuous mode [ 264.435818][ T9604] team0: Port device team_slave_1 added [ 264.478160][ T9607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.516541][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.525124][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.533875][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.541111][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.550942][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.561072][ T9607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.648799][ T9604] device hsr_slave_0 entered promiscuous mode [ 264.685774][ T9604] device hsr_slave_1 entered promiscuous mode [ 264.725952][ T9604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.733547][ T9604] Cannot create hsr debugfs directory [ 264.750686][ T9607] team0: Port device team_slave_0 added [ 264.761277][ T9599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.833000][ T9599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.895497][ T9607] team0: Port device team_slave_1 added [ 264.922965][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.935965][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.944537][ T2755] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.951644][ T2755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.960583][ T9599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 265.043930][ T9602] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 265.097132][ T9599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 265.137608][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.170896][ T9602] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 265.217577][ T9602] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 265.268252][ T9602] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 265.398662][ T9607] device hsr_slave_0 entered promiscuous mode [ 265.437252][ T9607] device hsr_slave_1 entered promiscuous mode [ 265.475451][ T9607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.483128][ T9607] Cannot create hsr debugfs directory [ 265.543810][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.553109][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.564833][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.574439][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.597624][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.607024][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.615690][ T9604] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.657431][ T9604] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.738744][ T9604] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.780177][ T9604] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.837918][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.846681][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.855464][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.863853][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.880158][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.915667][ T9597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.973535][ T9607] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 266.042551][ T9607] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 266.077923][ T9607] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 266.121777][ T9607] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 266.193762][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.201401][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.212889][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.220996][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.249188][ T9597] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.280281][ T9594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.324112][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.333484][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.342675][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.349797][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.374111][ T9599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.388025][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.396175][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.404753][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.414562][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.421671][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.468636][ T9604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.479677][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 266.488571][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 266.497573][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.505582][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.525530][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 266.534210][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 266.543078][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 266.552311][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.561900][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.570461][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.579323][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 266.592395][ T9602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.604863][ T9599] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.623863][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.633396][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.642322][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.652362][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.665003][ T9597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.685906][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.693580][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.701754][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.709570][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.740468][ T9602] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.750397][ T9604] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.757729][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.767642][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.776669][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.783725][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.791382][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.800209][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.809105][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.816211][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.824519][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.864754][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 266.874120][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 266.883649][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.893160][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.902307][ T2755] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.909440][ T2755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.918444][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.926970][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.934396][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.963449][ T9594] device veth0_vlan entered promiscuous mode [ 266.979330][ T9607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.993322][ T9597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.008270][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.018387][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.027205][ T2734] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.034249][ T2734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.041907][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.050478][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.058887][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.067637][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.076071][ T2734] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.083129][ T2734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.090772][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.099495][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.108085][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.117408][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.125842][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.134058][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.143668][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.152063][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.160808][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.169281][ T2734] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.176364][ T2734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.184600][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.192724][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.200603][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 267.208388][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 267.224132][ T9599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.239545][ T9599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.276657][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.285100][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.293679][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.304945][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.313653][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.322386][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.331258][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.339665][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.348491][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.358259][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.372868][ T9594] device veth1_vlan entered promiscuous mode [ 267.407651][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 267.419058][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 267.428864][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.437863][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.446648][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.455165][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.464215][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.482513][ T9607] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.502607][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.511345][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.520016][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.529224][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.537825][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.547207][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.555953][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.564606][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.573100][ T2706] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.580172][ T2706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.588925][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.606005][ T9604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.617818][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.654972][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.664693][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.677765][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.687364][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.696404][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.703889][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.721847][ T9602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.734305][ T9602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.754970][ T9597] device veth0_vlan entered promiscuous mode [ 267.764535][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.779481][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.789571][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.801141][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.809818][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.816922][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.824452][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.833153][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.860371][ T9599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.882472][ T9597] device veth1_vlan entered promiscuous mode [ 267.891100][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 267.905919][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 267.913519][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 267.938511][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.947986][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.956075][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.969132][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.980624][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.990250][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 09:46:14 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "add088e814b8ceae63f1fe1723fa6a4c84bd32"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm_plock\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440)='devlink\x00') ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000480)=0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xf0044c789361853c}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r4, 0x759df75d863ea626, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x6}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0xfffffffffffffed5, 0x8b, r5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x20) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) getitimer(0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) [ 268.008147][ T9604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.026475][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 268.057133][ T9602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.114372][ T9607] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 268.128909][ T9607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.143801][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.151671][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.159308][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 268.168898][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.177693][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 268.179504][ T9620] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 268.187954][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.211464][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 268.219914][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.226398][ C0] hrtimer: interrupt took 26362 ns [ 268.282963][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.305228][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.332752][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.366904][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.374365][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.423849][ T9607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.453731][ T9599] device veth0_vlan entered promiscuous mode [ 268.489790][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.507451][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.536332][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.546725][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.611835][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.624071][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.646995][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 09:46:15 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) accept(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) 09:46:15 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "add088e814b8ceae63f1fe1723fa6a4c84bd32"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm_plock\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440)='devlink\x00') ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000480)=0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xf0044c789361853c}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r4, 0x759df75d863ea626, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x6}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0xfffffffffffffed5, 0x8b, r5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x20) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) getitimer(0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) [ 268.666492][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.680271][ T9599] device veth1_vlan entered promiscuous mode [ 268.738060][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.768111][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 268.805067][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.831424][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.854470][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.862551][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.874297][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.882637][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.900036][ T9602] device veth0_vlan entered promiscuous mode [ 268.919956][ T9604] device veth0_vlan entered promiscuous mode [ 268.945008][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.964054][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.984716][ T9602] device veth1_vlan entered promiscuous mode [ 269.012658][ T9604] device veth1_vlan entered promiscuous mode [ 269.033173][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 09:46:16 executing program 1: r0 = socket$inet(0x10, 0x4, 0xb) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_PIE_ON(r4, 0x7005) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000000)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000060a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x33fe0}], 0x1}, 0x0) [ 269.062143][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 269.172412][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 269.182573][ T9655] QAT: Invalid ioctl [ 269.206659][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 269.218704][ T9655] QAT: Invalid ioctl [ 269.240744][ T9607] device veth0_vlan entered promiscuous mode [ 269.260427][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 269.278808][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 09:46:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000380)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x0, 0x120, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0x100, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x1}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) [ 269.298633][ T9651] QAT: Invalid ioctl [ 269.311335][ T9607] device veth1_vlan entered promiscuous mode [ 269.332137][ T9662] QAT: Invalid ioctl 09:46:16 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}, 0x10, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{}], 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) inotify_init1(0x0) syz_open_dev$vivid(0x0, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0) inotify_init1(0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r3 = inotify_init1(0x0) poll(&(0x7f0000000100)=[{r2}, {r3}], 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$mouse(0x0, 0x1000001000000000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x4bfb, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x4bfb, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x4bfb, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16], 0x2}, 0x1, 0x0, 0x0, 0x24000000}, 0x48002) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x3], 0x0, 0x190040}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 09:46:16 executing program 2: mkdir(0x0, 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x800000, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0xc357bde5ae46158f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0x4}, 0x2000, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./file0/bus\x00', 0x0) ftruncate(r2, 0x81) write$P9_RLCREATE(r2, &(0x7f0000000080)={0x18}, 0xd) r3 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000000)) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000480)={0x9d0000, 0x6, 0x1, r3, 0x0, &(0x7f0000000440)={0x9c0903, 0x1f4, [], @string=&(0x7f0000000400)=0x3}}) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f00000004c0)=@default) syz_open_pts(r2, 0x208000) prlimit64(0x0, 0xf, 0x0, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r5, &(0x7f0000001cc0), 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r8, 0x5386, &(0x7f0000000000)) r9 = fcntl$getown(r8, 0x9) ioctl$TIOCSPGRP(r7, 0x5410, &(0x7f0000000100)=r9) creat(0x0, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 269.572348][ T9672] dlm: non-version read from control device 8 [ 269.603485][ T9670] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 09:46:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xbb, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x55d}, 0x8, 0x3, 0x7}, 0xffffffffffffffff, 0x0, r1, 0x0) syz_open_procfs(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) execveat(r3, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=[&(0x7f00000000c0)='^]nodev-proc\x00', &(0x7f0000000100)='\x00'], &(0x7f0000000300)=[&(0x7f0000000180)='ppp0Z!(', &(0x7f00000001c0)='wlan0]-\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='ppp1-\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='\x00'], 0xe07096727439e1a6) [ 269.748963][ T9685] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) [ 269.750950][ T9687] dlm: non-version read from control device 8 09:46:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8}]}}}]}, 0x3c}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80801, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000140)={0x3, &(0x7f0000000200)=[{}, {}, {}]}) 09:46:16 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x100000a912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f00000000c0)=""/13, &(0x7f0000000100)=0xd) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000034000510d25a80648c63940d0124fc60100010400a000000053582c137153e370948018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 269.946416][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 269.965526][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 270.011301][ T9693] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 09:46:17 executing program 2: pipe(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) socket$packet(0x11, 0x3, 0x300) dup(0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, &(0x7f0000006ffc), 0x26d) getpgrp(0x0) memfd_create(0x0, 0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5452, &(0x7f0000000040)) fcntl$getownex(r2, 0x10, &(0x7f0000000580)={0x0, 0x0}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) fsetxattr$system_posix_acl(r4, &(0x7f0000000240)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) gettid() sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64], 0x8}}, 0x20004850) memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r5) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00'}, 0x30) socket$packet(0x11, 0x3, 0x300) dup(0xffffffffffffffff) getpgrp(0x0) r6 = memfd_create(0x0, 0x0) r7 = syz_open_dev$sndseq(0x0, 0x0, 0x0) dup2(r7, r6) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r3, r4, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r1, 0x0, 0x1ba, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r9}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r8, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0xc) gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000640)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80b}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setpipe(r10, 0x407, 0x0) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r11 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) r12 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) open(0x0, 0x0, 0x0) pwritev(r12, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r11, 0x4c00, r12) sendfile(r10, r11, 0x0, 0x102000004) [ 270.080311][ T9699] openvswitch: netlink: Flow actions attr not present in new flow. [ 270.088952][ T9693] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 09:46:17 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000000)) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/236, 0xec}, {&(0x7f00000002c0)=""/34, 0x22}, {&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000340)=""/207, 0xcf}, {&(0x7f0000000440)=""/126, 0x7e}, {&(0x7f00000004c0)=""/243, 0xf3}, {&(0x7f00000005c0)=""/229, 0xe5}], 0x7, 0xfffffffffffffffe}, 0x24) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf, 0x0, 0xffffffffffffffff, 0x0, [], r4, r0}, 0x3c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) r7 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r5}, @map={0x18, 0x0, 0x1, 0x0, r6}, @map={0x18, 0x0, 0x1, 0x0, r7}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 09:46:17 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x68000000, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000240029080000000000000000040000006aa0e26bda2f8b810b808cbef2961dadd7b71bbd67750d5aa668c721f6d7f9e21a1acd3076000ef839adb695341da29e645c272158b69f04a2a4a129"], 0x79}, 0x1, 0xffffff7f0e000000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000001010100000000000000000a000009060012000004000008000300000000043800060034000300060001004e200000060001004e210000060001004e200000060001004e210000060002004e220000060001004e2300b5e7bb1f549838f7fa"], 0x64}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040040) 09:46:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_create(0x9, 0x80000) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)={0x9, 0x20000000001, "11"}, 0x301402) 09:46:17 executing program 4: 09:46:17 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f82c86046fc02692774ed0a00006572642f66696c749b00"/37]) chdir(&(0x7f00000002c0)='./bus\x00') mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000380)=""/47, 0x2f) 09:46:17 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x1c, 0x0, 0x4}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x0, 0x4012, r0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x408}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x40}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r6 = getpid() sched_setscheduler(r6, 0x5, 0x0) rt_tgsigqueueinfo(r6, 0xffffffffffffffff, 0x31, &(0x7f0000000140)={0x8, 0x7ff, 0x1}) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x4, 0x8, 0x9, 0x3]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$FBIOGET_VSCREENINFO(r8, 0x4600, &(0x7f00000001c0)) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000300)={0x9, &(0x7f0000000280)=[{0x5, 0x6, 0x89, 0x2}, {0x5, 0x7f, 0x1, 0x1ff}, {0x81, 0xd5, 0x4, 0x1}, {0xe302, 0x3, 0x1, 0x5}, {0x3, 0x81, 0x1f, 0x966f}, {0x3, 0x4, 0x1, 0x5}, {0x2, 0x80, 0x1, 0x2}, {0x4, 0x3, 0x7, 0x400}, {0xea, 0x40, 0x59, 0xaa}]}, 0x10) process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x299, 0x0) [ 270.632461][ T9729] overlayfs: unrecognized mount option "lo‚È`Füi'tí [ 270.632461][ T9729] " or missing value [ 270.771695][ T9729] overlayfs: unrecognized mount option "lo‚È`Füi'tí [ 270.771695][ T9729] " or missing value 09:46:17 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5fffffef}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigaction(0x28, 0x0, 0x0, 0x0, 0x0) r0 = getpid() syz_open_procfs(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r1, &(0x7f0000000a00)=[{&(0x7f0000000900)=""/140, 0x8c}], 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000040)={0xf0f03c, 0x0, "c342f0ad01fae0c83a616bbb3030f96167a3a0ebd7b1f14b477cb9a31f2b5df5"}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0) pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, 0x0, 0x0) connect(r5, &(0x7f0000000280)=@hci={0x1f, 0xa, 0x9b71e9902926a3cd}, 0x80) close(r4) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r7}}, 0x10) 09:46:17 executing program 4: r0 = memfd_create(&(0x7f0000000180)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedc\xae\xd8\x8d7+b\x1eq\xcd\xed\xdch\x9d\fJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xf9o\xa4k\x012>\xa1\x9c\'x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f(\x9b\xf4\xdf\xe4\xbfqR\x80\x82\a\xd2xx\\\xc2\x86\xc1\xe3u\xb02\xb2d\x8aa!\xb7\xacb\xdf\x05\xeb\x05\xe8\xae\xc5C\xc8(uI\xa9\xdf\xf4\x8d\xb5\xd3\xfb=\x96|\xa1\xf3\xd3\xe3F\xc4 {\xd8,\xa5\xd4\x9e@\ne]\xe3rw}\xa19C[H\x10Fn\xaa\x85M\xa2\x1b\x98\xafI\n\x85\xa7s\xd2c\xf1\xf0\x0f\x9b\xd1\xe7w\xf8\x80\xa6\xeasNp\x95\x96\xc4\x11\x98O\"(\x90\xd0\xee8\x9fc\xe3', 0x0) fallocate(r0, 0x0, 0x2000429, 0x3f) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000000004, 0x8000000000000011, r0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 09:46:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000880)='./file0\x00', 0x0, 0x800, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$exfat(&(0x7f0000000000)='exfat\x00', &(0x7f0000000040)='./file0\x00', 0x100, 0x4, &(0x7f0000000380)=[{&(0x7f0000000080)="a069331ffb68529fb86222421f652588c7a25945b45ac13579a46bc440bc8fe76a675bf24db0fb3b9674fa79b00bb689f0286887e527346da16d925284", 0x3d, 0x3}, {&(0x7f00000000c0)="ba6fbb312f7fd15c7603037c07f12b35723ef5e3198878a58919ddbb71a90b86047458c36e07734ee07048ac141480a52b367eda32d5fbabddd536389a61b39590523e30fd87ca291d8bca41f128785703e89e93f3ae64f38d98eace2bd259066b4812f5afc070f7441e2bb446d1a09eb45f06c4b02e9e60238d122d8516fd844d539fff7996d386a7", 0x89, 0x4}, {&(0x7f0000000bc0)="0388e40937b07de87ea369ee9b72f94dde7f4b81ffa4fcffefe19e418863af41a56b10ec0eba6dff00306ea0ae8afc154718e2c313d059a1cb976a1bfaa7b7f05181ef01f22bf3fb8aee8df8617b4bf62f326f773fc510be2ba1f0b2b0975069e4515228c033b73ab6e1ef83cdff018f0adc2fb1bc756f9862778de4937cc750f23e0bd987ee31057ef3512fa4a46b64cba1b2f8c8e17528ff94921cd90ce7683dba84d5fee744a5ac66e63d7560af6130aaa3b9f0eddf1e1a697e6580dc24d524d2f3aec9156a57aad60d30ef92eba1dc810a4b867438e09a4b8a1fe56f60e31184948caf0854c08b8b47d40e6a5a59a51560", 0xf3, 0x1}, {&(0x7f00000002c0)="56c3e50f74f34d85e25f9c7d3611443ad83c3b041ad20d0fe2f41f22d98b2d4a89ab1629ce2c5c43d02d821ea9ad507056df1b8f6fd2df6eac970a802b29491ab96ff051f5c217f8a060e2a6f263ccd299588694e3cf6bd3dcbab5b975f65189494f825517f97d4f672d477145d04d877f3197b9c0744e6f370863f0eb93c987719fa263440769ab2147c42cf38565c5ad", 0x91, 0x8}], 0x102081, &(0x7f00000009c0)=ANY=[@ANYBLOB='discard,errors=continue,dmask=00000000000000203523256,umask=00000000000000000000004,uid>', @ANYRESDEC=r3, @ANYBLOB="2c736531085cd521d90962"]) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_DEV_DESTROY(r0, 0x5502) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) setsockopt$TIPC_IMPORTANCE(r11, 0x10f, 0x7f, &(0x7f0000000b40)=0x1, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/audio\x00', 0x181, 0x0) sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r9, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x20060880}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1101}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r9, 0x208, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x390c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000080) 09:46:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timerfd_create(0x1, 0xf66cbbce5569ffad) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000000c0)) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@umask={'umask'}}]}) 09:46:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmdt(0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2710}) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)="1b", 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = accept4$bt_l2cap(r2, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) shutdown(r3, 0x1) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000300)="14b1df25", 0x4, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x83, &(0x7f0000000180), 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000180)=0x10000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r7 = semget$private(0x0, 0x2, 0x141) semtimedop(r7, &(0x7f0000000100)=[{0x0, 0x1}, {0x2, 0x40, 0x800}, {0x3, 0x200, 0x800}, {0x4, 0x6}, {0x2, 0x10}, {0x0, 0xe1, 0x800}], 0x6, &(0x7f0000000140)={0x0, 0x989680}) socket$nl_generic(0x10, 0x3, 0x10) [ 271.125220][ T9759] input: syz1 as /devices/virtual/input/input5 [ 271.142444][ T9749] hfs: can't find a HFS filesystem on dev loop5 [ 271.466757][ T9759] input: syz1 as /devices/virtual/input/input6 [ 271.470000][ T9709] syz-executor.2 (9709) used greatest stack depth: 22008 bytes left 09:46:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x7, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x26}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18}}}]}, 0x48}}, 0x0) 09:46:18 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f00000000c0)=0x2) mount(&(0x7f0000001340)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000180)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22, &(0x7f0000000040)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0x118, 0x118, 0x118, 0x118, 0x118, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, &(0x7f0000000200), {[{{@ipv6={@empty, @local, [0x0, 0xff000000, 0xffffffff], [0xffffff00, 0xff, 0xff000000], 'ip6gretap0\x00', 'veth1_virt_wifi\x00', {0xff}, {0x56cec731446686e3}, 0x2c, 0x1, 0x1, 0x32}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x9, 0x9, 0x80000000, '\x00', {0x5}}}}, {{@ipv6={@rand_addr="738caa41f6954f3b6ea480eb2b3d043b", @ipv4={[], [], @loopback}, [0x0, 0xff, 0xff000000, 0xffffff00], [0x0, 0xffffff00, 0xffffff00, 0xff000000], 'hsr0\x00', 'lo\x00', {}, {0xff}, 0x2f, 0x2, 0x2, 0x9}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$CAPI_GET_FLAGS(r4, 0x80044323, &(0x7f00000001c0)) 09:46:18 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000ac0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000a80)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@zcopy_cookie={0x13}], 0x18}, 0x0) pselect6(0x40, &(0x7f0000000000)={0xbe, 0x5, 0xfffffffffffffffa, 0x100000000, 0x7ff, 0xff, 0x7, 0x7}, &(0x7f0000000080)={0x8, 0xb0a9, 0x100, 0x5, 0xfff, 0x5, 0x200, 0x800}, &(0x7f00000000c0)={0x9, 0x6, 0x5, 0x9, 0x100000001, 0x7ff, 0x8000, 0x3}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={0x4}, 0x8}) 09:46:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmdt(0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2710}) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)="1b", 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = accept4$bt_l2cap(r2, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) shutdown(r3, 0x1) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000300)="14b1df25", 0x4, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x83, &(0x7f0000000180), 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000180)=0x10000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r7 = semget$private(0x0, 0x2, 0x141) semtimedop(r7, &(0x7f0000000100)=[{0x0, 0x1}, {0x2, 0x40, 0x800}, {0x3, 0x200, 0x800}, {0x4, 0x6}, {0x2, 0x10}, {0x0, 0xe1, 0x800}], 0x6, &(0x7f0000000140)={0x0, 0x989680}) socket$nl_generic(0x10, 0x3, 0x10) 09:46:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="214e017c6f767920"], 0xda00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)=r5) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x1) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) 09:46:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x9, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x80000001, 0x24200) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000180)) r4 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r4, 0x0, 0x0, 0x20028e7f, &(0x7f0000e68000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r1, &(0x7f00000001c0)="329b3fe652a11b7329444e79e0eec381e753b9fb6af11a119c6eb51645c637024ea9c6ae12056627211049fe50e8cea1ec1e5e861379a51bc5b97eb2f50d72556b2b7b92c7b07853a4ad943ea3a139b5e64bc13a6697e7f9fccdfcf6266ed678d03cb28b05f7019ee62d61119ad0753085f606e6e1f9b210cacb5ce667b2c40945916e3c3bee8a5b89957c91dbc2faa196e9bd0e9fb305", 0x97, 0x0, 0x0, 0x226) read(0xffffffffffffffff, &(0x7f0000000ac0)=""/245, 0x100000394) dup2(r2, r1) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ttynull\x00', 0x101002, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x779) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r6, 0x0, 0xedc0) [ 271.722247][ T9791] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.732831][ T9783] EXT4-fs (sda1): re-mounted. Opts: inode_readahead_blks=0x0000000000000400, 09:46:18 executing program 1: syz_open_dev$swradio(0x0, 0x0, 0x2) prctl$PR_GET_DUMPABLE(0x3) poll(&(0x7f00000000c0), 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) getegid() keyctl$chown(0x4, 0x0, 0x0, 0x0) getgid() syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000080), 0x4) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400c010, 0x0, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f0000000340)=""/234) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10a, 0x10a, 0x7, [@struct={0x1, 0x9, 0x0, 0x4, 0x1, 0x400, [{0xd, 0x0, 0x1000}, {0x5, 0x1, 0x10000}, {0x8, 0x5, 0xffff}, {0xd, 0x0, 0x5}, {0x1, 0x3, 0x8001}, {0xd, 0x2, 0x9}, {0xa, 0x5, 0x1}, {0xa, 0x0, 0x5}, {0x8, 0x5, 0x6}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x5, 0x4}, {0x3, 0x3}, {0x8, 0x2}, {0x7, 0x5}]}, @datasec={0xe, 0x4, 0x0, 0xf, 0x2, [{0x4, 0x8, 0x5}, {0x2, 0x31, 0x8}, {0x4, 0x2dc, 0x80000000}, {0x3, 0x9}], "050c"}, @volatile={0xb, 0x0, 0x0, 0x9, 0x1}, @ptr={0x1, 0x0, 0x0, 0x2, 0x1}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x62, 0x0, 0x64, 0x2}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x0]}}, &(0x7f0000000000)=""/25, 0x12b, 0x19, 0x1}, 0x20) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000200)=""/4096) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp\x00') r2 = dup(r0) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x143) sendfile(r2, r1, 0x0, 0x523) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) 09:46:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x7, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x26}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18}}}]}, 0x48}}, 0x0) [ 271.923960][ T9808] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:46:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x82800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000080)=0xff, 0x35d) getsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000bfcffc), &(0x7f0000000100)=0xffffffffffffffa8) 09:46:19 executing program 0: mkdir(&(0x7f0000001340)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in, @in=@multicast2}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000000)=0xe8) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='[d::]:6:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 09:46:19 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x201d03, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f00000003c0)) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e1f, @multicast2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0xfffffdde) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000df0000a00000eed95cbf00000000fcffffff000200003101120000000000000000000000000000000000000000000000000000000000000500000000000000000000000080ffff09000000040000000700"/104]) sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r1, &(0x7f0000006c80), 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) sendto$inet(r1, &(0x7f00000012c0)="03268a927f1f6587b967483041ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x7ff8, 0x2, 0x0, 0x27) poll(0x0, 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0xfff) 09:46:19 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r3, 0x40044104, &(0x7f0000000100)=0x5) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) dup2(r5, r1) 09:46:19 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0xe}, 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x2, 0x5, 0x7de, 0x4}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x4b41062c}}, 0xffffffb0) poll(&(0x7f0000001f00)=[{r3}, {r2}], 0x2, 0x0) 09:46:19 executing program 3: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x100, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="b9080000", @ANYRES16=r4, @ANYBLOB="050400000000000000007e000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="b2c34ecb9716"}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x507}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc9bbb7d07b301861}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000008aa1b000000000008000d00fddeffff41cb60a8f3e741cf9d4d7718a9547dfb6a413efac1f7325f804724611febdf91b3285b0613c7125c8d81907b54c4a49e922c29c4ec3fb12612f96d698252bb5da95210a6d1ec64d76a4aaa0ac7fdefbe999ef7c25bf78221bd8b926a2b669b"], 0x30}}, 0x0) 09:46:19 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r1, 0xc01456b8, &(0x7f0000000080)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) fcntl$getown(r2, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="737461636b2026260a3acef274821497e9820b76ca3d8ad731a929e9c71e5310679a709739fe7e80c9bec399af590d2c6c0d91db1c7fe97544a7738da293c18b5ea3edd46cc002926e44d3b7047c29202fa3c97cbb7cde9fa45e6d455f539141e9c67fb6f2edb7726e88ddca00a9f69a267000f2f53b248ef4c7097f75fcf5e5e30d9cb9496832"], 0xa) syz_open_dev$amidi(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) dup3(0xffffffffffffffff, r5, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) [ 272.595974][ T2755] libceph: connect (1)[d::]:6 error -101 [ 272.601951][ T2755] libceph: mon0 (1)[d::]:6 connect error [ 272.618556][ T2755] libceph: connect (1)[d::]:6 error -101 [ 272.619667][ T9834] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 272.624475][ T2755] libceph: mon0 (1)[d::]:6 connect error 09:46:19 executing program 5: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1c) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x40000}, 0x1c) close(r0) 09:46:19 executing program 2: sysinfo(&(0x7f0000001200)=""/4096) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0x0, 0x0}) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)=[&(0x7f0000000040)='&\x00', &(0x7f0000000080)='user\x00'], &(0x7f00000001c0)=[&(0x7f0000000100)='/eth0#ppp1#)\x00', &(0x7f0000000140)='self\x00', &(0x7f0000000180)='securityppp1}#!wlan1+vmnet1\x00'], 0x100) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000300), 0x1b5, &(0x7f0000000600)}}], 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) ioprio_set$pid(0x1, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) statx(r3, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, &(0x7f00000002c0)) 09:46:19 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xc60}]}, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x400, 0x44) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000180)={0x28, 0x2, 0x0, {0x5, 0x3, 0x101}}, 0x28) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_GET_REG_LIST(r4, 0xc008aeb0, &(0x7f00000000c0)={0x6, [0x1000, 0x7, 0x8000, 0x9, 0x7ff, 0x8]}) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f0000000000)) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20400, 0x0) splice(r7, 0x0, r0, 0x0, 0x5, 0x0) 09:46:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) pipe(0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000140)={{0xff, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10, 0x2, 0x17}, {@loopback, 0x4e20, 0x1, 0x4, 0x1, 0x7d}}, 0x44) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000040)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)) waitid(0x83b895581628fca4, 0x0, &(0x7f0000000040), 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x6443cb4dc7320343}], 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = getpid() sched_setscheduler(r9, 0x5, 0x0) getresuid(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000004c0)=0x0) stat(&(0x7f0000000500)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r13, 0x5386, &(0x7f0000000000)) fstat(r13, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r15, 0x5386, &(0x7f0000000000)) r16 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r16, 0x5386, &(0x7f0000000000)) r17 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r17, 0x5386, &(0x7f0000000000)) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000840)={0x7, 0x3, 0x4, 0x210100, 0x2, {0x0, 0x2710}, {0x52c56b2280764df7, 0x0, 0x1, 0x1f, 0x8, 0x81, "71e511ab"}, 0x2, 0x2, @offset=0x5, 0x7ff, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup(r19) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f00000008c0)={0x0}, &(0x7f0000000900)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000940)=0x0) getresgid(&(0x7f0000000980), &(0x7f00000009c0)=0x0, &(0x7f0000000a00)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a40)={0x0}, &(0x7f0000000a80)=0xc) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r26) stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r28 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$unix(r8, &(0x7f0000000c80)={&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000240)}, {&(0x7f00000005c0)="66045042e0b9bd5806544fbaba35ab761f8928a0ded82a780e9b390be1d51116ea00c649c7b269b4eb02e840f154bfdf457dc405d2f25984d7689509b077e7982f1667d18f5ee1ef33c50fff3a0a3b99bde6096cba5c4fc3e38633575eb4fd309315d70ea42ce6a3b1779909f06f9d09c7048e26ec721cfb6dfe0c54ece186a0981dfdfcf269fc65fecf25f1673e8ac86d7cc83cff595f48cda6ff891e1e943533aef18303d8440ab8ebc4bcfc2ed0f7db58546b1bb7e9680e31d7ee50c66ab65485597797566a1d37cff77522aa885b530757136dfab5e8cdeeae71be9f89fda187acf5b8b8d072c4db1836e70fdbbb6b", 0xf1}, {&(0x7f00000002c0)="cd1639696a8ccad3d2d6f4d2bc92180bf456eda8d34785095d0373428931eeb2ef9d4c4c5ddf8608b6ea299b9c05006f9d2dc81f2ba0ce6aedc22e0c4dbd288080307a78fcde6173e53ec48a2d9132", 0x4f}], 0x3, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r1, r12, r14}}}, @rights={{0x2c, 0x1, 0x1, [r5, 0xffffffffffffffff, r15, r16, 0xffffffffffffffff, r17, r2]}}, @rights={{0x14, 0x1, 0x1, [r18]}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}, @cred={{0x1c, 0x1, 0x2, {r24, r26, r27}}}, @rights={{0x14, 0x1, 0x1, [r28]}}], 0xe0, 0x4000000}, 0x4080086) dup2(r6, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f1eaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x8200, 0x2, 0x0, 0x27) 09:46:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) socket(0xa, 0x0, 0x0) socket(0x9, 0x3, 0x0) socket(0xa, 0x802, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz1\x00', 0x1ff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x4000090) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="214e017c6f767920"], 0xda00) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="586c0589c8a546e6"], 0x8) openat$cgroup_procs(r1, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43407) 09:46:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec00000000011905000000000000000000000000240001001400010008000100ac14140008000200ffffffff0c000200050001009effffffb40002000c000200c0000100000000002c0001001400030000000000000000000000ffffe000000114000400000000000000000000000000000000002c000100140003000000000000000000000000000000000114070000008800000000000000000000000000012c00010014000300fe8000000000000000000000000000bb14000400fe8800000000000000000000000000010c000200050001009e00fa932e868aea1ebd00000c0002000500010006000000"], 0xec}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000000)) [ 273.218287][ T9874] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 273.282331][ T9874] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 273.321074][ T2967] libceph: connect (1)[d::]:6 error -101 [ 273.328452][ T2967] libceph: mon0 (1)[d::]:6 connect error 09:46:20 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/renderD128\x00', 0x1, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000440)='trusted.overlay.redirect\x00', &(0x7f0000000480)='./file0\x00', 0x8, 0x2) accept$inet6(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000140), &(0x7f0000000000)=0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24046015) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) faccessat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x400) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r6 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r5, &(0x7f0000001400)="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", 0x600) sendfile(r5, r6, 0x0, 0x10000) 09:46:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x435, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x75bd, 0x5}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x3) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xf5}}, 0x0, 0x0, 0x4c, 0x0, "3a3d34dd4691129b34ba2190cd656cddbee21468d93b1476379d532d4712fc19ed6fe4b20216a22bcaa1c61834d65e760081d0aa0c24c64870b8b958ab5db21c04046b6c050b44725db25831b5b57334"}, 0xd8) sendmmsg(r1, &(0x7f0000000b80), 0x36, 0x0) 09:46:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_GET_REPORT_REPLY(r2, &(0x7f00000000c0)={0xa, {0x8, 0x2a, 0x9}}, 0xa) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100043bd000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c0001006d616373656300000c0002000800030008000000"], 0x3c}}, 0x0) 09:46:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140), &(0x7f00000002c0)=0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000300)=0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffeb6}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x18000000000002a0, 0xb9, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800358000638877fbac141421e9", 0x0, 0x100}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000400)={{0x2e, @dev={0xac, 0x14, 0x14, 0x2f}, 0x4e20, 0x0, 'none\x00', 0x2, 0x3, 0x49}, {@empty, 0x4e21, 0x2000, 0x8, 0x101, 0x741}}, 0x44) 09:46:20 executing program 2: pipe(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) dup(0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, &(0x7f0000006ffc), 0x26d) getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x80020, 0x80000) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000000)) r3 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000000)) r4 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x28, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000000000)) socket$packet(0x11, 0x2, 0x300) r5 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f0000000000)) fcntl$getownex(r5, 0x10, &(0x7f0000000580)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) gettid() memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) r6 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r6) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) dup(0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r7, 0x0, 0x1f4, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r8 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x102000004) [ 273.560144][ T9889] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 09:46:20 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x92608480}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffff000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4884}, 0x1440) getsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x4) syz_read_part_table(0x300000000000000, 0x0, &(0x7f0000000200)) 09:46:20 executing program 3: request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000001fee)='R\trus\b\x00\x00\xf1\x02\x11\xa0-x\x8e\x90\xc3', 0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x40) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0x5, 0x0, [], {0x0, @reserved}}) [ 273.934420][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 273.934434][ T28] audit: type=1800 audit(1579340780.851:31): pid=9905 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=22 res=0 [ 273.975076][ T28] audit: type=1804 audit(1579340780.891:32): pid=9901 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir782921644/syzkaller.jP2IeZ/7/file0/file0" dev="loop0" ino=22 res=1 09:46:21 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') socket$inet_tcp(0x2, 0x1, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x84000, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000001c0)={0x8000, 0x8}) 09:46:21 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)={0x1, [0x0]}) r1 = socket(0x10, 0x3, 0x20) write(r1, &(0x7f00000003c0)="2400000052001f0014f9f407000904000a00471010000100feffffff0800000000000000", 0x72) 09:46:21 executing program 4: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r0 = socket(0x2000000000000021, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@loopback, @in=@empty}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000480)=0xe8) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7ff, 0x141082) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r3, 0x800}}, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80303004}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44001}, 0x40) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20}) 09:46:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x3, 0x0, @ioapic={0x4000, 0x7, 0xbc, 0x6, 0x0, [{0x1, 0x8, 0xad, [], 0x3}, {0x4, 0x0, 0x3f, [], 0x3}, {0xab, 0x2, 0x7, [], 0x5}, {0x37, 0x8, 0x2}, {0x19, 0x3, 0x4}, {0x9e, 0x3, 0x3, [], 0x80}, {0x6, 0x96, 0x9, [], 0x4}, {0x6, 0x3, 0xb3, [], 0xb7}, {0x6, 0x4, 0x3f, [], 0x20}, {0x1, 0x8, 0x3f, [], 0x9}, {0x8, 0x1, 0x66}, {0x38, 0xc1, 0x7f}, {0x3, 0x8, 0x0, [], 0x8}, {0x58, 0x1, 0x6, [], 0x43}, {0x7f, 0x1, 0x1f}, {0x3, 0x0, 0x6, [], 0x8}, {0xf3, 0x9, 0x80}, {0x0, 0xc3, 0x40, [], 0x5}, {0x40, 0x7f, 0x8}, {0x80, 0x8, 0x8}, {0x0, 0x0, 0xfa, [], 0x5}, {0x7, 0x20, 0x4, [], 0x3}, {0xc0, 0x3d, 0x7f, [], 0xfb}, {0x3f, 0x2, 0x7, [], 0x8e}]}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@dev}}, [@sec_ctx={0xc, 0x8, {0xffffffffffffffe2}}]}, 0x5c}}, 0x0) [ 274.397370][ T9929] overlayfs: filesystem on './file0' not supported as upperdir 09:46:21 executing program 0: r0 = socket$inet(0x2, 0x4000020000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb3, 0x20000800, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x60, 0x0, 0xffffffffffffff37) 09:46:21 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000000)) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000000)) r3 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@ipv4={[], [], @multicast1}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) getresuid(&(0x7f0000000300), &(0x7f00000004c0), &(0x7f0000000500)) setuid(r9) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r13) mount$9p_tcp(&(0x7f00000001c0)='127.0.0.1\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x10000, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e21,mmap,privport,dfltuid=', @ANYRESHEX=r9, @ANYBLOB="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", @ANYRESDEC=r11, @ANYBLOB="2c666f776e65723cb58a4a996db1c8e6e7525b6d3132a130ca913d862985532fc1be31a24b786e4f11cfae583f3f2adeca30f77eae69c38c6e834646b98751e9125240ab1b222ba2f4391c8cc02f22d9b62715e4d28f6de69727495b625c2a9292ad11e38ddd82ac9ef6cff8a4bd06008c7a722611e921b1de2d7ae21722a9d90c4350e4a070225584104f0fdb49a0a589a13b5335a234cec7d5b43da8e14f882069d3b38c41b6e9aec00b7302f7b8095f36c8f1784eb549f45d31ba139629d9f4274aeee68c24677c00000000000000", @ANYRESDEC=r13, @ANYBLOB="5813894a95bcca900849fad759b1c7a5b14230bd62388d4cec3560397c5de37f9eed76076c7259203ba7d3a24d7d6d27104d630dbf44e1a2c393d517e737af28b394a99bfb5b8e8df10ee4eafcf7e51a641c9897bf32e4f40e98b006e059bfdb7d11bf4b7c020571b2a3d8cbbb20518a89b2dc25806940085da50dbc250568cdc09a09c1588a938c404d450000060000000000000000000000000000000000007a690ac7ffac6ca2a61594cee3cdbfa50dd3cc7bcbdaba519c17c548417b27622bbe87911b65f8"]) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000540)={0xe, 0x302, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r14, 0x0, 0x1, 0x4}}, 0x6ee1f56b) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe]}}, r14}}, 0x48) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {r14, 0x1}}, 0x10) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000000)) close(r3) r15 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r15, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r15, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x0) 09:46:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x3, 0x0, @ioapic={0x4000, 0x7, 0xbc, 0x6, 0x0, [{0x1, 0x8, 0xad, [], 0x3}, {0x4, 0x0, 0x3f, [], 0x3}, {0xab, 0x2, 0x7, [], 0x5}, {0x37, 0x8, 0x2}, {0x19, 0x3, 0x4}, {0x9e, 0x3, 0x3, [], 0x80}, {0x6, 0x96, 0x9, [], 0x4}, {0x6, 0x3, 0xb3, [], 0xb7}, {0x6, 0x4, 0x3f, [], 0x20}, {0x1, 0x8, 0x3f, [], 0x9}, {0x8, 0x1, 0x66}, {0x38, 0xc1, 0x7f}, {0x3, 0x8, 0x0, [], 0x8}, {0x58, 0x1, 0x6, [], 0x43}, {0x7f, 0x1, 0x1f}, {0x3, 0x0, 0x6, [], 0x8}, {0xf3, 0x9, 0x80}, {0x0, 0xc3, 0x40, [], 0x5}, {0x40, 0x7f, 0x8}, {0x80, 0x8, 0x8}, {0x0, 0x0, 0xfa, [], 0x5}, {0x7, 0x20, 0x4, [], 0x3}, {0xc0, 0x3d, 0x7f, [], 0xfb}, {0x3f, 0x2, 0x7, [], 0x8e}]}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@dev}}, [@sec_ctx={0xc, 0x8, {0xffffffffffffffe2}}]}, 0x5c}}, 0x0) [ 274.514874][ T9944] ucma_write: process 35 (syz-executor.5) changed security contexts after opening file descriptor, this is not allowed. 09:46:21 executing program 3: semget(0x1, 0x0, 0x0) semop(0x0, &(0x7f0000000080)=[{0x2, 0xc101}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttynull\x00', 0x10040, 0x0) syz_open_pts(0xffffffffffffffff, 0x4000000000000002) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 09:46:21 executing program 4: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r0 = socket(0x2000000000000021, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@loopback, @in=@empty}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000480)=0xe8) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7ff, 0x141082) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r3, 0x800}}, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80303004}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44001}, 0x40) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20}) 09:46:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x8000010, 0xaa14a06980a608a3) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000000)) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x30a, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT=r1]]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000180), 0x4) r4 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x800, 0x200000) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000000100)=0xda0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000240)={0x0, 0x3, 0x2, 0x6000000000, 0x6, 0x3, 0xa2d0, 0x100, 0x2, 0x1a901fdf, 0x4, 0x2}) 09:46:21 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00', 0x8, 0x6095feb4c6236666) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x28) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r2, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f", 0x5f4) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000800)='/dev/snapshot\x00', 0x400880, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r4, 0xae45, 0x5) sendfile(r2, r3, 0x0, 0x10000) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0\"000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r6, 0x4b61, &(0x7f0000000000)) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x1, 0x0) writev(r7, &(0x7f0000000000)=[{0x0}], 0x1) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000580)='/dev/nvram\x00', 0x402000, 0x0) write$FUSE_INIT(r8, &(0x7f0000000840)={0x50, 0x0, 0x2, {0x7, 0x1f, 0x1, 0xce0001, 0x4, 0x0, 0x7, 0x8000}}, 0xfd00) r9 = getgid() syz_mount_image$hfs(0x0, &(0x7f0000000140)='./file1\x00', 0x400, 0x4, &(0x7f00000004c0)=[{&(0x7f00000003c0)="8a45e7b2570472487b2005ceeaff3c08271f9ce03102721a0bf909deb537cbd27da11b13e730c161c5317ef42b1a919468916088c57f6b10decfa17f7763442619619bab35a87e05ddc53f9ee105c7a0666279d615f25dc9a83eb609be469790a07ce74afba4e636bdd7ed4787f35d9bcf65cd7bec3365af86ad208a40f77233abcf35bec40d0f5719d13e6aff0590a5f1f503527fe7aa457f75c1d569b75a45892c90cf87ff304bdab0a020249b9f8f2d103e6c5c26f323fb88dd8e273ac1eccba28232c1f1d3999984d5c58c6ef1d0b2420259e304c1609b73417fa4684b4759f458203a92bbe95fa8e36c4b", 0xed, 0x7}, {&(0x7f00000001c0)="5dadadf27862165150e5cc", 0xb, 0x8}, {0x0, 0x2c3, 0x7f}, {&(0x7f0000000300)="c9eed6148caca5f18cef0f0dc0578d82321ef1660537b2b22d137b6d64967b00d793ed2babeb5fb5d0d2329b290ed0a17fd111a3d20f03daa5f9c9", 0xfffffffffffffd7f, 0x74d}], 0xced2b21963fd141, &(0x7f0000000940)=ANY=[@ANYBLOB='quiet,gid=', @ANYRESHEX=r9, @ANYBLOB="2c706172743d3078303030303030303030303030303030302c73657373696f6e3d3078303030303066666666666666653030302c71756965742c736d61636b6673666c6f6f723d2c736d61636b66736862743d66757365002c66736e616d653d66757365002c00e48cc7a9f93bcc3b7b152e2c933ca2c7dd8916688b35d07a965c8a29d644b8c322f1bc4c175836b11917d832a57b3ff93be35406b9b49f73d5a312eb89650be343fdb8a32660f96c18d15ed7023c521181b4978c205e9a4c68b48912a644e731a40d756ac916eded249b8f569d1a69845c648ed741f87f2963a4c3cb269882d6f7bb12cc9f90c67f1e275e4402eccfd3828679b5682731eb7a5ef563f28a5e0fbacc8917e405438cbeade4dfb9c3c475cfbed6b10f35e04b1bdb3add2c34bb88ba924c8e75de517313e88e582fbcc1624f4d7e0d2742f61aa13a87ab844c087233c4340cbe2bdce3dd2332f24c6994c0d50b0d49cf411dff7325f64efb7376bda969b6f04dfd34d45a137a77122cf88692eca1adb2216d60c581515ff9253eea70c4ae2ae36c0205136705795b9f842786bf282730408e7bb59e826f541e09831974c3452bc59cedcb4f99d3c245"]) readahead(r6, 0x120000000, 0x5) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x800, 0x0) ioctl$TUNGETIFF(r10, 0x800454d2, &(0x7f0000000340)) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x1, 0x0) writev(r11, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)}], 0x2) readahead(r11, 0x200, 0x80000000) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r5) 09:46:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3c14, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48b, &(0x7f00000005c0)={0x1, 'ip6gre0\x00', 0x1}, 0x18) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40, 0x0) syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x9, 0x20080) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0xcc4, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1e, 0x800, 0x0, &(0x7f0000000500)) bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x0, @remote}, 0xfffffffffffffe0e) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000180)=0x32, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000340)) connect$inet(r2, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_linger(r2, 0x1, 0x35, &(0x7f0000000300), 0xffffffffffffff64) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000001c0)={'vlan0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ttyS3\x00', 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000140)) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x81}, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000240)="f80bcb3e4353f42b5702ec1dff7a8d8cd21e2a2296707127eb9c39693789bb1bf511d6498098717aaa4e", 0xfffffffffffffe85, 0x0, 0x0, 0x1}]) preadv(r4, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/101, 0x65}], 0x1, 0x964) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280), 0x1033b) fdatasync(r7) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000480)={0x0, r3, 0x7}) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000600)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[]}, 0x1, 0x0, 0x0, 0x480}, 0x40) 09:46:22 executing program 0: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r1, 0x280080) sendfile(r0, r1, 0x0, 0x2008000fffffffe) socket$bt_hidp(0x1f, 0x3, 0x6) [ 275.058216][ T9973] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 09:46:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0xfffffffffffffe7f) io_setup(0x6, &(0x7f00000001c0)) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000180)=0x4, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, r2}) 09:46:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) getpid() r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc1105511, &(0x7f00000000c0)=0xb) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc4c85512, &(0x7f00000000c0)) close(0xffffffffffffffff) close(0xffffffffffffffff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000280)={0x0, 0xa, 0x4, 0x0, 0xff, {0x0, 0x2710}, {0x5, 0x4d4309801c125a3f, 0x7f, 0x0, 0x80, 0x80, "ca1a4c8a"}, 0x1a, 0x4, @planes=&(0x7f0000000200)={0x3fb, 0x0, @fd}, 0x49}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmmsg(r1, &(0x7f0000004b00)=[{{0x0, 0x3f000000, 0x0}}], 0x40000fb, 0x0) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="d93be93b5d2e809de8a1e5f6e96adfd78f95606e0636cab2f45e041ba7d95b5829518402ec3517b6af00867247b05d42fd720979465810801fdc3dda4816a19999caf687064d", 0x46, 0xfffffffffffffffa) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) lstat(&(0x7f0000000080)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$get_persistent(0x16, r5, r4) r6 = request_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000300)='trusted}proceth1}!eth0em18lovboxnet1@eth0em0^ppp0wlan1\x00', r4) r7 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)="699717e881f5f3f0e201dbde66477cd5cae5d6177f77f8dc1d74f4086625", 0x1e, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r6, r7}, &(0x7f0000000a00)=""/4096, 0x1000, &(0x7f0000000480)={&(0x7f0000000440)={'sha3-384-generic\x00'}}) r8 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) [ 275.303793][ T9972] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 275.303873][ T9972] FAT-fs (loop4): Filesystem has been set read-only [ 275.317653][ T9972] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 275.318018][ T9972] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 275.318219][ T9972] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 09:46:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) getpid() r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc1105511, &(0x7f00000000c0)=0xb) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc4c85512, &(0x7f00000000c0)) close(0xffffffffffffffff) close(0xffffffffffffffff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000280)={0x0, 0xa, 0x4, 0x0, 0xff, {0x0, 0x2710}, {0x5, 0x4d4309801c125a3f, 0x7f, 0x0, 0x80, 0x80, "ca1a4c8a"}, 0x1a, 0x4, @planes=&(0x7f0000000200)={0x3fb, 0x0, @fd}, 0x49}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmmsg(r1, &(0x7f0000004b00)=[{{0x0, 0x3f000000, 0x0}}], 0x40000fb, 0x0) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="d93be93b5d2e809de8a1e5f6e96adfd78f95606e0636cab2f45e041ba7d95b5829518402ec3517b6af00867247b05d42fd720979465810801fdc3dda4816a19999caf687064d", 0x46, 0xfffffffffffffffa) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) lstat(&(0x7f0000000080)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$get_persistent(0x16, r5, r4) r6 = request_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000300)='trusted}proceth1}!eth0em18lovboxnet1@eth0em0^ppp0wlan1\x00', r4) r7 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)="699717e881f5f3f0e201dbde66477cd5cae5d6177f77f8dc1d74f4086625", 0x1e, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r6, r7}, &(0x7f0000000a00)=""/4096, 0x1000, &(0x7f0000000480)={&(0x7f0000000440)={'sha3-384-generic\x00'}}) r8 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) [ 275.319351][ T9972] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 09:46:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) getpid() r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc1105511, &(0x7f00000000c0)=0xb) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc4c85512, &(0x7f00000000c0)) close(0xffffffffffffffff) close(0xffffffffffffffff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000280)={0x0, 0xa, 0x4, 0x0, 0xff, {0x0, 0x2710}, {0x5, 0x4d4309801c125a3f, 0x7f, 0x0, 0x80, 0x80, "ca1a4c8a"}, 0x1a, 0x4, @planes=&(0x7f0000000200)={0x3fb, 0x0, @fd}, 0x49}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmmsg(r1, &(0x7f0000004b00)=[{{0x0, 0x3f000000, 0x0}}], 0x40000fb, 0x0) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="d93be93b5d2e809de8a1e5f6e96adfd78f95606e0636cab2f45e041ba7d95b5829518402ec3517b6af00867247b05d42fd720979465810801fdc3dda4816a19999caf687064d", 0x46, 0xfffffffffffffffa) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) lstat(&(0x7f0000000080)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$get_persistent(0x16, r5, r4) r6 = request_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000300)='trusted}proceth1}!eth0em18lovboxnet1@eth0em0^ppp0wlan1\x00', r4) r7 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)="699717e881f5f3f0e201dbde66477cd5cae5d6177f77f8dc1d74f4086625", 0x1e, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r6, r7}, &(0x7f0000000a00)=""/4096, 0x1000, &(0x7f0000000480)={&(0x7f0000000440)={'sha3-384-generic\x00'}}) r8 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) [ 275.470742][ T28] audit: type=1800 audit(1579340782.391:33): pid=9987 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16567 res=0 09:46:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00002f5ff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000968ff6)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f0000000000)) dup3(r2, r5, 0x80000) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r6, 0x5381) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000080)={{0x9, 0x9, 0x5, 0xc8, 0x7f, 0x8e}, 0xffffffff, 0x9, 0x6, 0xbc, 0x4, "cfc6d3c2024aaac897acc32ef6f451f7712d8215d737d9da4d24603cc380b94f54016ac9c371277324ea71510394613693d3af1c8fd0f00b6350163577f9c1faf6df66246a0ae8e56a846ab91e3eb1c159dbe5e1d3bd4bbe625cb188170d42f10cc928af0a1fb1fa5d6ab6e63bbd94af6b546b52c10de06914aae72cf32afe9c"}) [ 275.473308][ T28] audit: type=1804 audit(1579340782.391:34): pid=9982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir341533701/syzkaller.wQatZd/13/bus" dev="sda1" ino=16523 res=1 [ 275.838870][ T28] audit: type=1804 audit(1579340782.761:35): pid=9977 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir341533701/syzkaller.wQatZd/13/bus" dev="sda1" ino=16523 res=1 09:46:22 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)) gettid() perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd96d2bb98b1e4214, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1}, 0x10161, 0x1, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0x7) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000100)=0x7) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x50, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087715082cf0400b0eb04002800160011000586f9835b3f2f009148790028f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004e00)={0x9, 0x1, 0x4, 0x97c9, 0x408, 0xffffffffffffffff, 0xffffffff, [], 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x3c) 09:46:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) gettid() r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000000c0)={0x0, 0x10000}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000008000)=""/144, &(0x7f0000012ffc)=0x90) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000001c0)={0x1, 0x1000}, 0xc) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(&(0x7f0000000140)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000280)={0x4, &(0x7f0000000240)=[{0x4, 0x0, 0x1, 0x100}, {0xb068, 0xc5, 0x0, 0x7}, {0xfff8, 0x3f, 0xd7, 0x3}, {0x5, 0xd3, 0x80, 0x3}]}) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-control\x00', 0x22000, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r7, 0x81204101, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 09:46:23 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x40000, 0x0) connect$l2tp(r0, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000000)) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000000)=0x5) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x800, 0x800, 0x101, 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200001a, 0x12, r4, 0x180000000) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_mcast\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x21, 0x0, 0x0, 0x41c1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040)}, 0x600b0, 0x7, 0x0, 0x2}, 0x0, 0x7, r5, 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) accept$alg(r6, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) 09:46:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3c14, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48b, &(0x7f00000005c0)={0x1, 'ip6gre0\x00', 0x1}, 0x18) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40, 0x0) syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x9, 0x20080) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0xcc4, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1e, 0x800, 0x0, &(0x7f0000000500)) bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x0, @remote}, 0xfffffffffffffe0e) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000180)=0x32, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000340)) connect$inet(r2, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_linger(r2, 0x1, 0x35, &(0x7f0000000300), 0xffffffffffffff64) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000001c0)={'vlan0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ttyS3\x00', 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000140)) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x81}, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000240)="f80bcb3e4353f42b5702ec1dff7a8d8cd21e2a2296707127eb9c39693789bb1bf511d6498098717aaa4e", 0xfffffffffffffe85, 0x0, 0x0, 0x1}]) preadv(r4, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/101, 0x65}], 0x1, 0x964) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280), 0x1033b) fdatasync(r7) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000480)={0x0, r3, 0x7}) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000600)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[]}, 0x1, 0x0, 0x0, 0x480}, 0x40) 09:46:23 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00', 0x8, 0x6095feb4c6236666) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000840)='./file0\x00', 0x1070c5, 0x8) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x600) sendfile(r2, r3, 0x0, 0x10000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r5, 0x4b61, &(0x7f0000000000)) r6 = getgid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$USBDEVFS_BULK(r8, 0xc0185502, &(0x7f0000000800)={{{0x8}}, 0x1000, 0x20, &(0x7f0000001a00)="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"}) syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000140)='./file1\x00', 0x400, 0x5, &(0x7f00000004c0)=[{&(0x7f00000003c0)="8a45e7b2570472487b2005ceeaff3c08271f9ce03102721a0bf909deb537cbd27da11b13e730c161c5317ef42b1a919468916088c57f6b10decfa17f7763442619619bab35a87e05ddc53f9ee105c7a0666279d615f25dc9a83eb609be469790a07ce74afba4e636bdd7ed4787f35d9bcf65cd7bec3365af86ad208a40f77233abcf35bec40d0f5719d13e6aff0590a5f1f503527fe7aa457f75c1d569b75a45892c90cf87ff304bdab0a020249b9f8f2d103e6c5c26f323fb88dd8e273ac1eccba28232c1f1d3999984d5c58c6ef1d0b2420259e304c1609b73417fa4684b4759f458203a92bbe95fa8e36c4b324c68", 0xf0, 0x7}, {&(0x7f0000000580)="708d7e9de0fceac9fb3e1239903344369c088c9fd1182e6489ee522fe16d7bb6c6d80ed02355ed6561af9313eb4584b8acafef16ae78af24c8d6c57673f2feba1b86bfca9eb2a167060f5649fc2829814064ba8647b1fa3cb5464f0c23a022a8ca27c6215e57b5684b95035c8f2f425a8712cbf9ccf06c3f23f3e2873d259d92e2cfd0a4783321ee26da896fe0613202d0c93e4152dca1336217b17bbef5c238ac0d0d32005eea49cae0dc907f587321af200acd650e61eb7227c2c4b2a74c74", 0xc0}, {&(0x7f00000001c0)="5dadadf27862165150e5cca16af4ed822503fcdc6401", 0x16, 0x1}, {&(0x7f0000000640)="0a7334b304c68467814a407a72b701fb9c89db3e7c610d4886c690cf207014bff7f0e5bb528e36979c0ba88f9daab87bfd4ce4b997cbe67c119d45630e4c4ec854e8d1df5c343053bba69dd26f728b8f36911bfa809e7f2dee0c20eb9c90c4543ff9e62958b977622beac008384036287cabf7826131e283c12c05dce406b1a5f74cc9ebc7fb2d016428126a23ea2d950b5d94bd906b32e48d92a25d66811ca9ae03bc3fbdc50ef56e6de6ff57144ec5cf93c4b656b73b11355fcc43e19f6abdb9b621c74dc4b25cb16774c816724cac130526", 0xd3, 0x7f}, {&(0x7f0000000300)="c9eed6148caca5f18cef0f0dc0578d82321ef1660537b2b22d137b6d64967b00d793ed2babeb5fb5d0d2329b290ed0a17fd111a3d20f03daa5f9c9d7", 0x3c, 0x74d}], 0xced2b21963fd141, &(0x7f0000000740)={[{@quiet='quiet'}, {@gid={'gid', 0x3d, r6}}, {@part={'part', 0x3d, 0x80000001}}, {@session={'session', 0x3d, 0xfffffffe000}}, {@quiet='quiet'}], [{@smackfsfloor={'smackfsfloor'}}, {@smackfshat={'smackfshat', 0x3d, 'fuse\x00'}}, {@fsname={'fsname', 0x3d, 'fuse\x00'}}]}) readahead(r5, 0x120000000, 0x5) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r4) sendmsg$key(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x1) 09:46:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x23, 0x5, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000100)=0x3, 0x4) sendto$inet(r0, &(0x7f0000000040)="38c6deb09791b91e0b0e7f3b77643aa4a9fd6e66f11e1a8bb5f861c807a80ca4178db37b", 0x24, 0x80, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000000c0)=0xfffff722) 09:46:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x19, 0x35, 0x7, 0x9, 0x1, 0xffffffffffffffff, 0x400, [], 0x0, r1, 0x2}, 0x3c) r2 = perf_event_open(&(0x7f0000001ac0)={0x5, 0x70, 0x3, 0x3, 0x7f, 0x80, 0x0, 0xbbdf, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000001a80), 0x6}, 0x10000, 0x4000000, 0x8, 0x0, 0x27a, 0x0, 0x4}, 0xffffffffffffffff, 0x8, r1, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffeb6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001a40)={r0, &(0x7f0000001940)="a2485a89167e972e", &(0x7f0000001980), 0x7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x18000000000002a0, 0xb9, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800008100638877fbac141421e9", 0x0, 0x100}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed0a8064d20010003d000080", 0x14}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x3}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000540)="a5be05794487985c1cb8de40406ba5c0d942c1646745430b09c5bd27df40fe23009d6b8d25b9ec885c68a9856f02f0eb2c2ecd24b832ad4cd448d943cf5dac7fb794721629f8948ddaa0dbeb7461e173a7a9d525fbc2b6f397577f0a746d6c14481d1c5cde918b8bd5c04ed86900f9f55382dc606474b29e79a8a7d5770929ea6fcf8d10666c6d0e9958194fbb5345767bd8ae862388af33e95d19736644", 0x9e}, {&(0x7f0000001600)}, {0x0}, {&(0x7f0000000100)="8470e47b62b77320b76e04f54216228af6f52b14bd8c8baccd836debec992f806c4f28b8e4", 0x25}, {&(0x7f0000001780)="c52df82d08f1d4cedb9ea93a3c7bdfe517ed4c61f61722dc1959bdcb122cf18d170fb3cf2f67624953b76b91e4ce27eaa445dfa0d1cfcada1686e5e002b6136282cfd2a98dd5bc233242210892ea9704a29bc3f685021d778667e19cf9ed8cfc6e361c675ad9c8958abf3cda887ca11330eeb5ec6005826f5a32d30ae36d772c247bf1e3845e448137572f8c219b9fd8782c80492e09a0966fa7ff9db564", 0x9e}], 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="2800b146a1b99700"/25], 0x28}, 0x20000001) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001b80)={&(0x7f0000001b40)='./file0\x00'}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed0a8064d20010003d000080", 0x14}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000001e80)={&(0x7f0000001bc0)=@nfc_llcp, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001c40)=""/97, 0x61}, {&(0x7f0000001cc0)=""/228, 0xe4}], 0x2, &(0x7f0000001e00)=""/102, 0x66}, 0x2000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x9d, 0x0, &(0x7f0000000080)="0000000000000000000000001000", 0x0, 0xdc}, 0x28) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={r4, 0xffffffffffffffff, 0x2}, 0x10) [ 276.396713][ T28] audit: type=1804 audit(1579340783.321:36): pid=10031 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir341533701/syzkaller.wQatZd/14/bus" dev="sda1" ino=16524 res=1 09:46:23 executing program 2: ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000000)={0x0, {0x2, 0x5}}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x100, 0x100, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) [ 276.506755][T10041] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 276.517481][T10041] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 276.533732][T10043] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 276.582424][ T28] audit: type=1804 audit(1579340783.371:37): pid=10030 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir069884858/syzkaller.Qdmh1t/13/file0/file0" dev="loop5" ino=28 res=1 [ 276.611951][T10030] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 276.612623][ T28] audit: type=1800 audit(1579340783.371:38): pid=10030 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="loop5" ino=28 res=0 [ 276.643119][T10030] FAT-fs (loop5): Filesystem has been set read-only [ 276.652278][T10030] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 17) 09:46:23 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@isdn={0x22, 0x80, 0x6, 0x1, 0x3}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)="3920240e8a9959b80b130b4db436e9aab3991ea51a1ee9cca1924f62fc1e089d7f6c78564a782a7f2f3433459971b12850301fe8a4005608535ea865e98b3ef1646171cad6e3c68ef1b656e90bbf94e5539d759cedfd26fef7815a86a06c3a081db1d415f79e5804f4fcc33706b897238c195a1a68442875e9f4f0932bbda53f89b87e7ff10e8357b9a54dbef859da082b22ae21ce922b26045a5be47dd293eeafaa52380c384862e8d29cd483bf4d2b4e4d8515ddd44a8424b6e031531634d181e164f4782ab5a7c09eb35d4f0f0a", 0xcf}, {&(0x7f0000000200)="e0bc42f39f7ec4e861a058c3dc104e64e693ea983a848be7e0b30ae90ac56942d829f150e65443789e42bfade743dba3edab8c2badb0c3fe868f7c9751ad98c74f02db7d024065e9811b77022ec6fef3b11eb5392ed0f25b1f9b0b94ac0da27a84d5098ce933a72e79eaf8647d2ad9cea4833d42ba26fc48f51a656255045aae168d5a4be190b65190f12895c547a36b31f188c170f5e83f08509b", 0x9b}, {&(0x7f00000002c0)="20035f0fd057280422228bf07c4e2b88ebdf6c821794153691c9d5a76fe391f31d5a5345f46192db505f4c0df4547d5b80f59575561c904a1daf9a2904ea729c888877914f56b4611ad55e65ecfa726a0c8401c8dbb984e9605ff7e58d9dcea8baece76912aa79fad032", 0x6a}, {&(0x7f0000000340)="6f76083f8ef70ccc6c448011e5bf792553be6db09d3f8c149b02f46acfeccdaeb08bcec1717a514446d284d99f2f63bd82ba971905b4d5ab6a851bae76fa72bb35cba01f50a35cd069a34dfdda336c3fe5a6d2514f928911f3347e40c0ab42413fb2e510a7ba21f0cada57cef4d1c5cbde649654a28c1b3ea3564d9ccd9d813e22318f257fbda027b303eda3c19f", 0x8e}, {&(0x7f0000000180)="4078e1c1114c0f718d128738a2046ea3aa81", 0x12}, {&(0x7f0000000400)="a988fbd75738556825622d767cb80ac711836e9d6995392fbf32aed5f6558f252929bbef8392a64858cc8939d0f8f69282737c1a87cc78353b953ef3904e5c9d6f30a75ba85ddd0d651e831dfe83669f690c042e6ddd51f323", 0x59}], 0x6, &(0x7f0000000500)=[{0xb0, 0x10e, 0x5, "1df12ace6878a22aedb0c69ef79249db6dca3c4bb9426e1703d54bc55cfeebc707a36f8dfcdcda1c478757258ecbf73ab9d18279f1543b797efa2cff611246b961d44a82c5d4e33cff0ce64f6fe767355e7a8b301bf5f43638e27d224c77bf652173b52b4c041c27e9d0ab72d71f1dcf6d379172b3223f3a424e1846eb541a4c235d19188fcfca567582991d29f369d725dd164757d83e6c92dfc6853d4280"}], 0xb0}, 0x3fe52b98cb1add21) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") 09:46:23 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2004010, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x600400, 0x5) fchdir(r0) creat(0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/snmp\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 09:46:23 executing program 3: getpid() r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) connect(r3, &(0x7f00000000c0)=@l2={0x1f, 0x0, {0xff, 0x7, 0x5, 0x3b}, 0x7, 0x8}, 0x80) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f00000003c0)={0x9, 0x1, "03"}, 0x0) r5 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280), 0x0) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) sendfile(r6, r3, &(0x7f0000000000)=0x7, 0x0) 09:46:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) pipe(0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0xcefc7a2a174aa530}], 0x2e5, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r4 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000140)) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f1eaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x8200, 0x2, 0x0, 0x27) 09:46:23 executing program 1: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='4\xacXrcO\b\xc4ut/eve\x94\xa1m\x1e\x12\x8ai,\xbeTnt#\x00', 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x3ff, 0x9) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46000000d2000000000001000003003e00000100000000000000000000400000000000000000001113000000000000001000003800025f137fa10aec2d5ff99fb8cdd2e2f210546848ba24a2044002c49aba76923f9f9ff725ab26d06c99b6953a837602b7cdb4fd68f0cb85b923fc4f2a864ab66a1528ea2b"], 0x39) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r2 = dup3(0xffffffffffffffff, r0, 0x180000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f00000001c0)=0x3, 0x4) 09:46:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8001, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r2, 0x4122, 0x0) 09:46:24 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vxcan1\x00', 0x20}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) close(0xffffffffffffffff) [ 277.597073][T10068] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.1 proc:/self/fd/4' not defined. [ 277.881716][T10078] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 278.064626][T10078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.100370][T10078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 09:46:25 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2004010, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x600400, 0x5) fchdir(r0) creat(0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/snmp\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 09:46:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x2, 0x9, 0x1fb, 0xfffffff4}, 0x14) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000a80200000000000000000000500100005001000000000000100200001002000010020000100200001002000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000300150010000000000000000000000000000000000000000c000737472696e6700000000000000000000000000000000000000000000000100000000626d0000000000000000000000000000bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f80100000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00009800c0000000000000000000000000000000000000000000280074746c000000000000000000000000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00000000"], 0x308) [ 278.358365][T10098] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:46:25 executing program 3: openat$vsock(0xffffffffffffff9c, 0x0, 0x20800, 0x0) pipe(0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000000)) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000000)) r3 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000000)) r4 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000000000)) r5 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000840)=ANY=[@ANYRESHEX=r0, @ANYBLOB="14627e9daa24f8167ba22283f72424bc11591b1f36fc7446ba98e6fe6a2cd45e010549a9a3076b1ed7db20d65795519b0cd541c5e3421210205329fe2476fa30964c3c0f18e97e6f22f4f9242fc28ce4e501f0172fa79b4b4d3ef977a9c0fade90bc0c910c0fdaeb015caac3921134beac7af152f571f638da343b3a42b7846f462f48725e400a66271d4df682de63501a456af126", @ANYRES64=r5, @ANYPTR64=&(0x7f0000000740)=ANY=[@ANYRES64=r2, @ANYPTR64, @ANYRESHEX, @ANYPTR, @ANYRESOCT=r3, @ANYRESOCT=r4]]], 0x3ae) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, &(0x7f0000000600)={0x800, 0xaf6, 0x4, 0x9, [], [], [], 0x5, 0x6, 0x1, 0x6, "1ac0b4ba995d7403cdf540b15f32c014"}) r8 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x2}}, 0xe8) sendmmsg(r8, &(0x7f0000000540)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)="0fbbefdfbfd0b128be2674cc06528fcce782b4bdf2ff8adcd375c82a2f3896f8f51085d86f6ddcc79465b3056011c83bc8e29734efe3463279c6431b08a740a0d104d50391134cc627d414c14ca39e3bfbeca326fdb7dd8cecad7e93f094e29ca6605c450d1b71fe648e81327db28586cafdb0d206cfae24c87e342a454ac1c588b44e69fe0eb0b54d2736ce95ea820430251c1edaad3a49932f87be1764c3f39298094470ad69f2ceeef054256df95334be6057ffd0b3f813ad8821950f6331d6a91ac7bb8ec757e7dc982127c028ed4c89e8dfba4328dd813e8c6a3a9a8247855e181b025a53438e7eee9d", 0xec}, {&(0x7f0000000240)="4705a7e0b1ed0c6468e50c0fff01b0744be65a1a4cca44fa49e4416b325080b0659ff3c85b2c7e40096e9754f08f8d6b6cd51faeee71b82d102480ed8ed6c59c0b0fdfacb0d0de81ee1d07d873cc", 0x4e}, {&(0x7f00000000c0)="1f03459fdd9164", 0x7}, {&(0x7f0000000580)="7906ce2e50c2f74783ef422edfe37909edf30c2cc5bf6c2705da35f2858e358481e8cc75ed1811115da6c19589df8c8e66e96c8c68696e02f880df49f29b80c460775bde791068b7e61ae92ff5ca84a70922e500933c15675b477747781120f76131b9e5d7d5c136fbc61b53099317a7fa3acf782f0f2d878369", 0x7a}], 0x4, &(0x7f0000000480)=[{0xa0, 0x3a, 0x7, "416af76ed3cd416f66c28744848394ee84022dc63149e42c2af2caaa431678687588b8cbf49475709b5b90765870354409314e8cc1aa6b84f0b254181a65a09c9df436dc896f9aa83f1c9f9743d8f189c2aa24a0872e30e62abd308ffd786fe3c8a11fa1b78a67568633d2d4e6ecb57a9901b16b311d6df92d2de7627cd6aa1ac286c3a32bdc46e329b1c37a6a7be4"}], 0xa0}}], 0x1, 0x8002) mknod(&(0x7f0000000000)='./file0\x00', 0x200, 0xc83) [ 278.419512][T10098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.436077][T10098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.455212][T10112] xt_NFQUEUE: number of total queues is 0 09:46:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getpid() r1 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='fuseblk\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x10, &(0x7f0000000600)={&(0x7f0000000540)=""/187, 0xbb}}, 0x10) 09:46:25 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1f, 0x80000, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000000)={0x5, 0x6, 0xfffffff9, 0x3b, 0x4}) r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x6, 0x440) getsockname(r3, &(0x7f0000000380)=@phonet, &(0x7f0000000200)=0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000400)={0x9, 0x8000, 0xac44, 0x1, 0x7, 0x50, 0x400}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x3579e74c87846e0a, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0)=r8, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) r11 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r1, &(0x7f0000000080)={0xc}) sendmmsg$alg(r0, &(0x7f0000000080), 0x49249fb, 0x0) 09:46:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xff8b, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="e8b7fe223bbf37b2f963063427fab2b47e603a0a725291ec2be67e4bc3f897bf6207e22f42b0f87596ce27bd56caf68f9525a279bd19c0266d8f69ff66e85e1d106311aa772c56319f5f20479a0e2761e70cd7785be378ebd762b9f8ce1372330bd95294f0f94df5d7a0dfef88a69175c4f7192440e28e52ef2266b71bc68da13a14f2455bf8bdffd0f4132c4a3c45ee17f983cc0702914795184fe430ef1bfad15202c076f1430a911cfbee292a8eff1cf1bab9bc824019ea16ed4b00c1f3b67d5f2d10c8fe7257770b3fed75acf3d778cca8aa8b31674f0c92b65317d8af610d443378f8ef677468c0832e0bb29d4c", @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x3}}, 0x0) 09:46:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x8e, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000200)={0x7, 0x7, 0x4}, &(0x7f0000000240)=0x28) read$char_usb(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0xe, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @local}, {0x2, 0x0, 0xfffffffffffffffd, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) shutdown(0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) 09:46:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x28) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8935, &(0x7f0000000200)={'veth0_to_hsr\x00', @ifru_mtu=0x5}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000024000505d25a80648c63940d0424fc60100009400a000000051982c137153e370907088000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) 09:46:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x248000009, 0x40000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xaf1a, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) write$cgroup_type(r2, &(0x7f0000000140)='threaded\x00', 0xffffff1f) [ 278.925182][T10110] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 278.974548][T10110] FAT-fs (loop4): Filesystem has been set read-only 09:46:26 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,up`erdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, 0xffffffffffffffff) getsockname$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x20) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYPTR], 0x8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x190000, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, {0x5, 0x8, 0x4, 0x7}}) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) creat(&(0x7f0000000700)='./bus\x00', 0x14) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) fstat(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x0, r6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) chown(&(0x7f0000000340)='./file1\x00', r4, r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000040)={@loopback, @multicast1}, 0x8) [ 279.108483][T10110] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000020) 09:46:26 executing program 0: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="a57e1ebe67fc0954244bc34ec25647e3c2274dda08244af1b4454dd6a3de40d25c2d8d303ae7596f2a4294cc5d4be69cfa4e6862c0d32a959f46f9dd4230f8f16409216ee06c099e2480c4272b2a9fcca67333417b0ed8a830918a3c5497f8f91e72574110bde2a5c04abcc51d065f4d76abe8251401ef16e4a1a2529c11de1730c68b279ede91a111ceb7a0aaf8dbe28707bf88e3594929b3cb11f5547dce9e574fb52391cbcee3", 0xfffffffffffffde7) r3 = accept$alg(r0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "c064d75ae30e392e", "0a3b861440ef310ad698b23dd0179da0", "a680f870", "b7a35750562d885a"}, 0x28) [ 279.165801][T10141] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 279.183710][T10141] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 09:46:26 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000b6687c59b00c13a"]) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_gettime(r0, 0x0) timer_getoverrun(r0) [ 279.227613][T10141] netlink: 16638 bytes leftover after parsing attributes in process `syz-executor.3'. [ 279.258563][T10145] overlayfs: unrecognized mount option "up`erdir=./file0" or missing value [ 279.392809][T10148] XFS (loop1): Invalid superblock magic number 09:46:26 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(0x0, 0x4000, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) syz_open_dev$dmmidi(0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r0) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) fstat(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x0, r3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) getgroups(0x3, &(0x7f0000000040)=[r3, 0xee00, 0xee00]) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{0x8, 0x0, r4}, {}, {}, {0x8, 0x0, r1}, {}]}, 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000140)) socket$alg(0x26, 0x5, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r5, 0x0, r6, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x3) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x10000, 0x0) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f00000002c0)={0x0, "3f7e1483cb3baf2dd54326fefbfae681407aa0095f710e0d6a8d18f03022ee40", 0xcfdd0138d1ace70f, 0x8, 0x7, 0x4}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) [ 279.582793][T10145] overlayfs: unrecognized mount option "up`erdir=./file0" or missing value 09:46:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0x200}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000003c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x7fffffff) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x40000000) [ 279.803239][T10148] XFS (loop1): Invalid superblock magic number 09:46:26 executing program 2: pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000150089031800000000000000000000001400010010000100090001006761637400000000ecd06915cb2e234d03aa6eb7659f938b45691e16409e3f7555040000004df557fb49d9dc1799c5a5b4548bf30985bec86077bb9087ecd99d0e073ed38112b34f7b11f4fedf2fd7e0f5f2f73944ea069be145497c"], 0xfffffffffffffdcb}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 280.016629][T10188] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 280.071471][T10188] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 09:46:27 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) personality(0x5000004) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x3, 0x4) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) close(r1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x26) r3 = getpid() sched_setscheduler(r3, 0x5, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000040)='sched\x00') r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x22300, 0x0) renameat(r4, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$CAPI_SET_FLAGS(r7, 0x80044324, &(0x7f00000001c0)=0x1) [ 280.120252][T10167] overlayfs: filesystem on './file0' not supported as upperdir [ 280.144360][T10188] netlink: 16638 bytes leftover after parsing attributes in process `syz-executor.3'. [ 280.161620][T10189] IPVS: ftp: loaded support on port[0] = 21 09:46:27 executing program 1: socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) socket$key(0xf, 0x3, 0x2) read$midi(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x80900, 0x0) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x17}, 0x1c) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000000)) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x0, 0x5, 0x4, 0x80000000, 0x5, {0x0, 0x7530}, {0x1, 0x8, 0x80, 0x1, 0xf8, 0x6, "bb34affb"}, 0x2, 0x1, @fd, 0x6, 0x0, r1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000180)={@hyper}) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000014000535d25a80648c63940d0124fc60100002400a600200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 09:46:27 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0x0, 0x1, 0xe7, 0x0, 0x6, 0x0, 0x4}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101000, 0x2) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:46:27 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x28) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8935, &(0x7f0000000200)={'veth0_to_hsr\x00', @ifru_mtu=0x5}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000024000505d25a80648c63940d0424fc60100009400a000000051982c137153e370907088000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) 09:46:27 executing program 4: r0 = fsopen(&(0x7f0000000080)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1100002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xffff, 0x1}}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffff8001, 0x1}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8}, 0x1) fsmount(0xffffffffffffffff, 0x1, 0xd) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000240)=0x3ff) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) [ 280.617706][T10207] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 280.646355][T10207] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 280.674696][T10207] netlink: 16638 bytes leftover after parsing attributes in process `syz-executor.3'. 09:46:27 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) personality(0x5000004) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x3, 0x4) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) close(r1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x26) r3 = getpid() sched_setscheduler(r3, 0x5, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000040)='sched\x00') r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x22300, 0x0) renameat(r4, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$CAPI_SET_FLAGS(r7, 0x80044324, &(0x7f00000001c0)=0x1) 09:46:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="01259378deb4000024e0020000000000000000003f316e1d0088d7f701668bf960eb5a3bbae19edfc8f152ac37c925aa60963037e88c0380655b4504ce34ced2aff35e1c907d0d448f7736aab9b939925be0c9badc7210b3d1d00f976c95ef5ea345b68522d0113c47816451f790a49072112c0de32c5d073288c849e30d1fbf321a41519c442c1d5c0f5b969d253b531db76c1a346361222486b7ff71fea7355a6cb6658d2c93b3a7296cde69d347d799bb27545da12a69b1f40d6e60f0d34fd354b937c5665ed613e17389b1d223d229b8bef108760c2db8c26c67e5065f784763ac39d927ba368a1316debaaeaae4cc7da4fd7f4f3378de7b3add552c7be12527eb1a9c41a8597d3be8a41213d6d5dc4f4bad0d8c3a44e0fd71126c69780c1195566ed01dabf4879d86afa758cae4", @ANYRES32=0x0, @ANYBLOB="000000000000000005000a000ff00000146c616e3100"/36], 0x3c}, 0x1, 0xf0}, 0x8000) 09:46:27 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) personality(0x5000004) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x3, 0x4) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) close(r1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x26) r3 = getpid() sched_setscheduler(r3, 0x5, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000040)='sched\x00') r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x22300, 0x0) renameat(r4, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$CAPI_SET_FLAGS(r7, 0x80044324, &(0x7f00000001c0)=0x1) 09:46:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = dup(0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="56138890b310d8a23cd8c4125c3f8376d72f68138af960480603", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB, @ANYBLOB], 0x5, 0x1) gettid() dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x227d, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r1, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r2}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, r2}, 0x30) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, 0x0) ioctl$IMGETVERSION(r4, 0x80044942, &(0x7f0000000080)) io_setup(0x83, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) [ 281.068258][ T422] tipc: TX() has been purged, node left! 09:46:28 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdir=./file1']) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000740)='./file0\x00', 0x4000, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000000)) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000000)) close(0xffffffffffffffff) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x7307}, &(0x7f0000000340)=0x8) [ 281.447717][ T28] audit: type=1804 audit(1579340788.371:39): pid=10241 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir782921644/syzkaller.jP2IeZ/18/file0/file0" dev="sda1" ino=16609 res=1 09:46:28 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x1e) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="240000001e0007041dfffd946f610500070000001f00000000000400080005", 0x1f}], 0x1}, 0x0) fcntl$setflags(r0, 0x2, 0x0) sendmmsg$alg(r0, &(0x7f0000000180), 0x572, 0x0) 09:46:28 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)=0xc5c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x43747b899a6978c6) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='oom_adj\x00') r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendfile(r3, r2, 0x0, 0x100001) 09:46:28 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001e80)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r2}}}], 0x28}}], 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$inet6(r4, &(0x7f00000010c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0x2a}, 0xfffff673}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000240)="4c852b47a9c916e2a33f24936f416f0603d71664a278a999190c678eb131f7eb222f2047212b789509b2d64e25c72ff2c2a8b0dba0d80af183011d401ce62d149907cffe3daa8f5b6ee1fe6421f22da39abd04999743c6a0807df9026b63f43d24f16daed19844bea3dec9a20d03ae1907485afb4b25c42e00e507e6320eea564c7aab2ae35bb2e1175a791827155f4a1e31826ae371c5f588a92bcb82e9bb8235fdaeb51ffc74fc631b0756b66f89be3b699ac3e77cfd1e65b0cad450b074f0d1adec6b5af2e8f894496affbc90bc8a2aab2936685757093025f0a1a94b84ea904d9f774965a6fde580363052e17538", 0xf0}, {&(0x7f0000000080)="daa7544564c28bf591535759b2ad03e93b95f8fd193914d2b9bfa5b58a61233aed0cfdb7185b20120d82925c74d4428633820e12a2b202db5621d7fc83ffef9da8700e8a8910568c402c1ce30a1523fdd892d164560b813b67", 0x59}, {&(0x7f0000001200)="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", 0x93}, {&(0x7f0000000400)="ef2c9d54c72a275dc718432701a4c00ffc0ba5bf648e6cd6b4ab24581eb6d7bc894d7fb946d411677d7614c5760d00dbcfb43ba959848701ee8894af3465bc1583b44a92f1eaa063ea98b1d11abd6e3cdaba9bf286aa2f044aa578477eb7c839bb7a40d8447fac01136f72ad62199dc2", 0x70}, {&(0x7f0000001140)="0ce912cb90a839df96b1fe37bd10cb96765be22f80d817a6d9983891d6712e0414b7861980af30dc1d70e73dd79564b5daddf620468b9c6289626f89e1511006596b67a87331941b0741cf8acd012501b6558386392b6c871f0896440eb7f69566ecb48d68377bf04faf33f99250a66a369a005a3c4a29d5b575a74c7d79d075288e89ea85e20581caf94fb4733b061f633126a1fbcabe00e84a001162", 0x9d}, {&(0x7f0000000540)="477f93ad1118494d40d6b7c4bd84f86ec1c6bb45db5f73e78ef3e19d54baa8b32f831b24c1db6e48c1b2e268f3c3c8498414594017bd79b340d96bce146d8ce470829394ece8d429fe719207d3e3d7a01b29b6fc107a839bf2a1595f1c7f203dccced5d2035bc51c75979eaf96c0bc7cb2dfa3d17045339b02d09f0b34752927b7896865c2dd4cebe960ccba9fe913e106ef0da7f17d332fccba18574b611f740c661e223d2995b285873a015a46a71c8795d37cf2", 0xb5}, {&(0x7f0000000140)="d39435c974c0385c507694eb97dc2dee5b0e665ed9f9be468dcf", 0x1a}, {&(0x7f0000000600)="2225cc906b5a51c83e78ad1231195c04dc2bdb6a9e7ded6c00d11e9bb51c8d6908e27752171cc17e06105c3ec778246ae72cc2fd9415f067771fd6676984d6ebdc778bd368cfc3ab85dbc9cc0eff5755aacc8d92904a963fc8fe2f56e7f913d2f62bbc6c92ca6b8cfacc8057fefac4b4fa7441496ecadbbd400ae1ac9aa9f15b042bfc2aa231a103df899704aa958cb1bc9edbb9a87916e96afed983a0e03c507a6f8b938398797f4bfb66d53666a4c0f9dae2d0688db58ee8bfbb19a129cc4f5a8e1d06a7cf09945a850667b01e12f297f6", 0xd2}], 0x8, &(0x7f0000000800)=[@rthdr={{0x48, 0x29, 0x39, {0x3c, 0x6, 0x6, 0x81, 0x0, [@mcast1, @rand_addr="fd14e9bb1b03fe433d78a832e62df353", @empty]}}}, @rthdr={{0x38, 0x29, 0x39, {0x2f, 0x4, 0x2, 0x80, 0x0, [@dev={0xfe, 0x80, [], 0x11}, @local]}}}, @hopopts={{0x68, 0x29, 0x36, {0x2, 0x9, [], [@enc_lim={0x4, 0x1, 0xe6}, @hao={0xc9, 0x10, @ipv4={[], [], @loopback}}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0xf4b}, @pad1, @enc_lim={0x4, 0x1, 0xff}, @enc_lim={0x4, 0x1, 0x80}, @hao={0xc9, 0x10, @rand_addr="bc473da792192fb27e9ff68e73fb5d8c"}, @pad1, @ra]}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x3c, 0x3, [], [@enc_lim, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x25}}, @ra={0x5, 0x2, 0x8000}]}}}, @rthdrdstopts={{0x78, 0x29, 0x37, {0x20, 0xb, [], [@ra={0x5, 0x2, 0x6}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x10, {0x0, 0x2, 0xa8, 0x6, [0x1ff]}}, @calipso={0x7, 0x28, {0x20f1e633d6e728ac, 0x8, 0x80, 0x9, [0x8, 0x2, 0x7, 0x81]}}, @pad1, @ra={0x5, 0x2, 0x9}]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x32, 0x2, [], [@jumbo={0xc2, 0x4, 0xffffffff}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}]}}}, @rthdrdstopts={{0x80, 0x29, 0x37, {0x73, 0xc, [], [@hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x80}, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x80}, @calipso={0x7, 0x30, {0x1, 0xa, 0x2, 0x3ff, [0x0, 0x100000000, 0xc0a2, 0x7ff, 0xc24]}}, @pad1, @enc_lim={0x4, 0x1, 0x8}]}}}, @dstopts={{0x88, 0x29, 0x37, {0x0, 0xd, [], [@ra={0x5, 0x2, 0xbd0}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfe}, @ra={0x5, 0x2, 0xffff}, @calipso={0x7, 0x28, {0x1, 0x8, 0x2, 0x800, [0x3, 0x7, 0x5, 0x3f]}}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0xc7e}, @hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x24}, @enc_lim={0x4, 0x1, 0x7f}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x11, 0x0, [], [@enc_lim={0x4, 0x1, 0x28}]}}}], 0x2f0}}, {{&(0x7f0000000780)={0xa, 0x4e24, 0x7, @ipv4={[], [], @multicast1}, 0x2}, 0x1c, &(0x7f0000000e00), 0x0, &(0x7f0000000e40)=[@hopopts_2292={{0x68, 0x29, 0x36, {0x16, 0x9, [], [@pad1, @calipso={0x7, 0x48, {0x2, 0x223, 0x3, 0x7fff, [0x91f9, 0x0, 0x6, 0xfffffffffffffff7, 0x1, 0x4, 0xb3, 0xfffffffffffffffe]}}]}}}, @hoplimit_2292={{0x14}}, @rthdrdstopts={{0x1a0, 0x29, 0x37, {0x0, 0x30, [], [@generic={0x3, 0x79, "307e8b0bc4ed5f0845c7caf8bfa93bd4bf9c127384020a9645d6f9f26e5d34081347afea14f4df9f71d3bd5899f00c87769ed0db598d45ec8ae736af1bf9f2cfb39deffe9684ddf35f1b70ee123b0424ab59f1d722940f64bde9ae2e30140e96efe3ea348673b0ffce2084d32bd4222b80b652d314b2428c2e"}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x7, 0xb7, "9708cc4eac32500bb393c024eb4932a24928348b2eb03c98b99aedcd836ba9bd651651da6b0854fb48e0698fab6435ee773e2e38a4cd5617e8a14937093e094d43f765c8e7e5303fb702262c164a1ce240ff4be18f8c12d92468db7bc9f851e78fbaecfee296229936eadc1b7f3b6264e59946c545063e272306b1cabf20a811ecab9c28c8c8e86d964b09d6ff94e996c51cb2aa87bea3bf26e4a5787b84da9ef174b1aea808797050a71e52207fb164f44dae62ecd441"}, @pad1, @jumbo={0xc2, 0x4, 0xff}, @pad1, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x1f, [0x5, 0x3ff, 0x4, 0x5, 0x6, 0x2000000000, 0x9]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0x81}}], 0x250}}], 0x2, 0x81) 09:46:28 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, 0x0, 0x0) clock_gettime(0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) recvmmsg(r1, &(0x7f0000001bc0)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x22, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x1}, 0x203}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001ac0)=""/1, 0x1}, {&(0x7f0000001b00)=""/50, 0x32}], 0x2, &(0x7f0000001b80)=""/36, 0x24}, 0x4}], 0x3, 0x100, &(0x7f0000001d00)) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000040500838c8b90762a5da31500000000000016bc894f01e1ee52b78d320000000000360902c2755340fba029a9a3cf300a4c9ec371e7444674b7d4dce553697367a1a54361a480", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000c000100626f6e64000000001400020008000200", @ANYRES32=0x0, @ANYBLOB="0800010001000000"], 0x44}}, 0x0) [ 281.632591][T10249] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 281.692910][T10242] overlayfs: workdir and upperdir must reside under the same mount 09:46:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r4, 0x405, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20020) write(r0, &(0x7f0000000000)="2600000013003ff1eb14c1f8030322ff0f1000e313000000093903680000000006000300123a", 0x26) 09:46:28 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdir=./file1']) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000740)='./file0\x00', 0x4000, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000000)) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000000)) close(0xffffffffffffffff) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x7307}, &(0x7f0000000340)=0x8) 09:46:28 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdir=./file1']) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000740)='./file0\x00', 0x4000, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000000)) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000000)) close(0xffffffffffffffff) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x7307}, &(0x7f0000000340)=0x8) [ 282.016787][T10269] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 09:46:29 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28841) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)={@broadcast, @broadcast, 0xad759bcbf91093c8, 0x2, [@dev={0xac, 0x14, 0x14, 0x32}, @broadcast]}, 0x18) [ 282.100988][T10278] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 282.135231][T10275] overlayfs: workdir and upperdir must reside under the same mount 09:46:29 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x9}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="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", 0x180}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x3, 0xfffffffd, @mcast1}, r6}}, 0xffffff07) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1, @rand_addr="ce2747261a22c30371cea54ed4f60d8f", 0x400}, {0xa, 0x4e21, 0x0, @rand_addr="aa9e7bdbdfc475d7a094d4a394a3a9c8", 0x80000000}, r6, 0x63a71e92}}, 0x48) 09:46:29 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000000)) r4 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000000000)) r5 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f0000000000)) r6 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f0000000000)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES64=r2, @ANYRESHEX=r3, @ANYRES64, @ANYRES16=r4, @ANYRESHEX=r5, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="f4074694a56c83919986646656a619ca5923eb1071047ad6166e69f7a4b50017a490"], @ANYRES64=r2, @ANYRES64, @ANYRESOCT=r6]]) 09:46:29 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x982c0) bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) r2 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) write$P9_RMKDIR(r0, &(0x7f0000000000)={0x14, 0x49, 0x1, {0x44, 0x3}}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x480000, 0x0) 09:46:29 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x522000000003, 0x11) prctl$PR_SVE_GET_VL(0x33, 0x6d4d) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000800), &(0x7f0000000840)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000700)=""/220) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x1f8, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000280), {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev, 0x0, 0x0, 0xe, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x7f, 0x0, 0x7f]}}, {@mac=@random="d79568389544", {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x40, 0x5, 0x400, 0x7, 'veth0_vlan\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0xe}, @mac, @empty, @rand_addr=0x7fffffff, 0x8, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x26}, @broadcast, 0xff000000, 0xffffffff, 0xb, 0x3, {@mac}, {@mac=@broadcast, {[0xff, 0x1fe]}}, 0xfffe, 0x0, 0x73a, 0x1ff, 0x1ff, 0xff, 'xfrm0\x00', 'lo\x00', {}, {}, 0x0, 0x10}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7f}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7, 0x3f}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname(r5, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000000)=0x80) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0xf22f, 0x4) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f00000008c0)) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfd3d, &(0x7f00000001c0), 0x6f}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_S_FREQUENCY(r9, 0x402c5639, &(0x7f0000000200)={0x67, 0x0, 0x2}) syz_init_net_socket$x25(0x9, 0x5, 0x0) 09:46:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x8000000000001e, 0x4, 0x0, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x200) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x7ff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000001c0)) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@loopback, @rand_addr="b3ffadac825170675d5e96e14627ed30", @mcast2, 0x0, 0x9, 0x0, 0x400, 0x8}) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000500)) r1 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000040)=0x7fb, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x4, 0x0, 0x7, 0x36, "beaf79dd7c1a2dada5c930543af9837b01408f349cc00e8f85e20d86f7d9c28eec688abcc5191c453a01626e8750eecfbc0ef61b6cd929d8cc89254735a84a13", "9bbc65c024aff5606be0d72c679a990264066faaf04cff67da827a0cc658d5d4", [0x0, 0x101]}) listen(r1, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) listen(r3, 0x9) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x3, @loopback, 0x7fffffff}, 0x1c) r4 = accept4(r1, 0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00'}) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) 09:46:29 executing program 4: open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) preadv(r0, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/196, 0xc4}, {0x0}, {&(0x7f00000003c0)=""/54, 0x36}, {0x0}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000640)=""/42, 0x2a}], 0x7, 0x8) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x8, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r1 = creat(&(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, 0x0, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) close(0xffffffffffffffff) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = socket(0x15, 0x80005, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf000) r4 = socket(0x15, 0x80005, 0x0) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf000) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000180)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000440)=0xffffffffffffffab) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@remote, @in6=@rand_addr="c5b6adf5ecdbe6357de5631a24fb1caa", 0x4e23, 0xe338, 0x0, 0x6, 0x2, 0x20, 0x80, 0x89, 0x0, r5}, {0x0, 0xfffffffffffffff7, 0x8000, 0x3f, 0xffff, 0xffffffff80000000, 0xfffffffffffffffd, 0x4}, {0xab, 0x2000000000000, 0xbbf7}, 0x6, 0x6e6bbd, 0x0, 0x0, 0x3, 0x2}, {{@in6=@remote, 0x4d5, 0x33}, 0xa, @in=@rand_addr=0x2, 0x3506, 0x1, 0x2, 0x3, 0x40, 0x8001, 0x5}}, 0xe8) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x62ae80000000000, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) pipe(&(0x7f0000000700)={0xffffffffffffffff}) sendto$inet(r6, &(0x7f0000000740)="20048a927f1f6588b967481241ba7860d46ef65ac618de05970895abeaf4b4834ff922b3f1e0b02bd67aa03059bcec5c25a3a07e758011948444ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfffffdc0, 0xe, 0x0, 0xfffffffffffffe2b) dup(0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) [ 282.668307][T10304] x_tables: duplicate underflow at hook 1 09:46:29 executing program 3: fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x10) r0 = syz_open_dev$mouse(&(0x7f0000001580)='/dev/input/mouse#\x00', 0x4, 0x40000) write$P9_RATTACH(r0, &(0x7f00000015c0)={0x14, 0x69, 0x1, {0x1, 0x3}}, 0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r2, 0x5453, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000001600)={0x3, @default, r3}) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe869") 09:46:29 executing program 2: perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff, 0x3905150a}, 0x0, 0xfff, 0x8004, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000140)=""/126, 0x7e, 0x100, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x1410}], 0x0, &(0x7f0000000280), 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) 09:46:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000080)=""/109) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x96}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x7, 0x1}, 0x6) 09:46:29 executing program 1: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) 09:46:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x4, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8001}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) accept$nfc_llcp(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x41800) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000040)={0x5, 0x0, [{0x101, 0x3, 0x0, 0x0, @irqchip={0x80000001, 0x100}}, {0x2, 0x3, 0x0, 0x0, @msi={0x9, 0x6, 0x3, 0x100}}, {0x101, 0x4, 0x0, 0x0, @irqchip={0x9, 0x100}}, {0x0, 0x205f93a12f5e30aa, 0x0, 0x0, @irqchip={0x6, 0xffffffff}}, {0x2, 0x3, 0x0, 0x0, @irqchip={0x100, 0xba01}}]}) 09:46:30 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0xa}, 0xc, &(0x7f0000000040)={0x0}}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x185a00, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000300)={0x8, 0x7, 0x4, 0x10000, 0x9, {r2, r3/1000+30000}, {0x3, 0x2, 0x8b, 0x80, 0x8, 0x9, "829fe43a"}, 0x101, 0x4, @planes=&(0x7f0000000080)={0x200, 0x20a7, @mem_offset=0x40d9, 0x7}, 0x8, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x2000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000003c0)={r4, 0x36, 0x7, r5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x90000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3496957a", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYBLOB="1bf3403688227208ff17b28eea8722aaba32dc9e40dd6f059381f4d025099a7e442157312ade8a4aa754c4ee0152da34839b88e235f69df89ce046c431dc33ecb0d5f63ef45e5e5320738e99bccdc9d4c98641e50420d919bdf24816ed01bcaecd6ed8c2bece74f6fd6f89296ff35e2d616d5b6bb5ae664c08f5331f6f08cc96fcbbb3491158881d0b8f5fddeb7e341cf80f85229a3ad0ee254d46f52c1165bc8ec7caef18e6415c33379fc3"]], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000440)=[0x1, 0x3], 0x2) r11 = open(&(0x7f0000000400)='./file0\x00', 0x8000, 0x0) fcntl$getown(r11, 0x9) [ 283.186968][T10335] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended 09:46:30 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x41800, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f00000002c0)=""/27, &(0x7f0000000300)=0x1b) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0xfffffffffffffeb7, &(0x7f0000000080)={0x0}}, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0x81a240) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="000000ebffffffff13001400a4000000000073ace81b000000000000"], 0x34}}, 0x0) [ 283.318120][T10335] EXT4-fs (loop1): unsupported descriptor size 0 09:46:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x8000000000001e, 0x4, 0x0, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x200) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x7ff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000001c0)) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@loopback, @rand_addr="b3ffadac825170675d5e96e14627ed30", @mcast2, 0x0, 0x9, 0x0, 0x400, 0x8}) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000500)) r1 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000040)=0x7fb, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x4, 0x0, 0x7, 0x36, "beaf79dd7c1a2dada5c930543af9837b01408f349cc00e8f85e20d86f7d9c28eec688abcc5191c453a01626e8750eecfbc0ef61b6cd929d8cc89254735a84a13", "9bbc65c024aff5606be0d72c679a990264066faaf04cff67da827a0cc658d5d4", [0x0, 0x101]}) listen(r1, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) listen(r3, 0x9) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x3, @loopback, 0x7fffffff}, 0x1c) r4 = accept4(r1, 0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00'}) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) 09:46:30 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) fsopen(&(0x7f0000000040)='openpromfs\x00', 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x3}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKFRASET(r2, 0x1264, &(0x7f00000000c0)=0x99) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000080)=0xc4, 0x4) r3 = open(0x0, 0x0, 0x0) renameat2(r3, 0x0, 0xffffffffffffff9c, 0x0, 0x0) ioctl$void(0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x3) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0xfffc, @dev}, 0x2}}, 0x2e) sendmmsg(r4, &(0x7f0000004b00)=[{{0x0, 0x3f000000, 0x0}}], 0x40000fb, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1204f) 09:46:30 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000440)='cpuacct.usage_sys\x00', 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f0000000000)) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f0000000240)={0x0, 0x9, 0x6, r6, 0x0, &(0x7f0000000200)={0xa00906, 0x4, [], @p_u8=&(0x7f0000000140)=0x7a}}) sendmsg$kcm(r7, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)="f2d27c689a62a0fbd142153620b8b726dcfc9056557a372612927f53432cfb88dea09a87137a041618f1ee70aae8c0678228ef9159ec976f833e219476433b9a7d58b7a6a879ad694482f044148757c2f4a5d784be6a0271a25bcdb28326551667709884e9982f20f4db0ce66f62eeb4979cfed60f4f0ba29d9a9a963ec960eabb2595b450498e1879f8ee7fc1d615ae08fcae6154360d2807309580ef0c930523d96abb5b0110dcc5adb53772097e0e", 0xb0}, {&(0x7f00000004c0)="98b227d406047ebbe21a955d677cca5d247031a9110c0cf02995af75107c8d09b5e7ee2f10295b47dbcda639094553432694dfdb33accc520a836a9796e6657ccacfb779ddf1f601a39d9ab1ba917aab6e9346c5581715ff013855d5868a8776503fec7cc33bd2cefd72e006ac80f8450a3b6968131b23e70226c1a0501425c2b7f8deb1d085cb05714fab6862e57d74a730daed1a9330adbbf2a965907dc7d79c4b59bf8d46332a69ec2c6100a440c9c575700d535cb2", 0xb7}, {&(0x7f0000000580)="bda5ae74ab514faf9d4d421ce8569ec40fc0c65ca70270d86bed000f198e686fb912e79bfece83a4c025c3b4ea155456f10ea92a7391d3d719798ce08c7b705fd9878a4cf3f1f1dc5a2b6537cc1e3234785825a8fa82c75059b53130af479dae1603e67c6521f334e91297a0c112b2a487e6f60b", 0x74}, {&(0x7f0000000600)="25c5a9041423f2350ca70bab2401ea45c613a41e303ea90d6e2adced61591c397c42917d6e78b0f13165b1d5a409661e4c56d2ba0375de6d9f40e76577173b4498abf580cb913b30b69889cbab41b4234e7e24a1a26c3add6592f3d20db2d76a86", 0x61}, {&(0x7f0000000680)="91311a9e16a2d25d3c17eece1e353e14c328866826d85a5763f92f71ffeb5490cf5c694b22a3533dfc35961e40ac961fe6db0688227046844f0f3365cab4b366330a580086857642ef4c395b5c6fda713e30ae04abaa53903f53a477fd512a6a45a52f2adcaeb3024e02f7503ed98b1ce7ae3efe97b5efeefae578da8a0b7b204043b28d95232cefc1a6d092175bfc52cccb4585660e01bf0c111a723cc2018c8f8f40d489b936eff2b985b29832eeb034a9a3e1429fac2f848ebd4546d7f06acce6751c17ec393ed219f2ce60504995fb2a5bca878fcc2da0", 0xd9}, {&(0x7f0000000780)="4ff568dec6f49e731c145164f380cd2332c8bb1edc136c09d7efa1cf1eef6749032ab2d16ef577be47fd28da37897da721006eb6d093d4b839c75c63d7e7858215e38e552ac22abfbefb5fe4dfda4a6f5d7baf90639e59dc2c2950d336413fd288a8c0b143cdde2d4ac3c15aaa12c72c437b853831397ca8abefe75bc063f369354a896ea2eceba1ad103bd15716efefd0bcdf709d700f1b563dae584217c86dc04b2de7ce2ca4b3bc3c63649a4b342878d74e970896e1779c56e98896c417a8fe055b0b6c5a33b53e79f69dbedb95be336286b677a5e3", 0xd7}, {&(0x7f0000000880)="626163838d5dcc12bece3cb01a03bbc92af922768099a0723c2737ea18aa946f12e13855e1422816827a4542c709e18b764993c2f562c0628d099fd8a743fb030a5c8851e2f2e9dccdd042cf4979b1e29bc5d109352e5ca748e2101702e6e924eb8a3354c2f9e9b37ddc2f8184061dea9c006c3e05d2d9e79d91cb0830c900a661d6fc1b1ee21a53fc7a219ecf0f74b5f4fc15ea648e50", 0x97}], 0x7, &(0x7f00000009c0)=[{0x98, 0x1, 0x0, "7c4dbd0855166a4cd8924a7d4c2373ae32119f735f4d962854127907689fcb8788eedb254dafcd07bb31bfa97baa8dd8360819566b13c3d5b4c72302c1b374ceb1ffdd2b3d82a2609768fc1298d8d5cf1f7318d8769a3c1a5edf5f920a36f06253920f5dcccb5ba6cfbf457899b0635bd3cb37572ea57c7bafb1b8aab824de9b510a"}, {0xd0, 0x117, 0x3, "5ed38809e8f89d24684e458ac82e18e34a825bad343125c2ee1c98e0ac30fd31f3fc160e037b24d78c027ae6b08b195d1120538e4f7c054c1214c885331ad22262bda32622234a324978068b4b0b95ea183d029a1555c842c564856a7b4dde510a5557c93e51abd672d88e8da7a6ff158513eb7d3467b9027fb858963cf240e817ce588a299e4d2cbf25a93f04115aa6e1240bf83147f52dc98910c1e8130dd9ec487915f7e66a8ab5b04d26e3e85b107db1eccdaabeb0da08afe1a102fe8ae5"}, {0xd0, 0x88, 0x1, "1f094257e46e593cc83955bea147188728bc0cf09b63624de052234fefce6a3b6ac226fcf3d1dbc82cc89417643ffdd1212e6bee1c0e527013c4c9e1f3b39a144c611404b649f5989fb1e6fdf92fd5a9784006a80e80085df06c6894ab7866c17c7772c75f925780a36bcf8de2a6c9b294e96b5543573496d428f0ee427449ffe12fc789e5049a1384684b39cdac8ebbce952d960b34acfff7fdd6b8554b653c2dad7750e8ae93a639bc282d79a6b4a7d80659899bdb561d21ab90"}, {0x28, 0x110, 0x3, "51ca09efa62e4522fcf7a74d6211ca0a2f93bf"}, {0x108, 0x11, 0x401, "11396705d74f1c35579d500c939c515cfb6bfa3d262d8be4c23c21b46aee4188b8fed079cebb93b153c0a308e1086edad9c91defdd41dc3a3614583a2eead5cf2d499d9e9b71f79c82d0789e5eb4ff34e2ea837802d286e8526dafcf82212113a1f41f7656fbabb45e279d8f1ec4b813cabf73946cf00757a099b244706bb0837bc66076d40c903bbceb6010f6b3546fa226bc8823456145a2160d6735d0e7decd0c80bfdf33778ffc88e8b98ca4fb7d066fa21bf21983fcad10e18e8f5a34292299a771e445e95daba844e5c4a1aab5e0ffba7b209a58631fb69abb2fe56c9db1dd2116ad1403754f4879e91672443ecf469b43107af23a"}, {0x1010, 0x101, 0x3, "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"}, {0xe0, 0x10c, 0xffffff85, "3f2a4856a41ae77d2cb3e87263f70c11bc0a5d369128dc9ab48ded9a80605c2d529f49177363b9a1491dc33bf51b914574489a2b75d342fb19bda61a4018ed583abe6c5a2d6ab126675570f4a0d0bc6305aa51a8c3ac575ed6bce61b1b2cf6848510f1f4cceef7387b79e3cf1824c9c602a3c61d33d26b4532f4fe0e64a7ef271149fa03adcef5d28e38e35c5068f45585fffd56e4f65f26c043111bf9e31bcc2fd54f7fad980b0303d013cc9e6f25fb14dcaa908e11ee5cecb431bafe0e0dead16b896529482df56956eb9f"}, {0xe8, 0x0, 0x2, "8f747d84db5019f4c52f0007df11af5a0e2e6a983c90f9ccd71f1484ddd7507909dcd55e08b151d7d2c61a84b62c43e0324dbc268819191090dcf89f83a2ae3f52d835f53312109752056af185ee8dfc93bdf2b97eb6ffcc9a11f552e742f85eb20e5a0240ecf6728a21031d4e05a6bd8be92968f606817e54bf5b1fe3bd183390aabd2576411868f1838039d8c8554b29f9889a66a1bdec5b8fca8fc11aa65cfb497d2299baf6255b164227fd0e1e175c89110ee00dff4775cbbfaf890d7f02b60d2a85f3dff98b2741191c8fca8581b55c78596ced3146"}, {0x50, 0x2, 0xfff, "2d01850f6efd7a857da1fbfdb5f7280b470d60c08159e679dd738bedf26fe95b682f1d75657859b0cf323073fde60911f5c230764da42ceed9a8d8b6bd"}], 0x1590}, 0x880) recvmsg(r3, &(0x7f0000005a80)={&(0x7f0000004400)=@can, 0x80, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f0000001fc0)="1522030f43585375b5531d4aeea01e41b0ef1765d71438c36c89543b812e1e97fbed5401cc7bf48942f6c2eaafdbcd5b806ed47cd77329895930f16df4ba462bf760882dff3a95baef196b7b4b93eaa37688d7ff", 0x54, 0x8000, &(0x7f0000002040)={0x1a, 0x205, 0x3f, 0x40, 0xe5, 0x8, @remote}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0xffffffffa0008000, 0x2e, 0x0, &(0x7f0000000040)="a34747e865af5cf11e34bdff7a7a5ba0051aae5804d5a05d9b9ff68e12bb4d43a20375ea905795449b957e956aa6", 0x0, 0x401}, 0x28) socket$kcm(0x2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 09:46:30 executing program 4: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x8001}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000c00)="b2", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x0, @empty=0xc6120000}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)="16", 0x1}], 0x1}}], 0x2, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) ioprio_set$uid(0x3, r3, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bind$rds(r6, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000000000)) fgetxattr(r4, &(0x7f00000004c0)=@random={'user.', '$\x00'}, &(0x7f0000000c40)=""/4096, 0x1000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x800, &(0x7f00000001c0)={[{@index_off='index=off'}, {@workdir={'workdir', 0x3d, './file0'}}, {@default_permissions='default_permissions'}, {@index_on='index=on'}, {@metacopy_off='metacopy=off'}, {@index_on='index=on'}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}], [{@subj_user={'subj_user', 0x3d, 'mime_type^'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-vboxnet0procvboxnet1cpuset&'}}, {@hash='hash'}, {@fsmagic={'fsmagic', 0x3d, 0x8000}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@obj_role={'obj_role', 0x3d, 'cgroup,,'}}]}) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000440)={0x5, 0x3, 0x9e, &(0x7f0000000380)="bf9c18950ff1f96684a000779173e70e5d3d24fd23fc10eb5dc8baabb8e623bed81f6553fff947e591ae85e533e6bbedf7d2b13b92106e347ece2116535fe68540b2cdc8325516b7913786f2621a8aed24146e0ee80ebc0aadbc8dc5c8489e924f7cb02f0b922528c2845bcaa515fce8045e7e3e5f1a076d94573b06b39206e9f0f3b8e394823c40aaf7c82cd973d20229d1230ae620b9ab7c380b0045ab"}) 09:46:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000240)={0x1, 0xffe2, 0x0, 0x0, 0x7, 0x0, 0x0, 0xeb, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x10, 0x5, 0x10) setsockopt$sock_attach_bpf(r4, 0x10e, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x10e, 0x2, &(0x7f0000000000), 0x4) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='+cpu/'], 0x5) write$cgroup_int(r0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000400)=0x3, 0x21f) gettid() socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VFIO_CHECK_EXTENSION(r6, 0x3b65, 0xb) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x42000, 0x0) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f00000002c0)=0x1) write$cgroup_int(r7, &(0x7f0000000200)=0x1000000000, 0xfd89) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000180)={0x5, 0x4, 0x3, 0x6, 0x13, "7ea4fbe22f372bc7151310fc220003163b7154"}) 09:46:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x3d57e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write$fb(0xffffffffffffffff, &(0x7f0000000080)="a0c40fbfa21c0ebbc9e756ed661a7944cba6cbd27d3745216a428b7592167c222b888754fca0999665a65e25249c7382db3cec9b1d0edf8b8ad2b008311be76073c1496d8180761a9b4989962bccc91c29601fa38324bc3da0c4bbdbb57d3e463c973467148739cc2a5f42bda7ad0ff8fabbeefd487d637ea31e557718cffefd599a01cc64f68c5e37b8809f9a326e", 0x8f) r4 = dup3(r3, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@getneigh={0xfffffffffffffe96, 0x1e, 0x2, 0x70bf27, 0x25dfdbfd, {}, [""]}, 0xffffffffffffff73}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 09:46:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x0, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r4, 0x405, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x20, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xc91, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x240000a4}, 0x40848) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x1d4) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, 0x0) dup2(r0, r1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "502b9fdf57dcfe21", "4efcf0cd78ac0fd9d43071201668cd682130965022e378a8a5a7f1e9e3f733bb", "cb5d5d48", "03c24f2867ca3439"}, 0x38) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff5d, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 284.118635][T10396] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 09:46:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc028aa03, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETVAL(r1, 0x0, 0xc, &(0x7f0000000640)=""/171) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000200)=[0x800]) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, &(0x7f0000000380)) close(r0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x910) getresuid(&(0x7f00000004c0), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',fscache,cache=mmap,smackfsroot=/dev/dmmidi#\x00,obj_rol']) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) lstat(0x0, &(0x7f0000000180)) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfff}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240)='gtp\x00') r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) r8 = socket(0x100000000011, 0x2, 0x0) bind(r8, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4c57660af3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf205bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}]}, 0x40}}, 0x0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r4, 0x300, 0x70bd35, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0xffffffffffffffe4, 0x1, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048010}, 0x20) 09:46:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) write$P9_RGETATTR(r4, &(0x7f0000000340)={0xa0, 0x19, 0x2, {0x80, {0x10, 0x1, 0x5}, 0x0, r6, r7, 0x8001, 0x7ff, 0x8, 0xffffffffffffff62, 0x6, 0xffffffff, 0x70d3, 0x3ff, 0x6, 0x200, 0x4, 0xfffffffffffffffe, 0x0, 0xc28, 0x76}}, 0xa0) sendfile(r1, r2, 0x0, 0x10000000000443) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) [ 284.252115][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 09:46:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000200)={{0x1, @name="20dea1e158efe7c8aa31638dfae2f20e798c4bc6dba452d6ff29f2cbf4159159"}, "6cc072685abb55372b7c9a719dc7a642abf37a387f0eefc265fbe1d345dd2a84", 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_PIE_OFF(r1, 0x7006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000140)={{0x2, 0x4e22, @broadcast}, {0x0, @broadcast}, 0x82ffc398666d5923, {0x2, 0x4e21, @local}, 'vcan0\x00'}) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 09:46:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x8000000000001e, 0x4, 0x0, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x200) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x7ff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000001c0)) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@loopback, @rand_addr="b3ffadac825170675d5e96e14627ed30", @mcast2, 0x0, 0x9, 0x0, 0x400, 0x8}) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000500)) r1 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000040)=0x7fb, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x4, 0x0, 0x7, 0x36, "beaf79dd7c1a2dada5c930543af9837b01408f349cc00e8f85e20d86f7d9c28eec688abcc5191c453a01626e8750eecfbc0ef61b6cd929d8cc89254735a84a13", "9bbc65c024aff5606be0d72c679a990264066faaf04cff67da827a0cc658d5d4", [0x0, 0x101]}) listen(r1, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) listen(r3, 0x9) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x3, @loopback, 0x7fffffff}, 0x1c) r4 = accept4(r1, 0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00'}) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) 09:46:31 executing program 2: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2004010, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000000)) fcntl$setflags(r1, 0x2, 0x1) fchdir(r0) creat(0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x10000, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) fchdir(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/snmp\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_GET_SPEED(r4, 0x551f) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f00000000c0), 0x8080fffffffe) 09:46:31 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x448080, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000380)={@nl=@unspec, {&(0x7f00000001c0)=""/240, 0xf0}, &(0x7f00000002c0), 0x4d}, 0x1a2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0x800, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FBIOPUT_CON2FBMAP(r3, 0x4610, &(0x7f0000000600)={0x1a}) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x200) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, ',\x00', "b8d5e838ab7cb1d02b30a05c6eb8391f0920126148d3f0d32c95b2b7a139c441", "b54782a9", "b10245002c00"}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x7, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4020) sendto$inet6(r1, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000001680)={0x0, @phonet={0x23, 0xff, 0x5f}, @can={0x1d, 0x0}, @tipc=@id={0x1e, 0x3, 0x6, {0x4e20, 0x1}}, 0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)='batadv0\x00', 0x5, 0xffffffff}) read$usbfs(0xffffffffffffffff, &(0x7f0000000440)=""/235, 0xeb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$bt_hci_HCI_DATA_DIR(r10, 0x0, 0x1, &(0x7f0000000640)=0x6, 0x4) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000001700)={@dev={0xfe, 0x80, [], 0x26}, @mcast1, @dev={0xfe, 0x80, [], 0x2c}, 0x7, 0x6, 0x811f, 0x100, 0x8000, 0x80000, r8}) 09:46:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x208000, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x100, 0x6b0, [], &(0x7f0000000100)=0x7d}) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000380)='./bus/file1\x00', &(0x7f00000003c0)=@known='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x84, &(0x7f0000000680)=[@in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e21, 0x5, @remote, 0x81}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e22, 0x5, @rand_addr="489a9831ebc0c89ec2ce1cb0b90925f2", 0x8}, @in6={0xa, 0x4e21, 0x0, @mcast1, 0x180000}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000340)={r5, 0xfff, 0x101}, 0x8) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) [ 284.829654][T10410] device veth1_virt_wifi entered promiscuous mode [ 284.873686][T10428] [ 284.877922][T10428] ********************************************************** [ 284.925593][T10428] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 284.928996][T10410] device veth1_virt_wifi left promiscuous mode [ 284.966149][T10431] overlayfs: unrecognized mount option "lower#½r=./bus" or missing value [ 284.990022][T10428] ** ** [ 285.010052][T10434] QAT: Invalid ioctl [ 285.050969][T10417] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 285.063304][T10428] ** trace_printk() being used. Allocating extra memory. ** 09:46:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x409200, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x3}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000040)={0x0, 0x8, 0x80, &(0x7f0000000000)=0x2}) [ 285.119286][T10417] FAT-fs (loop2): Filesystem has been set read-only [ 285.149449][T10428] ** ** [ 285.160762][T10436] overlayfs: unrecognized mount option "lower#½r=./bus" or missing value [ 285.202206][T10417] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000020) [ 285.220721][T10428] ** This means that this is a DEBUG kernel and it is ** [ 285.267880][T10428] ** unsafe for production use. ** 09:46:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x1, 0x40, 0x10001, 0x3, 0xdde}, 0x14) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe8697071") setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'dh\x00', 0x32, 0x5, 0xfffffffe}, 0x2c) 09:46:32 executing program 0: 09:46:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x100000}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x5) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000000)={0x0, 0x4000, 0x0, 0x0, 0x4}) fanotify_init(0x0, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) getpid() openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000040), 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000000)) fchdir(r1) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x0, 0x7f, 0x3f, 0x5, 0x2, 0x6, 0xfff, 0x181, 0x40, 0x23e, 0x40, 0x2, 0x38, 0x1, 0x8, 0x2, 0x1}, [{0x5, 0x1ff4, 0x3ff, 0x5, 0x0, 0xfff, 0x6, 0x800}], "ba61d1ec3cb6745e8d7cac563d56d6f9a7aed2907e8f6ffd19", [[], [], [], [], []]}, 0x591) [ 285.359052][T10413] device veth1_virt_wifi entered promiscuous mode [ 285.370360][T10428] ** ** [ 285.380015][T10413] device veth1_virt_wifi left promiscuous mode 09:46:32 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e00"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0x180}, 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getpeername$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10) [ 285.432873][T10428] ** If you see this message and you are not debugging ** [ 285.460624][T10428] ** the kernel, report this immediately to your vendor! ** [ 285.551586][T10428] ** ** [ 285.562511][T10424] [ 285.598021][T10424] ********************************************************** [ 285.606532][T10428] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 285.668110][T10428] ********************************************************** [ 285.695212][T10459] mkiss: ax0: crc mode is auto. [ 285.695301][T10424] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 285.695309][T10424] ** ** [ 285.695316][T10424] ** trace_printk() being used. Allocating extra memory. ** [ 285.695321][T10424] ** ** [ 285.695326][T10424] ** This means that this is a DEBUG kernel and it is ** [ 285.695331][T10424] ** unsafe for production use. ** [ 285.695337][T10424] ** ** [ 285.695343][T10424] ** If you see this message and you are not debugging ** [ 285.695349][T10424] ** the kernel, report this immediately to your vendor! ** [ 285.695354][T10424] ** ** [ 285.695360][T10424] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 285.695365][T10424] ********************************************************** [ 285.796967][T10457] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0xdcc/0xec0 [ 285.808637][T10424] ------------[ cut here ]------------ [ 285.814365][T10424] WARNING: CPU: 1 PID: 10424 at kernel/tracepoint.c:243 tracepoint_probe_register_prio+0x217/0x790 [ 285.825027][T10424] Kernel panic - not syncing: panic_on_warn set ... [ 285.831641][T10424] CPU: 1 PID: 10424 Comm: syz-executor.1 Not tainted 5.5.0-rc6-next-20200116-syzkaller #0 [ 285.841526][T10424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.851591][T10424] Call Trace: [ 285.855040][T10424] dump_stack+0x197/0x210 [ 285.859395][T10424] ? tracepoint_probe_register_prio+0x170/0x790 [ 285.865718][T10424] panic+0x2e3/0x75c [ 285.869630][T10424] ? add_taint.cold+0x16/0x16 [ 285.874411][T10424] ? printk+0xba/0xed [ 285.878413][T10424] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 285.883886][T10424] ? __warn.cold+0x14/0x3e [ 285.888321][T10424] ? tracepoint_probe_register_prio+0x217/0x790 [ 285.894579][T10424] __warn.cold+0x2f/0x3e [ 285.898833][T10424] ? report_bug.cold+0x63/0xb2 [ 285.903611][T10424] ? tracepoint_probe_register_prio+0x217/0x790 [ 285.909978][T10424] report_bug+0x289/0x300 [ 285.914505][T10424] do_error_trap+0x11b/0x200 [ 285.919107][T10424] do_invalid_op+0x37/0x50 [ 285.923533][T10424] ? tracepoint_probe_register_prio+0x217/0x790 [ 285.929851][T10424] invalid_op+0x23/0x30 [ 285.934017][T10424] RIP: 0010:tracepoint_probe_register_prio+0x217/0x790 [ 285.940983][T10424] Code: 48 89 f8 48 c1 e8 03 80 3c 08 00 0f 85 bf 04 00 00 48 8b 45 b8 49 3b 45 08 0f 85 21 ff ff ff 41 bd ef ff ff ff e8 29 76 fe ff <0f> 0b e8 22 76 fe ff 48 c7 c7 a0 a2 be 89 e8 26 09 76 06 44 89 e8 [ 285.960593][T10424] RSP: 0018:ffffc90001b37438 EFLAGS: 00010246 [ 285.966660][T10424] RAX: 0000000000040000 RBX: ffffffff8aa0c360 RCX: ffffc9000543b000 [ 285.974640][T10424] RDX: 0000000000040000 RSI: ffffffff817721a7 RDI: ffff88808f1f4a18 [ 285.982720][T10424] RBP: ffffc90001b37490 R08: ffff88804f34c2c0 R09: fffffbfff137d455 [ 285.990772][T10424] R10: ffffc90001b37428 R11: ffffffff89bea2a7 R12: ffff88808f1f4a10 [ 285.998762][T10424] R13: 00000000ffffffef R14: 00000000ffffffff R15: ffffffff817b2890 [ 286.006799][T10424] ? probe_sched_switch+0xa0/0xa0 [ 286.011848][T10424] ? tracepoint_probe_register_prio+0x217/0x790 [ 286.018106][T10424] ? tracepoint_probe_register_prio+0x217/0x790 [ 286.024359][T10424] ? probe_sched_switch+0xa0/0xa0 [ 286.029411][T10424] ? probe_sched_switch+0xa0/0xa0 [ 286.034450][T10424] tracepoint_probe_register+0x2b/0x40 [ 286.039926][T10424] tracing_start_sched_switch+0xa8/0x190 [ 286.045573][T10424] tracing_start_cmdline_record+0x13/0x20 [ 286.051297][T10424] trace_printk_init_buffers.cold+0xdf/0xe9 [ 286.057268][T10424] bpf_get_trace_printk_proto+0xe/0x20 [ 286.062825][T10424] cgroup_base_func_proto.isra.0+0x10e/0x120 [ 286.068820][T10424] sysctl_func_proto+0x6b/0x90 [ 286.073596][T10424] ? cgroup_dev_func_proto+0x20/0x20 [ 286.078958][T10424] check_helper_call+0x123/0x4920 [ 286.084064][T10424] ? kasan_unpoison_shadow+0x35/0x50 [ 286.089363][T10424] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 286.095247][T10424] ? check_mem_access+0x3860/0x3860 [ 286.100471][T10424] ? kasan_krealloc+0x84/0xc0 [ 286.105240][T10424] ? krealloc+0xa6/0xd0 [ 286.109417][T10424] ? push_jmp_history.isra.0+0x1a9/0x260 [ 286.115106][T10424] do_check_common+0x675b/0x9680 [ 286.120146][T10424] ? debug_check_no_obj_freed+0x20a/0x43f [ 286.125898][T10424] ? find_held_lock+0x35/0x130 [ 286.130683][T10424] ? lock_downgrade+0x920/0x920 [ 286.135547][T10424] ? rwlock_bug.part.0+0x90/0x90 [ 286.140593][T10424] ? check_helper_call+0x4920/0x4920 [ 286.145919][T10424] ? kfree+0x226/0x2c0 [ 286.150074][T10424] ? kvfree+0x4a/0x60 [ 286.154065][T10424] ? kfree+0x226/0x2c0 [ 286.158147][T10424] ? lockdep_hardirqs_on+0x421/0x5e0 [ 286.163442][T10424] ? trace_hardirqs_on+0x67/0x240 [ 286.168481][T10424] ? kvfree+0x4a/0x60 [ 286.172480][T10424] bpf_check+0x84ed/0xbb07 [ 286.176913][T10424] ? __kasan_check_read+0x11/0x20 [ 286.181971][T10424] ? do_check_common+0x9680/0x9680 [ 286.187096][T10424] ? lock_downgrade+0x920/0x920 [ 286.192148][T10424] ? ktime_get_with_offset+0x135/0x360 [ 286.197695][T10424] ? bpf_prog_load+0xe11/0x17f0 [ 286.202655][T10424] ? ktime_get_with_offset+0x135/0x360 [ 286.208128][T10424] ? lockdep_hardirqs_on+0x421/0x5e0 [ 286.213432][T10424] ? trace_hardirqs_on+0x67/0x240 [ 286.218545][T10424] ? calibrate_delay+0x6d5/0xd72 [ 286.223554][T10424] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 286.229907][T10424] ? bpf_obj_name_cpy+0x13f/0x190 [ 286.234948][T10424] bpf_prog_load+0xeab/0x17f0 [ 286.239733][T10424] ? bpf_prog_new_fd+0x60/0x60 [ 286.244520][T10424] ? lock_downgrade+0x920/0x920 [ 286.249399][T10424] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 286.255738][T10424] ? security_bpf+0x8b/0xc0 [ 286.260262][T10424] __do_sys_bpf+0x1535/0x4130 [ 286.264963][T10424] ? bpf_prog_load+0x17f0/0x17f0 [ 286.269928][T10424] ? __kasan_check_read+0x11/0x20 [ 286.275047][T10424] ? _copy_to_user+0x118/0x160 [ 286.279833][T10424] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 286.286088][T10424] ? put_timespec64+0xda/0x140 [ 286.290874][T10424] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 286.296561][T10424] ? do_syscall_64+0x26/0x790 [ 286.301252][T10424] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 286.307331][T10424] ? do_syscall_64+0x26/0x790 [ 286.312022][T10424] __x64_sys_bpf+0x73/0xb0 [ 286.316452][T10424] do_syscall_64+0xfa/0x790 [ 286.320971][T10424] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 286.326871][T10424] RIP: 0033:0x45aff9 [ 286.330767][T10424] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 286.350377][T10424] RSP: 002b:00007fd975974c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 286.358801][T10424] RAX: ffffffffffffffda RBX: 00007fd9759756d4 RCX: 000000000045aff9 [ 286.366932][T10424] RDX: 0000000000000048 RSI: 0000000020000080 RDI: 0000000000000005 [ 286.374912][T10424] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 286.382890][T10424] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 286.390873][T10424] R13: 0000000000000064 R14: 00000000004c173d R15: 000000000075bfd4 [ 286.400566][T10424] Kernel Offset: disabled [ 286.405037][T10424] Rebooting in 86400 seconds..